<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="15823">
<package pkgid="063bf08cb884951645f3bb3ab209a11768d5fac9c7f03920836d363d9bc88bc3" name="389-ds" arch="src">
  <version epoch="0" ver="1.3.4.5" rel="8.1"/>
  <changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
  <changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
  <changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
  <changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
  <changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
  <changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
  <changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
  <changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
  <changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
  <changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
  <changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
  <changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
  <changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
  <changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
  <changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
  <changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
  <changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
  <changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>
</package>
<package pkgid="6e141875ce81e213d1e98d7f00bb722fb814ba06da043049f7a911a23882907e" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.3.4.5" rel="8.1"/>
  <changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
  <changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
  <changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
  <changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
  <changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
  <changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
  <changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
  <changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
  <changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
  <changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
  <changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
  <changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
  <changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
  <changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
  <changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
  <changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
  <changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
  <changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>
</package>
<package pkgid="e4a37fedfeddb49f86423c085930457f6e07c14f0600c977ffceb762bf16bbfb" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.3.4.5" rel="8.1"/>
  <changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
  <changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
  <changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
  <changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
  <changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
  <changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
  <changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
  <changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
  <changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
  <changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
  <changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
  <changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
  <changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
  <changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
  <changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
  <changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
  <changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
  <changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>
</package>
<package pkgid="03c2254e34108571e7f21a71594215fe2fd23a24ed84aa13e27b26e36a917e7c" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="102.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
</package>
<package pkgid="50de374241b360b80602bcd9df18d28f9f7fd75f55e02076983bacea639bbfc6" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="102.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
</package>
<package pkgid="eb60bff8effc4faa2e9a576adb92fccebde96e4fe9448f426694a96b95051dc3" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="105.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="2995f2560a64361572d2ed2dcd16b3654ac899cd94b564de7027f59cff73a069" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="105.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="5513404a6e8dc5a160991fce16595ee1baa9c90ff0df9ee1b9a2a585e0ba7769" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="108.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
</package>
<package pkgid="047597e2ba97bf2ccec493f06d5ea18057072772d2621808b305d756e6814820" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="108.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
</package>
<package pkgid="e1d5394b1fa4d86b81822d67524062687300104655edebc50059dc03bd0b3431" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="111.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="3fe633dc92eb1237cb9faa7b0686c46a69843121b13e88fa13240aa7697dc560" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="111.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="153521d0ca46b65ee2ede0351f5ab5200d1511247f647e21c48653148fc06136" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="114.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
</package>
<package pkgid="bcbc872b2b3e2377bb97634015ee91b69e1d2ccdcc10f88e03bc85db504e241c" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="114.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
</package>
<package pkgid="d2432de6115a9591b3a028ab840e323aa51808aada3c30721e0be612a03e7395" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="117.1"/>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="6182441c7e6cf0e644c3fce1744e39022dd6b7dc7ff8f63b1e166d2d7b343208" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="117.1"/>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="cc7e9dbf9015d1bc2509c601a9d7b34292a3b0bfa640e7dbc3249f505e969403" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="120.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
</package>
<package pkgid="0e4418d268ff8046d4e70b6b13bd104718d411b2f44573539c3d150bc7aa1fdd" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="120.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
</package>
<package pkgid="0aecc018f6e3d07c7c8e486046224fc50b0b902206943dd993f40df59ced1a60" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="123.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
</package>
<package pkgid="e9107d6988d12c0ec79c1232040277e6588d6a4113d31a2206f0de6a6160ea95" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="123.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
</package>
<package pkgid="1ecf61101cf545fa9d0077b8ec6fa55b1179527ec7a4f006d00d64fd08d35f63" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="126.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
</package>
<package pkgid="8495c64891cc6131ee6d1775e5a90f808cd11f73570854f4d2b3b1a7928d533f" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="126.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
</package>
<package pkgid="cf95b0e3d1aae3141bdaf7c26ca7b8fa42489e587c301a5129773eeef9bef658" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="17.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="a26ce0f7e70f44a8d8f774e897c72ee180060a96dba6bd0753c0cd76cb43f94e" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="17.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="1caf92b3c33654afe0a2f2161c289e88925ce7eb707d74133c7c300ed490740a" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="20.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
</package>
<package pkgid="e85ededb899bd9b3513c4b16837ca82690057ac496f8f72c1060d580ab254b39" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="20.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
</package>
<package pkgid="e2c3a7579bd86a60b5ba818ce97a47e7cab38e75d333017ac7ee9da4d2be7349" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="27.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
</package>
<package pkgid="099b2977cd0546e46420317b9a834844f8877f0833d2cdc5d28e776363be4077" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="27.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
</package>
<package pkgid="6c6adce88ed29b124b672fb75c6cf44229655c50b47792cb65beaaea122bc9ef" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
</package>
<package pkgid="ac19df1233ce2f0f4512a41450968a22fa407156b68e4a3874a05a13ea7ce0ab" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
</package>
<package pkgid="04ade38e8a8bcf24a2e8d4a70aa6cf7e8e59af6ae6c606ce59e1643814217ec8" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="39.1"/>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
</package>
<package pkgid="578d6a91b892bf75ac631db69ca74ff62ec797e00a284e8d17f1b07adc103fb2" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="39.1"/>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
</package>
<package pkgid="c0ec566719ac3d966cfd373be7b2a81f77ec7f1718fe301b71bf9e330ee6db0a" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="44.1"/>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
</package>
<package pkgid="ed82c39123251b6c1c6a86e37a1f46874648f0fd75906726056a7330f4ad7c44" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="44.1"/>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
</package>
<package pkgid="3f0b10075fc82345bdd3587942a9ff66424c1e1a55274077c22209b6d9c30c5c" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="47.1"/>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="020c82cb140d2de4170b1c793487cfdf33ad93c611a9b1431106a0fb5dd77255" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="47.1"/>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="8d10c83b3cf1dc78e5ed20bdab5eeafef29ef37915ca99023298fa8933fad1a2" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="50.1"/>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
</package>
<package pkgid="3c8f1b1fd13e822c9166cff706db958e22fcde432efab879da1a6bd8ca9ff6b0" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="50.1"/>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
</package>
<package pkgid="8695941a7dfd61e45e84bbf863a42a55b9ed27beeda98424e823b35e137580ed" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="57.1"/>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
</package>
<package pkgid="81133e58b892e8ae12b6e301ce6760797ad2e2d767e2052c55828f03f17625b9" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="57.1"/>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
</package>
<package pkgid="d3921b4b20a8a2db4fca1f3dbc5e504d8cc073674970c04ad342d16d0d1d5e40" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="60.1"/>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
</package>
<package pkgid="46bbb551554e79ed952a36e243af806440b160ce1d0649813555635516815278" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="60.1"/>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
</package>
<package pkgid="9d83ec69427b5b8405f6a196e0188543aeff6593a6316a318697c9bdedd6a2bd" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="63.1"/>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
</package>
<package pkgid="6a29367e5981172aec33a3f3f1bd587e0743130ad858f14c0a4ee163695a5da2" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="63.1"/>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
</package>
<package pkgid="7246e5478f19daa3f9ebb24b4abecf180ed2bfa9e2cb1bbe6f5171550fbe395e" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="68.1"/>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
</package>
<package pkgid="4a7454a48510e81c9d660e4c01618b55d1afe009f7a5f2226c41ad28a1274802" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="68.1"/>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
</package>
<package pkgid="b844a5b66d681c1cdc9b3b767760be24f6921339b2f14d78db233982ab639fe9" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="71.1"/>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
</package>
<package pkgid="d453e544c3481f496859b49ab44920b8aa08d1d2e4c105fc1bafb4936747c3a1" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="71.1"/>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
</package>
<package pkgid="ec52c14435da3b83e6a4ca73d75bed6b746354eb0035a9458640a0f9c970a6b9" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="74.1"/>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
</package>
<package pkgid="24dc28b6168427e64efa0063b822b5ecf573743e9135366e1d9402fc41af7e79" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="74.1"/>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
</package>
<package pkgid="2969ad85e42ae6492197f7bf4e93ff1c431443b6fad13aa7d23401738a0b9240" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="79.1"/>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
</package>
<package pkgid="c5f5efcddb422eaabd6cd0737179f506062b5728353a63f1763d0512384af30d" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="79.1"/>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
</package>
<package pkgid="7c668cce782a4209695a8da77cbfc3d51473caf266baef385df4ce65dba965c1" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="82.1"/>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
</package>
<package pkgid="f59e1547a922980d4ce14a08422cbaa82cfab2ab30bd84588262c00b71117c6c" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="82.1"/>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
</package>
<package pkgid="97650061f36bc892ff6a7b9366394f55e8af387567857bfa3830137ecab13552" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="87.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
</package>
<package pkgid="d78936a9b1ebcce23885abfc50ef4565e828816ae0f8f1d7e17433e57b0099e6" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="87.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
</package>
<package pkgid="e5ec8df847ea95e8decf696d53da34cda58747d270572a40de3b879180a85f7c" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="90.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
</package>
<package pkgid="3fc3d1d248582c2aca1c56e1143233415e6561423243d66b49a8b8fcfdc38e91" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="90.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
</package>
<package pkgid="104fa2bbbe43e7cac1a5abd7fdfd5733c6d00c039377ae7b004528cd5af7f0d5" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="93.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="a75da015f401469bdbad74429874fed7a7fdaf5bc32ae98c9e22db4938563eb1" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="93.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="8c225d9fc444547f6e832d4bac0890c64f0ae957e859ff48daa306a1f349ca31" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="96.2"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="1d957ca36a05e4db37ab1e5e42bd87bd786767f1de6f53f6daed2ac0c52e0a01" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="96.2"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="3bca609f7ab7cf3658579942287ffd68df2790d7c761f6a613640e2758a8fb4a" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.25" rel="99.1"/>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="2df04b496355e717d2c19671631b0501addd565e1838191aa4d9bcc273e9c383" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="99.1"/>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="2679f6ee2b4a26db1dd8d4cac36036cc351b53f65a94270e79e68530446cf978" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="102.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
</package>
<package pkgid="b160c6916cefbeb37c0cb668b9f62b3ba8f1a1d0fc432216f28f132ec86c439e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="105.1"/>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="14d8dacddc02a0b7a24ac8ab7c3af53c141395e436caa24130ce44ddb8348674" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="108.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
</package>
<package pkgid="747c997d7a50d7dc2adb3fd2f4a6f84022be050ec0c66e783a7d7b0a20659891" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="111.1"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="c4557c9b718fefa397f0b8f3ad5d064f5fa218e007abf8e75f7185a3d2555f4e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="114.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
</package>
<package pkgid="2ccfba9ef6049da2293af4403cc158aacefb6ecdc46ed7b5d5200be27cfe268e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="117.1"/>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="770bd6a57c9a834a6f73ffb7fc7debc4b6c329dc8ef5ec141c6971435c2ac7ab" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="120.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
</package>
<package pkgid="7ee85cc3894a2f0cc66e85eeb667996b7a0f270d77093f450a21b3919b4036a8" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="123.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
</package>
<package pkgid="1e336e415f39ed8d82b2a91a72986d6c95cbfec3f7fd3183f0de66e2c10d9c98" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="126.1"/>
  <changelog author="pgajdos@suse.com" date="1524571200">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update
  * CVE-2018-16323 [bsc#1106855]
    . GraphicsMagick-CVE-2017-13776,13777.patch renamed to
    GraphicsMagick-CVE-2017-13776,13777,CVE-2018-16323.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + GraphicsMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * GraphicsMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + GraphicsMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540296000">- security update (tiff.c):
  * CVE-2017-10794 [bsc#1112392]
    GraphicsMagick-CVE-2017-10794.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">-  security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + GraphicsMagick-bmp.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
</package>
<package pkgid="24e95523d98033aad5d0a11f4d231a79040ccbbcfa26bca07231bae374e1bb3b" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="17.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="aef4fe72a5cd6a547317db79610108c98c6b9284a7464e5c5d1677873443a731" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="20.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
</package>
<package pkgid="59df3dbcc5527d8d2c1eed0b74d60ddc8d7fd39fe3cb902a119b5627f6b034cd" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="27.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
</package>
<package pkgid="37f0101f1c06d96a6a0b4aa1787112378a0ca19e5ed320868fb6ced848304a5f" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
</package>
<package pkgid="c70f8f210b7ae62c1f12e5c382bd322f04429b13653a395092453a4cac4b7ca4" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="39.1"/>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
</package>
<package pkgid="7c71821640e0e43fda4345676541bc0aef20354d4b9df5099ddca394ec4c150b" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="44.1"/>
  <changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
</package>
<package pkgid="fe7ef882e9854786520f28a083cd1b4a173e44f12263f6cd62306477726fa30c" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="47.1"/>
  <changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="2f1eca43456804b1c321e697a7fbfcc36b4f505349416c6faa59aef05a541915" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="50.1"/>
  <changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
</package>
<package pkgid="42c814e2ef2514d1ad7086fb8f423f5c196d408f07b1f7e7e42c97ecf72b8dd3" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="57.1"/>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
</package>
<package pkgid="c7cb1df714efaf93c0fab45fc656d4d7039942393c88f58138f8a60001195370" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="60.1"/>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
</package>
<package pkgid="004116def9b4b19d573121de400c7636b03648e11423fb834d05b55c78ca1f48" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="63.1"/>
  <changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
</package>
<package pkgid="bcd042c27515fd3598e7b7759108ce72867350c505fbff4eb2af2316e55aabe6" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="68.1"/>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
</package>
<package pkgid="66a1705f1e55bc28124a21f7143f84f41dba2fda0917e81004ba486bbd6de8b2" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="71.1"/>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
</package>
<package pkgid="efa68da918cdce87c4c2276318fb511b3866cf17d644159cba9a9a177cb4c63c" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="74.1"/>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (pwp.c):
  * memory leak in pwp.c [bsc#1051412]
    + GraphicsMagick-pwp.c-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894401">- security update (render.c):
  * CVE-2017-16547 [bsc#1067177]
    + GraphicsMagick-CVE-2017-16547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (mpc.c):
  * CVE-2017-11449 [bsc#1049373]
    + GraphicsMagick-CVE-2017-11449.patch
  * CVE-2017-11532 [bsc#1050129]
    + GraphicsMagick-CVE-2017-11532.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
  + added GraphicsMagick-mat.c-update.patch, 15288:5c4bd14a370c state
  of mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
</package>
<package pkgid="bb98b0772ba656a01058b2f82b65c4b7dcbec040d135dd3335b497d8d1a93c15" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="79.1"/>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + GraphicsMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
</package>
<package pkgid="b0f4f8d29f2b4e4776504658ee3a088a9f36a61b24874f67d1369b3c8dce2759" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="82.1"/>
  <changelog author="pgajdos@suse.com" date="1516104000">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-11722 [bsc#1051411]
  * CVE-2017-18219 [bsc#1084060]
  * CVE-2017-18220 [bsc#1084062]
  + added GraphicsMagick-png.c-update.patch, 15288:5c4bd14a370c state
  of png.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + GraphicsMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- GraphicsMagick-CVE-2017-13063,13064.patch a renamed to
  GraphicsMagick-CVE-2017-13063,13064,13065.patch as it also
  fixes CVE-2017-13065 [bsc#1055038]</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- security update (tiff.c):
  * CVE-2017-17912 [bsc#1074307]
    + GraphicsMagick-CVE-2017-17912.patch
  * CVE-2017-18028 [bsc#1076182]
    + GraphicsMagick-CVE-2017-18028.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + GraphicsMagick-CVE-2017-11450.patch
  * CVE-2017-11140 [bsc#1047900]
    + GraphicsMagick-CVE-2017-11140.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
</package>
<package pkgid="9f260099d650bf385d997d99a95aa084780cabaa07c4b707278ccc706d641de1" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="87.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (cmyk.c):
  * CVE-2017-17502 [bsc#1073081]
    + GraphicsMagick-cmyk.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177601">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
</package>
<package pkgid="caac9d808465d6493aadfec1a46209309942cbf5355ca0941ccbfa2bc24efa87" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="90.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- update dcm.c to newest code</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
</package>
<package pkgid="7dd95d910aa4b3ac45ca6be2f930a599fa9e8fe117407105f877ade98a07ff8c" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="93.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (gray.c):
  * CVE-2017-17503 [bsc#1072934]
    + GraphicsMagick-gray.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609601">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="e3fd5a62e09ec8e30a1727be47f187a35a19479a9f0c9dc3d1381eee6d67bf10" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="96.2"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + GraphicsMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="a774726e59994f7744f4bbfa873ccfe322a6fd99313beb2b74549218eb47ef64" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.25" rel="99.1"/>
  <changelog author="pgajdos@suse.com" date="1518696000">- security update (pcl.c):
  * CVE-2017-11637 [bsc#1050669]
    + GraphicsMagick-CVE-2017-11637.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">-  security update (rgb.c):
  * CVE-2017-17500 [bsc#1077737]
    + GraphicsMagick-rgb.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128001">- security update (wpg.c):
  * CVE-2017-17682 [bsc#1072898]
    + GraphicsMagick-CVE-2017-17682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128002">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + GraphicsMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + GraphicsMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + GraphicsMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + GraphicsMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + GraphicsMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + GraphicsMagick-CVE-2017-14314.patch
  * CVE-2017-14505 [bsc#1059735]
    + GraphicsMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (cineon.c):
  * CVE-2017-18230 [bsc#1085233]
    + GraphicsMagick-CVE-2017-18230.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + GraphicsMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + GraphicsMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + GraphicsMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524571200">- GraphicsMagick-CVE-2017-8353.patch renamed to
  GraphicsMagick-CVE-2017-13066.patch [bsc#1055010]
- GraphicsMagick-CVE-2017-11532.patch renamed to
  GraphicsMagick-CVE-2017-11641.patch [bsc#1050623]
- GraphicsMagick-CVE-2017-18028.patch renamed to
  GraphicsMagick-CVE-2017-18229.patch [bsc#1085236]</changelog>
  <changelog author="pgajdos@suse.com" date="1524571201">- security update (core)
  * CVE-2018-6799 [bsc#1080522]
    + GraphicsMagick-CVE-2018-6799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + GraphicsMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + GraphicsMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security udpate (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + GraphicsMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="7bb116c7e9c5ebba8e99e35fc2af2fe075c9f7e04ad9601b6745af0288b55e4f" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="f3a9b4899c14520394a7a70faed74f8fca17f020a1aa9a5c82d5d6fc3b2aad65" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="bdc17b26b9d242020aad7c3e15625464603f2f1df253cef2e41c1d9886c6385a" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="aa2a3b27a7ac6ce1fa0c9b1aff4ba1b1af7ef8064671b6aff3eb3cfe93d19524" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="795fd3801fa792611dbb12ccf5a76752ea5705d12514f0cdd8fdda8e5731c733" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="c9465b54ba362fcbf5c9ec08e66eb2c2170f0a77fd77a14742e1f59cb5f1fe60" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="7d2e733116f4e1fa79817391d008fde3d9854573ef1ec53edb18c188cd272a45" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="a4537f53731bfdcbd268df88530fbae9ddd4f9893bc1a0a785f02200c398ad1f" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="f862bb900313e9a4a5bd8abec943b6961f87943c7144f0cda7359ecbf995fa93" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="3174211949818fa5c19d6e193bdc89f301b3a19f5f62451550c1acad3605324c" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="5f83b52ad00490e5607255a186451676355cf22a90b07701f9a8eb1219cbed2f" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="c6a178312c24df4eb040f3081653e2010cb8d6b17dcd5a731f35e80005c9bdb3" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="22f655fa27a5c0f3bdd44e9566429afbbd123e7d08dc635a543b24ae86707641" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="3c35ad4fdd5519f6d5074ead6e9508bd66d11b93a55d25ecef3bec7550770ebb" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="beab6df15e25a389c14c4e42630741a09d0020fbbc94b44fbdffd86df90da1da" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="02bfefd6ca46304873ff089b646b4ceaacccc77308d4ab396b3cfa83969863a0" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="d9409651cc2d63439c9f46ec5f9e8df034b0599b0359720f2fd556427ede8580" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="e74f2a6a5b85d3f61774766b3c1bb56a0aaf7bdbb0d130af40452705661c3d62" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="377be995293e7a5a27362c05b95bf0589dc354991fc169650d14dd92c0580229" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="c62936af73b47e5ac7e5941f2f818ddfd924d913ae8a491e5254101435b5cd3a" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="cc4cd72c64d064c86b5b0bae09c9c94fe69ce3f71e4fe2af3405edada02a4f53" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="f4fc3475ed65a58b1776d7133c79040fa651228c6ab036fc24acf0c9ef564cc1" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="5477885f5857f36c3e0ca6e71696304739f40b4082b77c1db0c154e2a5e2bac3" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="ca376865404d29de837192909bc22a54de409011107cf034850c6e7bc81326a6" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="dd530461f99e5b01316b574da423260e7179c61f52d6282902623b5e1f8f9378" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="8b2215ec67d61bc4923eac8e67efe8fbce6d4ada39bebc26dd6e2d7faf4c44ab" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="a92e08c90fb617959fdc17fae961e2b5c99befcc0dd53d9a894c3546e0dce9b9" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="0eba9f6b2bcb400ef65d03709d70904a30bbbe4f3d01c721e00561aae35b9eeb" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="4c9de21c7e05c3572450ded01c960c28694d5a99944ad923745aa52ca7b07b45" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="b5c26ddd588a392cacbac48d19d1b98bfe357c9cea1726d85ed611df4bcdaef9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="256e22c34363ac873e1e3438f984779ad08f6bd985eb7c014fc90043021ad6f6" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="c4bd3c95d7c72ab596d2f8ffdb7fc4295c6d16be23bd67b664e35191256bf89c" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="0d534def5a635e87239a1a88edb0f2d29321375103704ff6af91fc207bbac918" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="1d40ad1163724e5ef8ecf261bdb9133e840738a65f15d7856f52eaaf195172e8" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="ee0a4008cc7c2e59f0383a2d830e5cbd6def6ad84a193100187f53bcd4ce2a23" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="0f60a06d8110e37de94b23396f22c80401a9c9b6d92ec9ca06276953dba20c16" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="4ed8b19b7ee75bfd6fbb31b65cb89253c038349dfdbcddb3a767e896247a9a24" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="29889b3790ba44e0c38f814cdf46f60ab2582658b93832953f0fd7f87679eb70" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="50b9cd569de913545e5714bc02a65d5e847ead7729ad8b676c7a951cec18d34a" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="c80ff1f4980bad58d69de9c0da27be69f7fd98f0e8335242c3c237e15b1ab6bc" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="4c67b332027fcd6456e8b30e2bc400af72299811fdb32b7256b89474668b1f52" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="2e8d35496da33ec0229868ed046c8138aa7f333b2c0cf9ba4517805ce307a9c9" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="89494a95bfa38b46339d98da389191ec4200cadce23b4f675d3dc1d86db9b154" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="a682efeeae53fecc24d3fcd6727674c7084ea9b5df7a736ab2f0ed5c3f96aa6f" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="deba0babac15d11dd7189e2ef2f753a769f395371a199e62c1718ee8b7670ba2" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="f3ae78436f6663f55e33439d5ce3bcebeb59c1f2e07a9219dd418a97ac24e145" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="9a8667c1b9c314770477384ac992bb0beeff3bc27439a3145b5094e1b2eefb5e" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="960cea737e99a62aa79fa18aa672d66b50ce2ed20d95055eaa2220d76a824380" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="8cef65556b0e771d0734782ecae5dd3fe6c2d80e8638b8d53529553254dd30ff" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="1c718a80283fdbd3bfc3262c501c74cebbe31e95eddffafab3db6e2a00429f0a" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="e29fc49620b26d1700a794e1953744bf5911e5fdd0695f9953354d7d17ddb423" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="6dcc7523882c762d6bef6f77ad8ea3ab747287539887223dcb025548cf6e644e" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="e62aa9e3e7dff0764ba2277891c2d720881f3947a65174aa96e62ad35d54ff12" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="9e60bb9d65c568edadf97d9902451c0da63dee04dd07c3e782194b1b6b291a82" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="2e114dec6cef35032482e9aa8ecfcf87e90ae0f78ae01b5d07cfc85668e871c2" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="54da77caf58a6c1307576f13b1e28502e7a68f5b76d4c26c4cb422ad6dab40ad" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="38a94caa16b1d4a9e32d853aa0145b9643e610e5f861409efba148bab9257d3e" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="972c6f327b3c1d423f75a0a58f696eb45878729176f58b90b7061db241b85d39" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="f1c9157db3445d1275841bbf2e8959756592d33fc6f900b59689994bc009404f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="30943fb8f7261564d9f3dcbc13851b3683a52390df32341187ff557abb28d922" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="f632314e687d752763ddd0ea6ccea9e14a0dd2893dad08eb3b5fe31dbabaf11d" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="0fa64405687bad55c5f3abc9cebd2c49c6fede3576622ede997403796b323ed3" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="39d8a568435927ef14a096438bac13d7ccf1501a377fbb6efd626b58e0830fe6" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="748a602ccf8dbf7d780c0ab84252b4c4d86fe6573dbb72e522b3f69c72ae17ca" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="f65492b62fad22a87e3b78905ea4b7d0535e5260c6ab8b2c0fd228de1dac4f53" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="3837bf5c943fcff7ba248d2f51daba1dcde3ca6001d459a919e77575a301161c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="b796a01513785ba74720d8f3c327020afc3b2ca910bd8f67a63bcbc601617853" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="89a9506caba914bec99b60d5ea7ac49afd97a6ed54ec7742a8722d9b847e4273" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="83370958933bb52917fbcc1d366c8f06b4d6f60e1bc62f8f01f9579041df0f48" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="3d1837d93b32a64e4499ebf416526ac553257e4a147460faf87a0cebf2a87e44" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="4a522be9f9e945fe1defc6bf0af802e2e826371deaf3363e1e1d5216dfcc74e1" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="3b290d261b728e4e09472e02d45f825fe474d3f8834cef43c11303c94d92973d" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="866742c7ee177963663d7aad586a77b82dd6495d5528a61a8469466356f45f73" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="a7e4c7254e9b96c6d8daa18e78b2d019461cdb698ff936ea729810737983b816" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="f92b7189788390cd298520f95c78af38183812d37121f4aef98ec2d59184fa86" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="60e178b9399ddc9a570a14f3433b43a81133c414dc6bd6aede6be1649d6cdf8a" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="f8d774c2a259768b6d6e2255514bb25391179b3773ce1f7b86a0213ca8a8aa37" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="9d6ad42dfdb566e54257b7071faadce60059987068827e49598fc4a0c7ae0d4d" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="0f16b5d4168906500d1088372c5717cca42046d911778c367f7ba0c48507001c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="3bb57f9b65129b08260397e2ef73b147882a78698ee34b51f40c7a7333e6ee10" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="a6623d6d4be5a226a207a54b1a498e183e17780b433802609b539f8184d7bcaf" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
</package>
<package pkgid="b6bde1d33cb81351df04abfd70a944119cf98abf568c0a5a80a35e8b7408b422" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="37.1"/>
  <changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
  <changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
  <changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>
</package>
<package pkgid="7a6b5269b0226f395d9ee927ba768ac5753f345cd39aacafad96d8e83603c1c2" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
</package>
<package pkgid="81b178ca1987ea9a0610c1136ae68c648de200e8b98bdaa7ad4ac0b2b0ae1a4b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
</package>
<package pkgid="1a4690f0f362349aab66ec608ba45be6e43e6654eb87be62898f67f7c2a46864" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
</package>
<package pkgid="f713ab61adbcf384c1b141acadc6b4553991c4d9f56a62f1408e7de1301ba1b4" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="49.1"/>
  <changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2017-5246.patch</changelog>
</package>
<package pkgid="220c3395e0528190952c1e818fc155a947ff021e6e33c94491e6e5db34879855" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + ImageMagick-CVE-2017-15277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1512993601">- security update (meta.c):
  * CVE-2017-13062 [bsc#1055053]
    + ImageMagick-CVE-2017-13062.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513080000">- security update (psd.c):
  * CVE-2017-15281 [bsc#1063049]
    + ImageMagick-CVE-2017-15281.patch
  * CVE-2017-13061 [bsc#1055063]
    + ImageMagick-CVE-2017-13061.patch
  * CVE-2017-12563 [bsc#1052460]
    + ImageMagick-CVE-2017-12563.patch
  * CVE-2017-14174 [bsc#1057723]
    + ImageMagick-CVE-2017-14174.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + ImageMagick-CVE-2017-14042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- security update (xcf.c):
  * CVE-2017-14343, CVE-2017-12691 [bsc#1058422]
    ImageMagick-CVE-2017-14343,12691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514894400">- security update (xpm.c):
  * CVE-2017-11751 [bsc#1051412]
    + ImageMagick-CVE-2017-11751.patch
  * CVE-2017-17680, CVE-2017-17882 [bsc#1072902], [bsc#1074122]
    + ImageMagick-CVE-2017-17680,17882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980800">- security update (core):
  * CVE-2017-1000445 [bsc#1074425]
    + ImageMagick-CVE-2017-1000445.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1514980801">- security update (mpc.c):
  * CVE-2017-9409 [bsc#1042948]
    + ImageMagick-CVE-2017-9409.patch
  * CVE-2017-11449 [bsc#1049373]
    + ImageMagick-CVE-2017-11449.patch
  * CVE-2017-12430 [bsc#1052252]
    + ImageMagick-CVE-2017-12430.patch
  * CVE-2017-12642 [bsc#1052771]
    + ImageMagick-CVE-2017-12642.patch
  * CVE-2017-14249 [bsc#1058082]
    + ImageMagick-CVE-2017-14249.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515153600">- security update (dds.c):
  * CVE-2017-1000476 [bsc#1074610]
    + ImageMagick-CVE-2017-1000476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515412800">- security update (mat.c):
  * CVE-2017-12672 [bsc#1052720]
  * CVE-2017-13060 [bsc#1055065]
  * CVE-2017-11724 [bsc#1051446]
  * CVE-2017-12670 [bsc#1052731]
  * CVE-2017-12667 [bsc#1052732]
  * CVE-2017-13146 [bsc#1055323]
  * CVE-2017-10800 [bsc#1047044]
  * CVE-2017-13648 [bsc#1055434]
  * CVE-2017-11141 [bsc#1047898]
  * CVE-2017-11529 [bsc#1050120]
  * CVE-2017-12564 [bsc#1052468]
  * CVE-2017-12434 [bsc#1052550]
  * CVE-2017-12675 [bsc#1052710]
  * CVE-2017-14326 [bsc#1058640]
  * CVE-2017-11644 [bsc#1050606]
  * CVE-2017-13658 [bsc#1055855]
  * CVE-2017-14533 [bsc#1059751]
  * CVE-2017-17881 [bsc#1074123]
  * CVE-2017-18029 [bsc#1076021]
  * CVE-2017-18027 [bsc#1076051]
- added ImageMagick-mat.c-update.patch, update of mat.c to
  6.9.9-31's version</changelog>
  <changelog author="pgajdos@suse.com" date="1515499200">- security update (rla.c):
  * CVE-2018-5247 [bsc#1074969]
    + ImageMagick-CVE-2018-5247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499201">- security update (core):
  * CVE-2017-18022 [bsc#1074975]
    + ImageMagick-CVE-2017-18022.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1515499202">- security update (pattern.c):
  * CVE-2018-5246 [bsc#1074973]
    + ImageMagick-CVE-2018-5246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- security update (png.c):
  * CVE-2017-9262 [bsc#1043353]
  * CVE-2017-9261 [bsc#1043354]
  * CVE-2017-10995 [bsc#1047908]
  * CVE-2017-11539 [bsc#1050037]
  * CVE-2017-11505 [bsc#1050072]
  * CVE-2017-11526 [bsc#1050100]
  * CVE-2017-11750 [bsc#1051442]
  * CVE-2017-12565 [bsc#1052470]
  * CVE-2017-12676 [bsc#1052708]
  * CVE-2017-12673 [bsc#1052717]
  * CVE-2017-12671 [bsc#1052721]
  * CVE-2017-12643 [bsc#1052768]
  * CVE-2017-12641 [bsc#1052777]
  * CVE-2017-12640 [bsc#1052781]
  * CVE-2017-12935 [bsc#1054600]
  * CVE-2017-13059 [bsc#1055068]
  * CVE-2017-13147 [bsc#1055374]
  * CVE-2017-13142 [bsc#1055455]
  * CVE-2017-13141 [bsc#1055456]
  * CVE-2017-14103 [bsc#1057000]
  * CVE-2017-14649 [bsc#1060162]
  * CVE-2017-15218 [bsc#1062752]
  * CVE-2017-17504 [bsc#1072362]
  * CVE-2017-17884 [bsc#1074120]
  * CVE-2017-17879 [bsc#1074125]
  * CVE-2017-17914 [bsc#1074185]
- added patches
  + ImageMagick-CVE-2017-9262.patch
  + ImageMagick-CVE-2017-9261.patch
  + ImageMagick-CVE-2017-10995.patch
  + ImageMagick-CVE-2017-11539.patch
  + ImageMagick-CVE-2017-11505,11526.patch
  + ImageMagick-CVE-2017-12565,12641.patch
  + ImageMagick-CVE-2017-11750,12676,12643.patch
  + ImageMagick-CVE-2017-12673.patch
  + ImageMagick-CVE-2017-12671,13141.patch
  + ImageMagick-CVE-2017-12640.patch
  + ImageMagick-CVE-2017-13059.patch
  + ImageMagick-CVE-2017-13142.patch
  + ImageMagick-CVE-2017-15218.patch
  + ImageMagick-CVE-2017-17504.patch
  + ImageMagick-CVE-2017-17884.patch
  + ImageMagick-CVE-2017-17879.patch
  + ImageMagick-CVE-2017-17914.patch
  + ImageMagick-png.c-other-fixes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- readd MagickMin() to mat.c</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- secruity update (cin.c):
  * CVE-2017-11525 [bsc#1050098]
    + ImageMagick-CVE-2017-11525.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795201">- security update (cip.c):
  * CVE-2017-11639 [bsc#1050635]
    + ImageMagick-CVE-2017-11639.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795202">- security update (bmp.c):
  * CVE-2018-5685 [bsc#1075939]
    + ImageMagick-CVE-2018-5685.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968000">- security update (pwp.c):
  * CVE-2017-18008 [bsc#1074309]
    + ImageMagick-CVE-2017-18008.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516968001">- security update (psd.c):
  * CVE-2017-17681 [bsc#1072901]
    + ImageMagick-CVE-2017-17681.patch</changelog>
</package>
<package pkgid="791506363a4de6bc63a8a298e567d2b19b089625738410de65297f99bdb29b28" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- security update (meta.c):
  * CVE-2017-12418 [bsc#1052207]
    + ImageMagick-CVE-2017-12418.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517400001">- security update (palm.c):
  * CVE-2017-9407 [bsc#1042824]
    + ImageMagick-CVE-2017-9407.patch
  * CVE-2017-11537 [bsc#1050048]
    + ImageMagick-CVE-2017-11537.patch
  * CVE-2017-12664 [bsc#1052750]
    + ImageMagick-CVE-2017-12664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1517918400">- security update (pcx.c):
  * CVE-2017-12432 [bsc#1052254]
    + ImageMagick-CVE-2017-12432.patch
  * CVE-2017-12668 [bsc#1052688]
    + ImageMagick-CVE-2017-12668.patch
  * CVE-2017-14224 [bsc#1058009]
    + ImageMagick-CVE-2017-14224.patch
  * CVE-2017-13058 [bsc#1055069]
    + ImageMagick-CVE-2017-13058.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- security update (jpeg.c):
  * CVE-2017-11450 [bsc#1049374]
    + ImageMagick-CVE-2017-11450.patch
  * CVE-2017-11448 [bsc#1049375]
    + ImageMagick-CVE-2017-11448.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update (dcm.c):
  * CVE-2018-5357 [bsc#1075821]
    + ImageMagick-CVE-2018-5357.patch
  * CVE-2018-6405 [bsc#1078433]
    + ImageMagick-CVE-2018-6405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436800">- security update:
  * CVE-2017-11531 [bsc#1050126]
    + ImageMagick-histogram.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518436801">- security update (psd.c):
  * [bsc#1074118]
    + ImageMagick-psd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523200">- security udpate (cut.c):
  * CVE-2017-14060 [bsc#1056768]
    + ImageMagick-CVE-2017-14060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523201">- security update (pdb.c):
  * CVE-2017-12674 [bsc#1052711]
    + ImageMagick-CVE-2017-12674.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523202">- security update (xwd.c):
  * CVE-2017-11166 [bsc#1048110]
  + ImageMagick-CVE-2017-11166.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523203">- security update (tga.c):
  * CVE-2017-11170 [bsc#1048272]
    + ImageMagick-CVE-2017-11170.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518523204">- security update (miff.c):
  * CVE-2017-13131 [bsc#1055229]
    + ImageMagick-CVE-2017-13131.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
</package>
<package pkgid="9298218af50140d62732a6143512c0d38a72deb9f48ca33618270fd4230f727a" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="58.1"/>
  <changelog author="pgajdos@suse.com" date="1518609600">- security update (map.c):
  * CVE-2017-11638, CVE-2017-11642 [bsc#1050617]
    + ImageMagick-CVE-2017-11638,11642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782400">- security update (mvg.c):
  * CVE-2017-12566 [bsc#1052472]
    + ImageMagick-CVE-2017-12566.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518782401">- security update (msl.c):
  * CVE-2017-12427 [bsc#1052248]
    + ImageMagick-CVE-2017-12427.patch
  * CVE-2017-14139 [bsc#1057163]
    + ImageMagick-CVE-2017-14139.patch
  * CVE-2017-17934 [bsc#1074170]
    + ImageMagick-CVE-2017-17934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519128000">- security update (map.c):
  * CVE-2017-12663 [bsc#1052754]
    + ImageMagick-CVE-2017-12663.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- security update (uil.c):
  * CVE-2017-11533 [bsc#1050132]
    + ImageMagick-CVE-2017-11533.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214401">- security update (ept.c):
  * CVE-2017-11530 [bsc#1050122]
    + ImageMagick-CVE-2017-11530.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214402">- security update (dib.c):
  * CVE-2017-11528 [bsc#1050119]
    + ImageMagick-CVE-2017-11528.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519214403">- security update (icon.c):
  * CVE-2017-9405 [bsc#1042911]
    + ImageMagick-CVE-2017-9405.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (bmp.c):
  * CVE-2017-12693 [bsc#1082348]
    + ImageMagick-CVE-2017-12693.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (viff.c):
  * CVE-2017-12692 [bsc#1082362]
    + ImageMagick-CVE-2017-12692.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (png.c):
  * CVE-2017-15017 [bsc#1082283]
    + ImageMagick-CVE-2017-15017.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646403">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646404">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646405">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
</package>
<package pkgid="f0b369c59ff2751293b8ad7472ecab2e0d9969e3e09cb4fab1eebdaf1bac59c9" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="61.2"/>
  <changelog author="pgajdos@suse.com" date="1519646400">- security update (emf.c):
  * CVE-2017-15016 [bsc#1082291]
    + ImageMagick-CVE-2017-15016.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646401">- security update (tiff.c):
  * CVE-2018-7443 [bsc#1082792]
    + ImageMagick-CVE-2018-7443.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519646402">- security update (webp.c):
  * CVE-2018-7470 [bsc#1082837]
    + ImageMagick-CVE-2018-7470.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- security update (core)
  * CVE-2017-16353 [bsc#1066170]
    + ImageMagick-CVE-2017-16353.patch
  * CVE-2017-16352 [bsc#1066168]
    + ImageMagick-CVE-2017-16352.patch
  * CVE-2017-14314 [bsc#1058630]
    + ImageMagick-CVE-2017-14314.patch
  * CVE-2017-13768 [bsc#1056434]
    + ImageMagick-CVE-2017-13768.patch
  * CVE-2017-14505 [bsc#1059735]
    + ImageMagick-CVE-2017-14505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- security update (core)
  * CVE-2017-14739 [bsc#1060382]
    + ImageMagick-CVE-2017-14739.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520337600">- security update (miff.c)
  * CVE-2017-9500 [bsc#1043290]
    + ImageMagick-CVE-2017-9500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- security update (core)
  * CVE-2017-18209 [bsc#1083628]
    + ImageMagick-CVE-2017-18209.patch
  * CVE-2017-18211 [bsc#1083634]
    + ImageMagick-CVE-2017-18211.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
</package>
<package pkgid="521054300655d927ac010832b3c651d4037fc41f78d415d204932a739a59516f" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="64.1"/>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update (core)
  * CVE-2017-11524 [bsc#1050087]
    + ImageMagick-CVE-2017-11524.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- security update (ept.c)
  * CVE-2018-8804 [bsc#1086011]
    + ImageMagick-CVE-2018-8804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523016000">- security update (pcd.c)
  * CVE-2017-18251 [bsc#1087037]
    + ImageMagick-CVE-2017-18251.patch
- fixed patches (thanks to patch-2.7.6):
  . ImageMagick-CVE-2017-1000476.patch
  . ImageMagick-CVE-2017-11450.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361600">- security update (core)
  * CVE-2017-10928 [bsc#1047356]
    + ImageMagick-CVE-2017-18251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- security update (gif.c)
  * CVE-2017-18254 [bsc#1087027]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (core)
  * CVE-2017-18250 [bsc#1087039]
    + ImageMagick-CVE-2017-18254.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523448001">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="33c26f403a8d90ef04dd74e0fd2d0f84ab3b41ab65f9ad8f48fbda86461e6bcf" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="67.1"/>
  <changelog author="pgajdos@suse.com" date="1523620800">- security update (wand)
  * CVE-2017-18252 [bsc#1087033]
    + ImageMagick-CVE-2017-18252.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523620801">- security update (png.c)
  * CVE-2018-9018 [bsc#1086773]
    + ImageMagick-CVE-2018-9018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1523966400">- security update (core)
  * CVE-2017-14325 [bsc#1058635]
    + ImageMagick-CVE-2017-14325.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524052800">- security update (tiff.c)
  * CVE-2018-8960 [bsc#1086782]
    + ImageMagick-CVE-2018-8960.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524225600">- security update (png.c)
  * CVE-2018-10177 [bsc#1089781]
    + ImageMagick-CVE-2018-10177.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524657600">- security update (core)
  * CVE-2017-17887 [bsc#1074117]
    + ImageMagick-CVE-2017-17887.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526990400">- security update (tiff.c):
  * CVE-2018-9133 [bsc#1087820]
    + ImageMagick-CVE-2018-9133.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- security update (miff.c)
  * CVE-2017-18271 [bsc#1094204]
    + ImageMagick-CVE-2017-18271.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527076801">- security update (sun.c)
  * CVE-2018-11251 [bsc#1094237]
    + ImageMagick-CVE-2018-11251.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1527249600">- security update (core)
  * CVE-2017-13758 [bsc#1056277]
    + ImageMagick-CVE-2017-13758.patch
  * fixed hang [bsc#1056277]
    . ImageMagick-CVE-2017-10928.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
</package>
<package pkgid="c07b176ee99105e8b33d97e6f0eea6987f8d91e393055c2e22d3758263a7f3e6" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="70.2"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security udpate (tiff.c)
  * CVE-2018-10804 [bsc#1095813]
    + ImageMagick-CVE-2018-10804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11655 [bnc#1095730]
    + ImageMagick-CVE-2018-11655.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="0436b89ccf4e2e6dd83fcf22b0f0a51de6e65a818bd8739d83dec41a8f11522b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="73.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
</package>
<package pkgid="9bc1594d69ed95c4a1299a1f65b08a02c87125dc629fa11343e4ca0197cbdcf7" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="76.1"/>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">-  security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- add a possibility to build with ASAN</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
</package>
<package pkgid="2e3fa35a5d4ec55b70b4b929770dc4184de39e5c7ed1b3511ebf8fe6f032b95b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="6.8.8.1" rel="79.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012800">- security update (png.c):
  * CVE-2018-16749 [bsc#1108282]
    + ImageMagick-CVE-2018-16749.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537012801">- security update (meta.c):
  * CVE-2018-16750 [bsc#1108283]
    + ImageMagick-meta.c-update.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537272000">- security update (core, cache)
  * CVE-2017-11532 [bsc#1050129]
    + ImageMagick-CVE-2017-11532.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259201">- security update (sgi.c)
  * CVE-2018-17965 [bsc#1110747]
    + ImageMagick-CVE-2018-17965.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259202">- security update (pcx.c)
  * CVE-2018-18016 [bsc#1111072]
    % ImageMagick-CVE-2017-13058.patch renamed to
    ImageMagick-CVE-2017-13058,CVE-2018-18016.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209601">- fix regression in pict coder [bsc#1107609#c24]
  % ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209602">- security update (pict.c):
  * CVE-2017-14997 [bsc#1112399]
    + ImageMagick-CVE-2017-14997.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543406400">- improve import documentation [bsc#1057246]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543579200">- allow override system security policy [bsc#1117463]</changelog>
</package>
<package pkgid="3e1559e6d125b2f2d7a1659b34b9eac03da11ddb0dae53a488f540883c9f52ef" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.9" rel="16.3.1"/>
  <changelog author="garloff@suse.de" date="1225108800">- fix-warn.diff: Avoid pointer &gt; 0 comparison (bnc 435610)</changelog>
  <changelog author="crrodriguez@suse.de" date="1236340800">- remove static libraries and "la" files</changelog>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
</package>
<package pkgid="cb89e63e86be3852d811436471ee4277ec0ce17baf38c70cf5a1b0a06ce3e744" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.9" rel="16.6.1"/>
  <changelog author="crrodriguez@suse.de" date="1236340800">- remove static libraries and "la" files</changelog>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
</package>
<package pkgid="b687a180e5d327df4616e632fe7fe3bc137e16109c811050356f8e3d2b980e60" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.9" rel="16.9.1"/>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
</package>
<package pkgid="7ad67134b99b2827f2cc75e4a357e69af769dc00fffa973b8ff9b24aa0c2d5f6" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="16.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1236340800">- remove static libraries and "la" files</changelog>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
</package>
<package pkgid="fd7bffdf4905121a23154908592ff169174f070c0d7a990fc76ee8869f18c264" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="16.6.1"/>
  <changelog author="crrodriguez@suse.de" date="1236340800">- remove static libraries and "la" files</changelog>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
</package>
<package pkgid="998773e9a56a54b8ac81cc21cf3ed8db6cfb1ab72e2f59996fd6e1a82ed23299" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="16.9.1"/>
  <changelog author="garloff@suse.de" date="1240315200">- Update to LibVNCserver-0.9.7:
  * add (server-side) ZYWRLE support
  * fixes (update after resizing, endianess, width != scanline)
  * improve timeouts, port fallback, and connection time of the SSL
    Java viewers</changelog>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="olaf@aepfle.de" date="1415707200">- Provide libvncclient.so.0()(64bit) in SLED12 (bnc#904676)</changelog>
  <changelog author="max@suse.com" date="1447329600">- bsc#897031: fix several security issues:
  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on
    client side.
  * CVE-2014-6052: Lack of malloc() return value checking on
    client side.
  * CVE-2014-6053: Server crash on a very large ClientCutText
    message.
  * CVE-2014-6054: Server crash when scaling factor is set to zero.
  * CVE-2014-6055: Multiple stack overflows in File Transfer
    feature.
- bsc#854151: Restrict the SSL cipher suite.</changelog>
  <changelog author="pgajdos@suse.com" date="1483444800">- security update
  * CVE-2016-9941 [bsc#1017711]
    + LibVNCServer-CVE-2016-9941.patch
  * CVE-2016-9942 [bsc#1017712]
    + LibVNCServer-CVE-2016-9942.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
</package>
<package pkgid="cccbe4f3b20a687a17c0298faa42376325213b529f84239f5c3378477bbaa248" name="Mesa" arch="src">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="13d6b878f4887c0dccb6003e61b260b3c1ad8985c792a531ff29f8134c2b1115" name="Mesa" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="bc6aeafb411bb478fe512333a0023f724dfd9582975481129b2d72e337dd0bfc" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="2d1e98f17bf29e19a9ded92fe4fc13c840ebb8ca44634d946d5c8564032c3109" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="503bc9c125340a041b4690224112028d3192653d21095426e1ea19fa3aad0268" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="b1e679d50082e513daa4373475aa7a944d55337c175e2f98c5a2637f88447019" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="8a8cde9cc5167905978f498e11f79f6827ade6871b25d4ff7c6714c4a93c27e4" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="3af4d3e8830876846566529b94a43b94f4b1eaa9b99564e8fcff9c2ae4c1670b" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="a14aa4618f7198587d5af268d70120e87d1f9f66c1848ad6720d199d3d2607f1" name="Mesa-libEGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="ded08dcb231bd84cd91be9afec27e2e5de2dfcb368fa6b064905540eb6ed9e16" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="87b3e2fd72de933d9ec56c949375b3d6c8bf1ccdbf1663d3b34823f5bbee60dc" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="97d28f960a19b4104ed711b971282e4aa139fe6c1bb138c6cb5d8e847961962c" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="6c1a0f584ea8988ec8d20e74527e5ac28e2c31be7dd7eaee8d14fe7b55ad7034" name="Mesa-libGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="2db6c56a0e3ce72fef3ec5d5c36616bc7738fa9c057fb303338c53d34a9ef471" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="fed6380f5dd02c9f24e2ba74ebd28b58c42b3554f876425b43354e48dbb507e7" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="83132f6c80a7124abb71098fa7dedb35c07868ea6f9ce09069d9c071aef177ec" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="f14e3781b73717c7f00fa1086ad44cb1cbd7436f315a44d0721f44b53695f0b1" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="bcec9a6d3681c69098e4fecc63fac6c710494d273d1e661040d69ead78449faf" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="9adf27ede420c720554acc22ad502ea524416a626ad4ec1a87b9190d627175b1" name="Mesa-libGLESv1_CM1-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="17684bc4d52e6624345512249b6d3ae920a231aeada6118797c23929035f388f" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="26e569a9d4513431fc711cf676bc6f561562acb0caca7a5202192b4bc9f0464f" name="Mesa-libGLESv2-2-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="23696f7a01e24733516d6b51a9ded1888928168ec879e62559030c490b750dfd" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="3d0f90cbd48b6644e080bd01720f2f55e17b38a5d51a4086f6f3ad424640be44" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="8b8e6b2e32907a0e0faf10e3b4d94147aec73016b22bfbca339d7fe66081fb8d" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="e498db5f3b0f70e5123db40b0a3b45891407a0a3eae076380651a0e81bbe844d" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="2178079a7ca5c6f42a3318d0b7951f4eecd4628eacd623f21b5e1faa1c07aa3d" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="7a618e5e961bc1514233581ac8a9b67130f62f53844079e6e2228e43cd60bba5" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="f7759f7d899e8503344e660dcaffa009f20dc94ead81ad3f951eecf6ab551f5a" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="13ef6f0c0f0bbdbd911be4ec3f84a9ebce19e6f9132a64da992bd045e3c424c5" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="83868ee532213e68b35c2736e99b96ff9c01507126b14b3b4cf6dc3b097a6c96" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="57094c239d1cea9d4def0f8f8e880cef8d90757f8f5fde5464b29a297f86ed67" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="ff12dafde9cf732727787d9d0d7d84dc526be210201bedd5ebdfd5221196ff00" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="2f30271f4707e85be62b9e75ff041c8579bcf18b766b4e1a2a90453708cf457b" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="17.0.5" rel="176.1"/>
  <changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
  <changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
  <changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
  <changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
  <changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
  <changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
  <changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
  <changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
  <changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
  <changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
  <changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
  <changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
  <changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
  <changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>
</package>
<package pkgid="79a80caad0d0aa101a2bc12e178e790ff8d8f829cc2cd29062bd808a20ff5461" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="c166d070ee4aed1a327e67cbef80fc5ea97199bc87b304a19ca59e6b3edc3861" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="b89932323c628406c737724260bc44f5ac9895dc38c83fb53efa2b23e5f16dad" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.4.0" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="cf06e1ca33c64dfabba74dce40e1b1a4274c13071ee1626e2ee963edafce3a05" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="d1be674ec54505e3bd7d28ef2353c12d0301d8dc06f5c63a7babc49c22678ab6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="88ea3df26181092b809acd3b87638b16e16abb902262e5c85dcefc491fa4be2d" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="8efacd725ca2e7e558fb02737097bab2f944a1cf39fd4c3b713dde3b0ec4bdf7" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="fd675a47db0febc0fcd81d6cf0008eb8bdd8918e1bc6d490af013989fb75acc8" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="68a64bdb69777f197d7ee9759942d6a444088a31c004c85f75c19efef7343cd7" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="b4550cf692aacc040a3cc49a18247da01dda863742bf795ec6fb58bff9df78c9" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="0ee1810b6fdc058af5dbe7546adde30fc640a8c6d0d38f8e36826e16ec7dac6c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="d0c624f456e431db16640b52f893c79582f6d7e6ffc4925f5505ad323f648d2c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="cab5c200f758c88ca867c1287551b10af14231712260c620408df8928daa86d1" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="fca21a05d73220a2fe5122d17cb13d228775c6754f67f289bc75e53d96cf3b3b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="2791d37b0d688462a6fa4e1e566aa3d2f6266a8aeabe3c99ec45a8db162f6d5f" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="ac2cb2f277cb7d1d8eeefbe461eeee788a3de0c3c034e065dd1af5cae4df5066" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="34584ba6d67b83f7aab7ec1edf63f9f572d0a38342a87b2375c1050a4ab471f6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="f0e03bbadba20b631a08c9bb3a65c7262f13a566e7832c42b98c4e263356c7ae" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="164e42d1f833cf1c216e17fb6ee50afff091d440326867d7c030ab03fe9f3687" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="a5cb270fb27f5535e6e8654c904c842121abe18de2b3fc3bd4f2f4e3bec4bb10" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="353cf048e5e99b57675d0e4dee5080d5ba9a2aca16cbbc58512b8d8168b8c1c1" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="42c29b0cd0dfdf913eca972a73cc37b87ee4215b754e1962ca1f2d11a35ea033" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="0e7a8cb3afd613c4c93a3d93d6bc0b7365b740e5f37f7fdc53af680b93e77548" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="1f3d338ff0c7bbd06a1d71d809b163659b7b81442cb4fa67c2b2ade5036d200e" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="763d0aaa6c874768da11350ccd77b7a3d70da4a89cdf9f2e169d2c213c6a6f9f" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="5f7c30aed7c3f529ad43b7d32709edf41d3f3830e5c555806002023140217615" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="a9917ee9ec6a9e10ca20b236b9ba4ca8848ed6e4c024266ed91d625f853e9972" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="c0823c8d61dc4da134b2f49e8e0b549ea45a62803462e971bb3e315f89afddf2" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="80c062fb30f3375bfc5f66155a1a434d6274218eea9eb56e4fd6135f1b23d157" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="3e28a3996f9c236a0d31c5bb4a5911a03ac3c03d1a160083be994f2fe163ccff" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="ec24c0ef6b6e9d296ba4af8d7d5430601ee310fc1d18dc6751aa89f09876b0b5" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="8ae39646ed8addbf932ed1f051b94babd7724c0f064503c263b37c314661cc93" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="9d374b30c17bbad283661301c8580ab2ffd72f5454e9e3544f46dfd5805f972d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="07718cd2429603c149414bc24e7bb33f451d78a91db4160e6fdbdf72f9aefe23" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="3e5f7f2f7252e05e627b43732c8338a7b02f2c44a38b2165f51a3bb2b8be11a4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="f738d4c701c4936b1b147fd50b4ff88e9cbced8f7b7dba90c6aaf66424564051" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="9e9bdfa7fecd3e983e9500791a56f30e40304ef24db7f5ae91b5ce97c5b7d7de" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="7055dab4a871a66e85e9286a6ba118652e0bb85708436445f25fb435f02a3ed8" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="fb501764aedbe46c14087bbb4b924f6c401cbe4755b995536d0e395c544ba888" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="f4743fb9d32c1662a22e8aa79ddf5555c67dae16b786a26c3affab2889f84a35" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="f46128507d69eca939a779a50000136c282bbe7653b20f23247db9bef2851438" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="74fbbfa247c2500808496fd2ec367a9d1d46ec66ff5186810c3006bd56d514e1" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="2905256a950516c10107dfc7d1d5497a79ede37f010185a9f733d8aec6f81eb0" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="d8cb0f8ba6471d1ee8a75e6db256c526856042ed623f906ece6a1e812e9d5026" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="f0e3f88e3e9b73c5fe4f24c6aa2b9ae16394757f108da89144bdda2d805753a0" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="ec00fc8d543a91a7fb0cf39690b8dc9a4b33884c0323e600c6fb1aa9694ea4a3" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="d93830481df41f1bf9029ad7cd3e3c48f5e3ae3d209ffa068777d1db58fe6334" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="237302eb496ff64e3b3212269ba1acc0df110144a2f8373715ef7326a6bc4a20" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="ef5be4957fc77ca81d09c963d8de07959f982b271610bf357454f88af54a25d9" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="74432044e22838c8cfa87c97d05156b8aed8d240fc76ce922f6262e691d96fba" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="9a66f06ea9914ae8c7e872195276a743217a2f8dfb65b3d2a4e182e22ff38948" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="e03287680cab3701f29b85c926f134c85b7d574857238ac9c82773077d39c00f" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="6006f0779416f6c102540167975d46ec26491412e662a9c9e0e289974a21e0a6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="e5c90f1a77aaca6dc0f007ea6dd243c4122e4fb02c2b8cd5ece17a57abdde2bd" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="b7f88bb0e0b679525f0bbf1253d99ba34d59b535bdb4b5c27b8d265e9b4faea6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="41847547e6181f3c84a3b9da4cc5fd4f8b9ab8c221f8a4931e2313c96566e074" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="015daed4d6884afd5c70f16e3cfb1e76c1c548bde7c324ca262870828b4c1479" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="c502b2f47dc904a3d7ec20ae8500e4ef76627acfb90787a8fbddba4b5c8e0ce2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="c6a8bc15b33c3055a323b774a5ae3b93130049e342d2c7cae5dacfbd746bfc87" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="50ad2fbab0b09f3d8cb30dcc8f84e6d18f49236646395d6f869adf18fc1c2d3b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="2b718bff257b45c14147754e024b84f6736342df0aaa837615b47005ef9fbe88" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="1a6bbc45a69991f5d78cc08c3b7ffb7d4782106b70827e6970777c389ea6715c" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="b4c49dcb0bc721c440afbcb267cb5df891b233bd8028a92096f0673f9f330cf5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="fb5d1efde773f65634a352a2548ae17f02eb6d8c408a1615f0e547296054f69c" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="40e8cca2e3704624fb52d79e09abda1e7bfba0d45374933af69291a659ecacde" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="e17102d26d58948987135ea3a012adc99237dfbca74787d93f5185efa77208c0" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="adb552f2bd00d9b9ba73a171ed96a39b5c8373377be3de9a795ac26d456f6b18" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="5c957ce26b2b4ca9e7f76027fed7ad961c64a6e3dcf5ab8c53552fb968b32344" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="070c745c4f580b1b128f9c618c02e220333c5b69d1ed96e7113b05fe339f08da" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="5fb1beaed30b76594677dc34c2db57f873740d203597e915e0a209c324141674" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="d13ce9820ec7dedb5e6692e927a27d96951261d4d571d1b2eb69e57f2b8e3d62" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="a20789a3d445377cf09c9d9c9d5c35a11246b19d7e41c89ea2a19910d61789b5" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="cffc6507d2248aa51d9c96ba1701add118c0696a746c0e7e19ce788999ff19d1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="06ceb6c67d3dc6fc40f95d0411c564be067d028617aaf3ba22dcb3b73f707167" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="c1e34bde142e172e15abcfd73dd8644bd2d8a0e63ff0cf6b99924d3cfd6e7a7c" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="9b8efaa0d4eb1df2ea2617bab7cfeb2ae0194008d3794bb5f38f3e410fe99c1d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="ba2ed9d97208c8b43f2b9395c27ab29f9f95f1fff9a0c63d4228bb448ab7f471" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="d8dfc66aa13065a7fff924454b5892e7c57de7555c8a3a64e4426dcd306aa830" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="337d8a179e07bd930a2b5d2e2ff5c5a4a98a9cf29148b467270775571918e2c9" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="00806bbb28948102b1dcdd8b26ac90623b800f109faf25ae7c0690cfac46400a" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="d27cda25c47317a40e602242e61a7e72e97b649ccbe970185c001d2972a3e5b8" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="d5fc8030c94e266535dde83ed196d6260e857f639364fb5144fc934062150da5" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="3faf87d941b8fbf1d0086f417d541e847850a5d39c83e7a07fd7377f46d2f3dc" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="f2460f03b99ca692e1913214ba24fb6d59e0d1b15e55ba418d6d108463919293" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="bf23477bb676ceaa84a3fa7eff4e616c5d21d682c9023d71b439a4035a0c3965" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="ccd4272014763d6bfa9b7d0522bf4628dc229e14f9009bc00f5ca71c5776eab4" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="a6a1a24675f3ab42e770e23c1c6187a8b8d53b415bcd0763b62ddf78c217f9ed" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="cc4c7887e0fc9e61ca16fef255b62a8985e63f75870bd6013a4d60907dc29c7f" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="10f4a34fcbb83b37734bded06762865c92ad009537324bbd5900395a3aa45500" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="062d68aa91ba08e792c966e923080bd1e98490281cb87e9a01cae41041c6415b" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="b0d6ffafaa266da3936d9153384eb952a20b884d12c13d500486a00faf159ca3" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="af121e313a3316e7f24ad9053f6ea45ec700f6b24ae86b034bb1841ca7645fe8" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="6594d22f9709425c729f96fbf89861a46aed7a0070f77cf8b8047c9ba6a63843" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="390873d19b9fa63fdc203e35ef2b8aaf19aebb3a90a41cd364b15fbe8b02357b" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="98264c9264cf200306a59fc9ecf17cfc345f866cb1f2c21585069bafdb3e2027" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="806754865b0d077998ddeab714f04a10a58bd36e0472588912732403af65dee6" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="17fe994ffe9858a59d2c3f4a035e5f7ba37150aa31e6aa01200b829b62d4bd23" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="21d7b9b9e717983f3134021335b648d8d4bd48eb99dec479b4db72ca85421acc" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="f1023e33cb749acfac82ee9f2d18eb5920a1554c09da442e1794a38c68b10d0d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="c99842e00577170b7a4e9deb9947b0ea30a05058db8ea217507126d3a7e545a4" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="0396f05916093bc11e21f0799868e221c2ac15ca21b49ed8a1f5f43adee6be96" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="4781f710ca3ccab863a92a9d4bc5ba430d5f85666ef0187b6657f9135db6b0b5" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="79312f86c4e6131b384835aaf8f4d1c45508f62e63fd1e0b5e6a6f3274897341" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="7430792bfba505ffee252d546754dfd8e72fb7098b3fe983cbbc3c0c25d32af7" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="817b9654dc2013e4ce8fef48fe3dbffa0f87f0e8a84da5ac6b2f2bfd9d1187af" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="6fd3faba3f53cbb0962cfc7fdd6fce45ce1ec661c6ffb7b77d131e84e2431c88" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="790f9c6c338c9a260f77a6eab0b4ee7be4de950d4d5563cd313c88eb5b5a8293" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="8e0ec9cf887d3941c22f5626658aa58d7d1d91c7eee37b2241e23cfdec35573a" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="e1ec996f347dc8c10683cc9e1e936497d453d8404d576ecc844279b72a491a79" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="928f946792d2daea738ce9cb307d5e201834ec8ceb31acfbdc4373c65f5c5587" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="5c8ee8566b0b05d1652e1dfd06e93cb4dd91b55400490245f3822d244abd82b5" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="a6c7c439f6e74b589d2fcfb04b3037369c5291e4abd3f8c6321456d88fdd561e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="f914dbf2448a27fe3e6376515a48b43c2fb42780b646f79b416758ebe53de01d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="f87d79693ae83e7c85363f126595562633c394e110d96ab0b0e28c184ea23d24" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="fd67700d148e2517a9249a0d5cde9200747ff46c0924f2c574f3e0df493e274e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="f4ae715a37859c0b124217c94b0006a460f2010e31487ab79e08c06b7a9dbe2f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="cd3010cb9fa179fe7da330402acb45db6ae91833fe9243674a8c5a84ab1df5df" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="c46ea9e2f47d7d76ebd86979aa79ab96920792e1a974bc013f20b3e9d0da95a0" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="f93af36c82d51696bf2382b9ed24f143c43515baf0142030f628b20380e5dc1f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="3f536705809cb48338744d7e66dad0322b48720f305b205eff6d56db9006f58b" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="82586383ed53f2ffe37e13e979667a9f2b38bbb7df6ad1b2a40838a944b891ce" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="9fefd9c5c0bedc7ad5e7ab8d0c05e4b6fac77a6ddee93c77779abe65f3fc3c18" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="bab09f762a9a9b76225353cb824d3d81b31b06e0dd7400b7c50aaf8f368cfce9" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="a41429e2fc728ca7594be4de226fa2c8795cab8c0f79190ec70c5323ab1213d1" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="60b74b6a1988f6dd9c5432d105a7fa658675cd9c623107ea9367f0f74d0524d7" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="16c9d17705f6e1df0b2676bcb2f331a0299ebde501e146835b408ab9493a9820" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="823c44436fad2e23e5afb7d95dfaa4f1ecdcdacf54dd9173287dd52b43aab0d8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="049d7f1e8eaee3586e2e5227635c90107c6e5d207bca2278bb200257d93972f7" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="93b6ed62ad39ef4e18a602388ee1b995315e34371c37d8f1a1e2dc93808497df" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="6d8c242635b7c8224ec0fc6975da0de36c91f8e935725e8e17f3626e4697ca49" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="0e3d13d5deee337e157a3c87c1e30189ae12446ecfed28acb29fb5a023fc2d22" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="069f5b0c52db563602e217586e09ef750c97ad0b4ccf99e36215970d9deb6eb4" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="3787ebf3fc89a333fa710811bea784c85666cf536864f86bd2f119a88426c529" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="52de483e6f0ba0751dff6ba5ec4ca42ff106de2cc796dc00b93a2e35034f7d18" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="60.1"/>
  <changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="e20e9b30096752c4b46619fd68d7301d7f0bf3b0e35541575ad0a64d98ff2193" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="63.2"/>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
  <changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
  <changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
  <changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
</package>
<package pkgid="3052d23dfcaf165e5bb92b008df022a0306d2da612558b5d660ff55b6d119d86" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="66.1"/>
  <changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="91cde03615063edace49189b280b89593b854ae2e641cf5df0b8fee1adcc91cd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="69.1"/>
  <changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
  <changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
</package>
<package pkgid="6cbcc3584b0285c82f2446c101fab2e92d781ea97696c9b5d3e7e4c9ecf6aefc" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.5.3" rel="72.1"/>
  <changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
  <changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
  <changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
</package>
<package pkgid="87468f48544fc505873295c84e47447c9f8323b8a2782b73821bea32a65e0293" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.6" rel="75.1"/>
  <changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
  <changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
</package>
<package pkgid="e50f6a01eadd6c7d0e9b6000308e4fb18f8846aa454b51df8abec627d4c5c5b3" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.7" rel="78.1"/>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
</package>
<package pkgid="ce5571cfeebb8553a2de40578dd45d1b8167950890ad99003471f425d3724784" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="81.1"/>
  <changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
  <changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
</package>
<package pkgid="2642cd60016864c42147b123dd85b501b7f4962e5ee96b18f1c780322b4df6f5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="86.1"/>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
</package>
<package pkgid="15693db0c883d8ba352916ac35d10f7db017e8fe5d21140a3a37679936f1f0eb" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="89.1"/>
  <changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
  <changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
  <changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
  <changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>
  <changelog author="fcrozat@suse.com" date="1513339200">- Add BuildRequires python-xml to fix build on TW/SLE15.</changelog>
  <changelog author="astieger@suse.com" date="1514548800">- Update to Firefox 52.5.3esr:
  * Fix a crash reporting issue that inadvertently sends background
  tab crash reports to Mozilla without user opt-in (bmo#1427111,
  bsc#1074235)</changelog>
  <changelog author="cgrobertson@suse.com" date="1516104000">- Added additional patches and configurations to fix
  builds on s390 and PowerPC.
  * Added firefox-glibc-getrandom.patch effecting builds on
    s390 and PowerPC
  * Added mozilla-s390-bigendian.patch along with icudt58b.dat
    bigendian ICU data file for running Firefox on bigendian
    architectures (bmo#1322212 and bmo#1264836)
  * Added mozilla-s390-nojit.patch to enable atomic operations
    used by the JS engine when JIT is disabled on s390
  * Build configuration options specific to s390
  * Requires NSS &gt;= 3.29.5</changelog>
  <changelog author="wbauer@tmo.at" date="1516190400">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main package's version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 52.6esr (bsc#1077291)
  MFSA 2018-01
  * Speculative execution side-channel attack ("Spectre")
  MFSA 2018-03
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- remove obsolete patch mozilla-ucontext.patch
- official NSS requirement is &gt;= 3.28.6 therefore putting 3.29.5
  into an ifarch</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1520942400">- update to Firefox 52.7esr (bsc#1085130, MFSA 2018-07):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache
    resources
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 52.7.2 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (in mozilla-bmo1446062.patch)
- Firefox 52.7.1 fixes
  - issues with the IT locale (bmo#1445278)</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 52.7.3
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="astieger@suse.com" date="1522238400">- fix release tag and tarball to correctly identify 52.7.3esr</changelog>
  <changelog author="wr@rosenauer.org" date="1525867200">- update to Firefox 52.8.0:
  * Various stability and regression fixes
  * Performance improvements to the Safe Browsing service to avoid
  slowdowns while updating site classification data
- Security fixes (bsc#1092548, MFSA 2018-12):
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8</changelog>
</package>
<package pkgid="1a37d2d3eeb5fde2317cd19848f23c0ec7a142ce4310d9e4240bd77643f96113" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0" rel="95.1"/>
  <changelog author="wr@rosenauer.org" date="1514980800">- fixed regression introduced Oct 10th which made Firefox crash
  when cancelling the KDE file dialog (boo#1069962)</changelog>
  <changelog author="wr@rosenauer.org" date="1515067200">- update to Firefox 57.0.4
  MFSA 2018-1: Speculative execution side-channel attack ("Spectre")
  (boo#1074723)</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- fixed build with latest rust (mozilla-rust-1.23.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
</package>
<package pkgid="4b3761acdb906b0f0f89ad9d28e5838e7596e170a20be55ee708cf973c11a527" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="98.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="5b49e7df9930e4511656109c9bd0678680e23123bafb481feccc9bd37b60229d" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="101.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="61ee0c4bd60296b97488675577b5ca7d051b4d004a5c258648abb8c5e498a0f0" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="106.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="f3c3f69ebe3664b68c879b27c6c73b09c1f589e2b2fa2b96daffe10d5bdc5796" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="109.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="e8c27f687ca2b7ba7afa527572a21e8f73ff808835d1f348c05bee97c8bc36a4" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="112.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="ac0c5dbcb1a1308d832fa969cb643e39100fe8b9e8625c8560f2db5dcdd7d967" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="115.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="c2636d694f1115891ead10c3605ab86e1d9a84a8659f51855357ee1b9c92cce0" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="118.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="20062f99b67be934bd2b33e1686f29e4afd3c36fc0e1be8d3a85b73a9c4dcca3" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="122.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="cda689343c42b1452333fd7aae2ebfd30013d3c4385acc996aae002924c65c83" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="125.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="eb3b5271eaa5100b6e863153c1b4908b4851a1f9cf1f8d7513213e6544123e74" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="128.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="279eb6609fe12017b16815df078f5249581a113fca679da91c6ff8b2c2711232" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="131.1"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="4c86caa5ce5dd69710513062fe17b87353a8a37d390f0e798f5867b4060d4fdd" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="0dd0c64698bb9653f6b87f7e71caccbdf5e4794cef149c5b7df6769547917208" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="77481d61247b946fb31075a68ee4e8a9571b71189d90dbfed3b1acdd24de453c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="a45ad7004505621d6976d1213bfcc897db60331f4aa63c731565192833dc51fa" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="10b2428985450e7a52f9b4ae90672a2f68a79be27fd6198ff33f4c6f0fc93ef7" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="04604582d0add007bde8df47fbbc472c125f8515ef0adcecd6544f7eb77bf9dc" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="d9cb83555b849fe7b6e06135869b2481d90b06fc247adc38919b72f3111b9177" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="fe251846f1abbdee99fe004fe3ee9e7cd7ad9c9ec516e099c8d7a841726ba238" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="e5a870898eb47be5ba02360854a6e73719ffcd1e500f769757835a8107be1a79" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.6" rel="56.1"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="4c8f04fe437a9dcc21aa4d83721ec75494e12cac77f3a51a4f1b52d0fff16eab" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="844f73e7273792d8d5f2148af206df6d99bf3432e37e204d9705c49b049549af" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="7a6a94f4b50633ace591e5b95ec5f6b03c24b5161b54471818234f9d489f63a1" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="5b94fe9af9729c786811dfa56c6778fd29575a0caf78f8ff8bd25775e4fb42b4" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="c2ffedf16140f21e3a15d32bd171260233e75fc3658898cd2b6d0a5012d5c729" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="afc57b20e2447284005159eaacca2d8ffc6366b2c10dd9978de625457e920d51" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="f5ed75951ea771199311a4feefc9cf3faa22140f0773fb89ad7c30204a240173" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="43e09cba0b2363084aa645866413d13dab29bcb7a9e3ee8b911c1f2cb86bff4f" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="99e76f1a6cb44963651e338c9ae0c0f1d4e3dbde5a9ce9435fc92802eb9b7b57" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="6fbb2ce32071a0d6a0c7fa3116b8fd45235a5e032e2e5a6eb826ab469faecea7" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="7a43ed5fe51f7254aff908e8867d31e835e2581f97402265fa5742ce45b8793d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.0" rel="74.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="d298ade08630ed98684e81ae3c802a456f7e5d9218c4157aa5c1d2f99a4e145d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.0" rel="74.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="3f735f65586501e9a70eaa8e5df667185201be6657586e52525c897fb2d5acfb" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.2.1" rel="77.2"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="34179c5d1d5e6c206dcd42d0ce3f0c49006230e9cf4f5f84381718642a256e7b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="77.2"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="eb804276104e609d00e65e0caef232d671c38918b804ce5b3c920f0a3de98dfd" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.3.0" rel="80.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="d75ea120cd5cfdb586c403bfd029f7e10634f7415214757ec4c27c83a376e02d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="80.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="2e662a145632b4738432651473a24094014f093ed4d0b878e9935e325305b046" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.5.0" rel="83.1"/>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- MozillaThunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
</package>
<package pkgid="940269c9eb7d2448dfaf9b387666fb8c984ab4405976e4586ae9153010b70e64" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="83.1"/>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- MozillaThunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
</package>
<package pkgid="6706e29a29d0fdafc00d7c0d6136b6f179a82d8de55be2e90fe953a554a9060b" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.5.1" rel="86.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="68916c0eb26b43b2429acfc136351c8f6ac49f98d17064762d50060890dc4473" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="86.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="f6ed471410f15fea17c612e297c01a612bd06c99ed095f02db2edebca082c394" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="238fc98b680fec17292d08f0ca506041f1711c36257aa80e3002fb0a46bd3ae2" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="69996ff6c0a249adf19aedb5e59addec1dbc68fabb9aa8afd1939f40de9a9c29" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="fb048121b1de600ecad7cb43d436b0e5dd6837367babd20e0fb52e40a333d3c2" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="0e3bf6eb0d2bc002dd9b6f9cd02232afc856406d94e1f05b160a037321123fa1" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="c74fdee0e1cb4c9c06162f27ae9b010658933bad3bd8b0bce81651d9632e769f" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="7b48b7e4d9644d868e3458328c05af22a6e380e5b6b85015676b467164602c1c" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="2de4485b7b06862877dcf95afc4ceb27e43bc885dfdadc70254c9677b89c13e1" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="258ce6e03b6d6b1a6a922046548605eccdf30fa17e437b51aa00ff76b8003893" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="57cc39cf3b6f1c5c19a067f672e28d0e1bd552c62a0324a71fbb618c9d9e41eb" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0" rel="74.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="f3add0d12294f220990c5a0e2addfcf721b09304451cd55b09bc30141af498c9" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="77.2"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="d4c6c69a0286f3e86f1125c8b777cb5ff3bded4c489cebc35a41c725b2048cc0" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="80.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="bdb5e8d07ce099ec1e3d2abae16478e503cdfca25ae43b8d60cb67c0c140d54e" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="83.1"/>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- MozillaThunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
</package>
<package pkgid="e57b516f8246a687c427fa62922e89404faf00ee420343cd3f4431372824b750" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="86.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="6cc7740de84d16a916f01aba1160e66d2645e534b0d29472d6fb27ae493e6c58" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="0358b214958d8e9f43bfacabba8b83608102fc22cdce12793087b26c03509f3a" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="837f3583e48fc2822ac87d355f6e787c580769c086f7b54e8778babc2f582189" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="aa4b4c2b98c94e9915fa57219d656b4c6018f43d0511735cf692f3ca0268eb5b" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="c4f0deb3ef744c10ab0a877d86a502fb76fe6f83bd460f355a9ef1e22a17906a" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="bf273b7bcb309468e2327341b2633420b8730f110caf9305578afd706ed48132" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="ee526a7ed9cfd956d6552530108707eafdc382f5a3e62daece261d3e97707d04" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="f09eebe860965cea974c5bf348c56e1a4e09c7e56820d09486f90f461b49a316" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="56512d3adfff27059328f5464069e4c929c3c022895f63569ecec9ccacdcc3d8" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="704375fb3ee0a86b0ec9cc92925046c0a27ebb3804e6f96be53f305164ef6ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="d318e0c633989ad4e7521800c0464199d52b2c7eb20966f876f03d675447b85d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="505019949580f0af1a059c42ac3c01e436adcfbc77ae71be853fd9fb573bd829" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="bf8fc1dcb7dfba524edeb4657eee2a45c2d612d4019c300fb7e8589d6dc40bfe" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="18006a45864941ed22202ca91e5abd32eaf86a3edb2250c0282426a91ff9c8f8" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="eb498bddeb4f8ea605972223d975bd0bb6c831b60c7b09a37dd938c8fff65ef6" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="46c7bc15a443200758c4a97d81f76b2966ca5e1a8f861c73d0f524e7fc619d7b" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="2851f758bcc20ab07edb366cbd322f38e57ba9d83c6eabc8d25b2ac225fb5c50" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="8b0f754bcace82c26fc0f2f5e4c4e3392451b83a7486c152d39614b77632be83" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="0a9a1c8b4b7797c0b38453143297364bd560e5e96603a1370559c99bd15cf8af" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0" rel="74.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="f9e0c2feec0fc501b839331c90abe2cb77f29d4d18c6f36b575b1973261509dd" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="77.2"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="c69ace852a53e10c74305ef42a0f5e77128e23744386432d617e9a2713d75969" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="80.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="b7b3703e0663ad8d79ce429fa30c4763f1cf8d31ee9f77c12078cbcd319cbb43" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="83.1"/>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- MozillaThunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
</package>
<package pkgid="45a030c497af33dc0a6fe413ba02908cd13f9d0e5a09e46e586325a290c64f29" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="86.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="de09e14287a4dc2f42eb44aca57e021bd5b68439f3035ada24c82e47c88ec0b6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="44.1"/>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
</package>
<package pkgid="9fe28f2956d252ba2eeb8d9ad9625a014050b78b2f7458416eb2d5564ca4d6a2" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="47.1"/>
  <changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
</package>
<package pkgid="604ecd77880a0c148c8701cc08f795005f01b09d45c36db510be8bdaea7f90e6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="50.1"/>
  <changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
  <changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
</package>
<package pkgid="6726da1185a7fb639c2922061f21e055de2c5a9a4476138c545c09ec0a813c63" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="53.1"/>
  <changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit (MFSA 2017-30)
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
</package>
<package pkgid="ef15770f049619ec9295175cfb1cabd0f9d748489903ced67343939633214f43" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.6" rel="56.2"/>
  <changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
</package>
<package pkgid="05b7e420ce27aab58d41a64d02a320a5cc6c548ebf04d8e2239df23ea7b1ecf6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.7" rel="60.1"/>
  <changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
  <changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
</package>
<package pkgid="4fc329c9494c2076374b376fd4ba8e9ea1ea9814c92f930ac8c3e0d49a44a202" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.8" rel="63.1"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="37ae8dd7861a56b52557f79ff0ec1fe76bcbbc1748ed2558ae04b5aa86a1a445" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="68.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="5d8a3e808d7a35ce205077e83be80f959842b52cda2ef7a95eb41d35f7e477f8" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="71.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="943c3a703d8a6a94a44bb31a93134694ddbfb26161b5c0e9cca2777a254dbeab" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0" rel="74.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="f6ad14d78321516ce9b1b1ed509170984a22f6ae311b75ea27ba22793673da29" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="77.2"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="a54c4382a058e9bc3acf3db21b189e8ac35e092e4b8a819a3c8c4060aeff071b" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="80.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="6bd10d4f699188c46c802bb05e4b8d12e954f527ee2877d313429f979f87cf23" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="83.1"/>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- MozillaThunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
</package>
<package pkgid="0afabac630f41def64798753a08036a70c6a53dd793f01a397149ab26eb4830f" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="86.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="05750dbb477b40f8bb51aea237f5e133e264779c6167db650fa9faaaaf553539" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="98d129d5c617da463f8cd501fd58a9ac629702d618206a0414905214b9578eb1" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="3aa2feadea41629e907f607ed0514e7c9a722f81330357d1b63ed9dee67a4f8c" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="4e773c3142f4ad89cdf6896ea8172fa84becc15392db2685883e484be30b0d22" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="fb5e96d98cfc1f51a8d1a8490586bae653cef20f48845262866b862e1561c638" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="b3e3cbd0b83b80bfd2957a8b7b995e70dc76ce8dca1d93d6d195995af2c8ed83" name="NetworkManager-l2tp" arch="src">
  <version epoch="0" ver="1.0.8" rel="2.1"/>
  <changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
  <changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
  <changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>
</package>
<package pkgid="4e5767049d30b7f99cb87320fd2850e88900ee4ebd53427e022b44a8bafec6ba" name="NetworkManager-l2tp" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="2.1"/>
  <changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
  <changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
  <changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>
</package>
<package pkgid="7a6c949f34291c6b78e7ba1759d547ab1b0e4c477fcc527a196e2ee6546945b3" name="NetworkManager-l2tp-gnome" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="2.1"/>
  <changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
  <changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
  <changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>
</package>
<package pkgid="a2da5923225955104a69de30d5edda0841387d1a6f8e673cda0e3cad138276db" name="NetworkManager-l2tp-lang" arch="noarch">
  <version epoch="0" ver="1.0.8" rel="2.1"/>
  <changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
  <changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
  <changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>
</package>
<package pkgid="75af7167e16e6a92c4475952e526483ee1f1a9e4e24ce446aee9aa8881132b4d" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.0.12" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Toggle with_cacert_patch to 1: the patch has been rebased.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Improved capture portal detection.
  + Default route through WiFi connection is now preferred to
    Mobile Broadband if both are available.
  + Expose a flag to determine whether a particular connection is
    metered via API and client tools.
  + Add support for locking connections to a channel within a
    particular band.
  + Add support for configuring Wake-on-LAN capabilitites.
  + Allow overriding the MTU for team device.
  + Usual pile of bug fixes and robustness improvements.
- Rebase NetworkManager-geoclue-interaction.patch .</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 1.0.8:
  + MTU indicated by a VPN gateway is now properly applied.
  + Fixed MSS setting when MTU changes.
  + The default route is properly restored on device disconnect.
  + Build with older toolchains has been fixed.
  + The team devices can now properly be enslaved to bridges.
  + Failed DHCP attempts for assumed connections are now retried
    after a timeout.
  + Default wired connection is now created after udev registers
    the device.
  + Support for Bluetooth DUN devices with Bluez 5 has been fixed.
  + The ipv6.ignore-auto-dns property is now properly honored
    making it possible to override automatically obtained name
    servers.
  + Invalid permanent MAC adddresses as reported by some devices
    are now ignored.
  + Device links reported by more recent versions of Linux kernel
    that reside in different network namespaces are no longer
    confused with links in the namespace NetworkManager runs in.
  + MAC address changes of VLANs enslaved to a bond are now
    properly propagated to the master device.
  + Fixed error handling for teaming devices with invalid
    configuration.
  + Wi-Fi AP list is now updated correctly after AP mode has been
    used.
  + Management of a device is not attempted until the device has
    been registered with udev.
  + The error handling for VPN secret agents is now significantly
    more robust.
  + Detection of s390 CTC devices now works properly.
  + A GATEWAY property in /etc/sysconfig/network now no longer
    affects non-static connections.
  + Added support for IPv6-only VPN connections.
  + The systemd service now uses HUP signal to reload
    configuration.
  + Change VLAN default flags to set REORDER_HDR for new
    connections.
  + nmtui is now able to ignore automatically configured routes.
  + Numerous bash shell autocompletion fixes for nmcli.
  + Allow setting IPv6 and PPP settings for GSM and CDMA
    connections via nmcli.
  + Added support for adding ADSL connections in nmcli.
  + Numerous crash fixes.
  + Updated translations.
- Rebase NetworkManager-geoclue-interaction.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Update to version 1.0.10:
  + Added support for handling VPN secrets to nmtui and nmcli agent.
  + Fixed a regression that caused NetworkManager to ignore
    external deletion of a device with master.
  + Fixed glitches with older versions of glib (prior to 2.36.0).
  + Fixed build with most recent versions of libsoup.
  + Fixed busy retry loop on non-transient errors from
    wpa_supplicant.
  + Improvements to testing infrastructure.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451822400">- Add explicit pkgconfig(libteam) BuildRequires: force team
  connection support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452081600">- Add NetworkManager-openvpn-route-configuration.patch: Fix routes
  not being applied when connecting to openVPN.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452081601">- Add nm-ppp-manager-clear-ppp_watch_id.patch and
  nm-update-ip_iface-only-if-IP-interface-exists.patch: Patches
  from upstream git cherrypicked to stable branch from master.</changelog>
  <changelog author="badshah400@gmail.com" date="1457870400">- Split out a NetworkManager-branding-upstream subpackage that
  installs the default upstream version of the
  /etc/NetworkManager/NetworkManager.conf file.
- Add Requires: NetworkManager-branding to main package.</changelog>
  <changelog author="sckang@suse.com" date="1459512000">- nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
  rebased.</changelog>
  <changelog author="badshah400@gmail.com" date="1459598400">_ Update to version 1.0.12:
  + DHCP leases on software devices are now renewed when the
    computer is awoken from suspend.
  + Improved ifupdown plugin robustness and interoperability on
    Yocto and OpenEmbedded.
  + Fixed failed VPN activations when plugin supports interactive
    mode, but the VPN daemon does not.
  + Wi-Fi monitor interfaces are now ignored, not turned into
    managed mode.
  + AP and AdHoc mode connections with manual IP configuration are
    now able to autoconnect.
  + Broken device drivers (AWS ENI) that initially have invalid
    MAC addresses are now properly managed as soon as correct MAC
    address is set.
  + WWAN devices are unlocked a bit earlier so that supported IP
    versions can be queried.
  + The NetworkManager.service was ordered after
    network-pre.target and dbus.service. This ensures
    NetworkManager doesn't set up connectivity before firewall
    rules are in place and wouldn't exit before remote filesystems
    can be umounted ensuring orderly operation of systemd managed
    installations.
  + The netfilter rules used with shared IPv4 method are now
    removed on exit.
  + Ability to manage USB gadget drivers (UDC side) has beed
    added.
  + Infiniband transport mode change now takes place with the link
    set down because some drivers need that.
  + Race conditions that could disclose connection secrets to
    authenticated local users when changing ifcfg and keyfile
    connections have been fixed.  This has security impact of low
    severity (CVE-2016-0764).
  + A handful of memory leak and crasher bugs of minor importance
    have been fixed.
- Drop patches incorporated upstream:
  - NetworkManager-openvpn-route-configuration.patch.
  - nm-ppp-manager-clear-ppp_watch_id.patch.
  - nm-update-ip_iface-only-if-IP-interface-exists.patch.
- Rebase systemd-network-config.patch for updated version.</changelog>
  <changelog author="sckang@suse.com" date="1459857600">- nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
  rebased.</changelog>
  <changelog author="sckang@suse.com" date="1460116800">- Update to version 1.0.12 (FATE#318572)
- drop nm-core-fix-crash-during-Wi-Fi-rescan-by-emitting-NM_DE.patch
  contained in version 0.9.9.1.
- Rebase NetworkManager-geoclue-interaction.patch
- Rebase nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff
- Rebase nm-treat-not-saved-secrets-just-like-agent-owned-when-cl.diff
- Rebase systemd-network-config.patch
- Rebase nm-probe-radius-server-cert.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move provides NetworkManager(cacert-patch) to libnm-util2, to
  ensure gnome-control-center doesn't hard requires NetworkManager.</changelog>
  <changelog author="sckang@suse.com" date="1468843200">- Modify nm-probe-radius-server-cert.patch: Make sure the "Apply"
  button in Wifi configuration page of gnome-control-center is
  clickable (bsc#985332).</changelog>
  <changelog author="sckang@suse.com" date="1473768000">- Modify
  nm-don-t-consider-not-needed-secrets-for-has_system_secr.diff:
  Remove two assertions that brings error message (bsc#882801).</changelog>
  <changelog author="sckang@suse.com" date="1482148800">- Add nm-fix-always-prompt-for-new-password.patch: Don't ask for
  new PSk for locally-generated
  WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error (bsc#966232).</changelog>
  <changelog author="sckang@suse.com" date="1484827200">- Add nm-dont-crash-when-system-secret-is-not-needed.patch: Fix
  NetworkManager crashes when editing the same Wifi the second
  time in gnome-control-center (bsc#1009717).</changelog>
  <changelog author="sckang@suse.com" date="1487592000">- Add nm-dont-overwrite-resolv-conf.patch: Fix NetworkManager
  overwriting /etc/resolv.conf (bsc#960153, bsc#1021665).</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="sckang@suse.com" date="1536753600">- Add nm-fix-dhcp-client-timeout.patch: Fix NetworkManager ignore
  valid leases on dhcp timeout (bsc#1103477).</changelog>
</package>
<package pkgid="a2cc05fbba7388fbc74cae195e6c0be9a1e00ea3e7c197a8562dc989a84368ef" name="NetworkManager-vpnc" arch="src">
  <version epoch="0" ver="1.0.8" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Use right prefix for point-to-point tunnels.
  + Look for NETMASKLEN before NETMASK for IPv4 prefix.
  + Simplify password and flags handling.
  + Add support for Hybrid authentication (bgo#495893)
  + Look for old password names in the keyring too.
  + Preserve secret flags.
  + Use a simplified password request dialog.</changelog>
  <changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Clean up .pcf file import code.
  + Fix empty "Advanced" window after clicking the window's close
    button.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for Juniper/Netscreen devices
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Config dialog tooltips now refer to corresponding vpnc config
    option
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Pass multiple domain names for NetworkManager if given by vpnc.
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Support for "Application Version" setting</changelog>
  <changelog author="dimstar@opensuse.org" date="1355054400">- Don't package the empty README as doc file (bnc#779418).</changelog>
  <changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + Added a "local port" setting, for servers that require
    connections to come from a specific port.
  + nm-vpnc-service now returns translated error messages.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.6:
  + Reverted broken pid file patch from 0.9.8.4.
- Changes from version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Use /var/run/NetworkManager to store vpnc pid file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405080000">- Update to version 0.9.10.0:
  + Uses libsecret for password storage instead of gnome-keyring.
  + Supports interactive password queries from vpnc.
  + Updated translations.
- Replace pkgconfig(gnome-keyring-1) BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams switch to
  libsecret.
- Add pkgconfig(libnm-gtk) BuildRequires: new depdendency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 1.0.0:
  + Added option to change tunnel interface name.
  + Supports interactive password queries from vpnc ("next token
    code", etc).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430913600">- Update to version 1.0.2:
  + Updated translations.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Fix error checking for write() calls.
  + Enhanced the GUI to support agent-owned and always-ask
    passwords.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1462881600">- Move Requires: gnome-keyring from core package to gnome
  frontend package (boo#997343).</changelog>
  <changelog author="sckang@suse.com" date="1531915200">- Add nm-vpnc-check-invalid-configuration.patch: check
  configurations that contain newline characters and invalidate
  them to avoid security attacks (bsc#1101147/CVE-2018-10900).</changelog>
</package>
<package pkgid="38abdec75c070b2e7346ea7fea7d954c82b04ceb93f1b0bbd967b6c051a8aea8" name="NetworkManager-vpnc" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Use right prefix for point-to-point tunnels.
  + Look for NETMASKLEN before NETMASK for IPv4 prefix.
  + Simplify password and flags handling.
  + Add support for Hybrid authentication (bgo#495893)
  + Look for old password names in the keyring too.
  + Preserve secret flags.
  + Use a simplified password request dialog.</changelog>
  <changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Clean up .pcf file import code.
  + Fix empty "Advanced" window after clicking the window's close
    button.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for Juniper/Netscreen devices
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Config dialog tooltips now refer to corresponding vpnc config
    option
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Pass multiple domain names for NetworkManager if given by vpnc.
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Support for "Application Version" setting</changelog>
  <changelog author="dimstar@opensuse.org" date="1355054400">- Don't package the empty README as doc file (bnc#779418).</changelog>
  <changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + Added a "local port" setting, for servers that require
    connections to come from a specific port.
  + nm-vpnc-service now returns translated error messages.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.6:
  + Reverted broken pid file patch from 0.9.8.4.
- Changes from version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Use /var/run/NetworkManager to store vpnc pid file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405080000">- Update to version 0.9.10.0:
  + Uses libsecret for password storage instead of gnome-keyring.
  + Supports interactive password queries from vpnc.
  + Updated translations.
- Replace pkgconfig(gnome-keyring-1) BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams switch to
  libsecret.
- Add pkgconfig(libnm-gtk) BuildRequires: new depdendency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 1.0.0:
  + Added option to change tunnel interface name.
  + Supports interactive password queries from vpnc ("next token
    code", etc).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430913600">- Update to version 1.0.2:
  + Updated translations.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Fix error checking for write() calls.
  + Enhanced the GUI to support agent-owned and always-ask
    passwords.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1462881600">- Move Requires: gnome-keyring from core package to gnome
  frontend package (boo#997343).</changelog>
  <changelog author="sckang@suse.com" date="1531915200">- Add nm-vpnc-check-invalid-configuration.patch: check
  configurations that contain newline characters and invalidate
  them to avoid security attacks (bsc#1101147/CVE-2018-10900).</changelog>
</package>
<package pkgid="b7ba2b9adfc651a30ea26d93ea67fc714c4b0f05bcb53bd2303011ba447bd323" name="NetworkManager-vpnc-gnome" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Use right prefix for point-to-point tunnels.
  + Look for NETMASKLEN before NETMASK for IPv4 prefix.
  + Simplify password and flags handling.
  + Add support for Hybrid authentication (bgo#495893)
  + Look for old password names in the keyring too.
  + Preserve secret flags.
  + Use a simplified password request dialog.</changelog>
  <changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Clean up .pcf file import code.
  + Fix empty "Advanced" window after clicking the window's close
    button.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for Juniper/Netscreen devices
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Config dialog tooltips now refer to corresponding vpnc config
    option
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Pass multiple domain names for NetworkManager if given by vpnc.
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Support for "Application Version" setting</changelog>
  <changelog author="dimstar@opensuse.org" date="1355054400">- Don't package the empty README as doc file (bnc#779418).</changelog>
  <changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + Added a "local port" setting, for servers that require
    connections to come from a specific port.
  + nm-vpnc-service now returns translated error messages.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.6:
  + Reverted broken pid file patch from 0.9.8.4.
- Changes from version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Use /var/run/NetworkManager to store vpnc pid file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405080000">- Update to version 0.9.10.0:
  + Uses libsecret for password storage instead of gnome-keyring.
  + Supports interactive password queries from vpnc.
  + Updated translations.
- Replace pkgconfig(gnome-keyring-1) BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams switch to
  libsecret.
- Add pkgconfig(libnm-gtk) BuildRequires: new depdendency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 1.0.0:
  + Added option to change tunnel interface name.
  + Supports interactive password queries from vpnc ("next token
    code", etc).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430913600">- Update to version 1.0.2:
  + Updated translations.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Fix error checking for write() calls.
  + Enhanced the GUI to support agent-owned and always-ask
    passwords.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1462881600">- Move Requires: gnome-keyring from core package to gnome
  frontend package (boo#997343).</changelog>
  <changelog author="sckang@suse.com" date="1531915200">- Add nm-vpnc-check-invalid-configuration.patch: check
  configurations that contain newline characters and invalidate
  them to avoid security attacks (bsc#1101147/CVE-2018-10900).</changelog>
</package>
<package pkgid="6d71aed7d240fc932722b047f7efd718033e3537de9d25fe3cf64d7927b5f3f9" name="NetworkManager-vpnc-lang" arch="noarch">
  <version epoch="0" ver="1.0.8" rel="7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Use right prefix for point-to-point tunnels.
  + Look for NETMASKLEN before NETMASK for IPv4 prefix.
  + Simplify password and flags handling.
  + Add support for Hybrid authentication (bgo#495893)
  + Look for old password names in the keyring too.
  + Preserve secret flags.
  + Use a simplified password request dialog.</changelog>
  <changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Clean up .pcf file import code.
  + Fix empty "Advanced" window after clicking the window's close
    button.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for Juniper/Netscreen devices
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Config dialog tooltips now refer to corresponding vpnc config
    option
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Pass multiple domain names for NetworkManager if given by vpnc.
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Support for "Application Version" setting</changelog>
  <changelog author="dimstar@opensuse.org" date="1355054400">- Don't package the empty README as doc file (bnc#779418).</changelog>
  <changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + Added a "local port" setting, for servers that require
    connections to come from a specific port.
  + nm-vpnc-service now returns translated error messages.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.6:
  + Reverted broken pid file patch from 0.9.8.4.
- Changes from version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Use /var/run/NetworkManager to store vpnc pid file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405080000">- Update to version 0.9.10.0:
  + Uses libsecret for password storage instead of gnome-keyring.
  + Supports interactive password queries from vpnc.
  + Updated translations.
- Replace pkgconfig(gnome-keyring-1) BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams switch to
  libsecret.
- Add pkgconfig(libnm-gtk) BuildRequires: new depdendency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 1.0.0:
  + Added option to change tunnel interface name.
  + Supports interactive password queries from vpnc ("next token
    code", etc).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430913600">- Update to version 1.0.2:
  + Updated translations.</changelog>
  <changelog author="simon@simotek.net" date="1441108800">- Update to version 1.0.6:
  + Fix error checking for write() calls.
  + Enhanced the GUI to support agent-owned and always-ask
    passwords.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1462881600">- Move Requires: gnome-keyring from core package to gnome
  frontend package (boo#997343).</changelog>
  <changelog author="sckang@suse.com" date="1531915200">- Add nm-vpnc-check-invalid-configuration.patch: check
  configurations that contain newline characters and invalidate
  them to avoid security attacks (bsc#1101147/CVE-2018-10900).</changelog>
</package>
<package pkgid="c7bef392ae8e738f6593cb24479dcd62200c165ad5e0e60c1463584659683c07" name="OpenIPMI" arch="src">
  <version epoch="0" ver="2.0.21" rel="11.1"/>
  <changelog author="duwe@suse.de" date="1268308800">- compile and dependency fixes
  (bnc#388026,bnc#529028,bnc#497595,bnc#552480)
- use a large buffer for SoL (bnc#587029)</changelog>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
</package>
<package pkgid="99d327f217c3b99f6ad685e6e59a5b1e3435c5609b5cb5fdcaa043fe17c952e1" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="11.1"/>
  <changelog author="duwe@suse.de" date="1268308800">- compile and dependency fixes
  (bnc#388026,bnc#529028,bnc#497595,bnc#552480)
- use a large buffer for SoL (bnc#587029)</changelog>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
</package>
<package pkgid="be6b7ff7693d4f903e02bc73d4a15f5b25d5f713f8556b40e7445c2836747ef8" name="OpenIPMI" arch="src">
  <version epoch="0" ver="2.0.21" rel="14.1"/>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1060799, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
</package>
<package pkgid="f57b088572a74f3288185e78a12d8b441ce91bbef3648959c7293ba1b08bb74e" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="14.1"/>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1060799, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
</package>
<package pkgid="7242dc5f9ded0998eaf2732e68c8c112ab9aa8c4cf1bbbabe51de90ed87d53f0" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="11.1"/>
  <changelog author="duwe@suse.de" date="1268308800">- compile and dependency fixes
  (bnc#388026,bnc#529028,bnc#497595,bnc#552480)
- use a large buffer for SoL (bnc#587029)</changelog>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
</package>
<package pkgid="7326022cfa1dc00777bb880f46a1c3c581f7ea6e4050e819380319bb2ba86bd8" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="14.1"/>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1060799, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
</package>
<package pkgid="423a3c51503cfaa5186ec95432005190e6bc25717ce8ceb2ec1fcf36bc2e0b6f" name="OpenIPMI-python" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="11.1"/>
  <changelog author="duwe@suse.de" date="1268308800">- compile and dependency fixes
  (bnc#388026,bnc#529028,bnc#497595,bnc#552480)
- use a large buffer for SoL (bnc#587029)</changelog>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
</package>
<package pkgid="6a437db4ded7827cdc2a3ed5bf58e81563632aad323bb92ed4cf8d7952e4f13f" name="OpenIPMI-python" arch="x86_64">
  <version epoch="0" ver="2.0.21" rel="14.1"/>
  <changelog author="aj@suse.de" date="1295179200">- Buildrequire python-xml instead of dropped pyxml.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1319371200">- fix mtime on python .pyc files
- remove python .pyo files (they're useless)
- add reload to init script, which fails with exit code 3 as it is not
  implemented
- update to 2.0.19 (cumulated):
  * ipmi.init - Initscripts should be idempotent, meaning you can safely call
    "start" multiple times in a row and receive a success each time if the
    service is running. This requirement is mentioned in the LSB Spec, version
    3.1, section 20.2.
  * lib/sensor.c: Change the "share count" checking to check if share count is
    &gt; 1, not &gt; 0, because some silly machines set the value to one when they
    should set it to zero, and one is a silly setting
  * add a cache option</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="duwe@suse.com" date="1346846400">- fix bnc#714634</changelog>
  <changelog author="coolo@suse.com" date="1347451200">- use %perl_requires</changelog>
  <changelog author="kkaempf@suse.com" date="1352980800">- Update to 2.0.20-rc1
  * Rename lanserv_emu to ipmi_sim, and modify ipmi_sim to use
    the OS handler.
  * lanserv, man: Did a massive restructure of lanserv and the
    IPMI simulator for supporting a VM interface.
  * Many bugs fixed
- Suffix all patches with .patch</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Add patch to fix OpenIPMIpthread .pc file bsc#1046174
  * 0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1513166400">- Make sure gui_winsys.py is also installed.
  [bsc#1060118, OpenIPMI-install-gui_winsys.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1060799, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
</package>
<package pkgid="080f2f3f93bf5fee5f2c6cb422e360b2473126926680d95cde7499d8fa854a27" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="0d75eb15c85372fbe199d6558c2ec0b0477277c683a55f09c746839567f171cb" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="3809d0621cb6df12accf3f7c75ab5cd624c752f155c5ae273c495da9b390ef3d" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="aae6b16ff1ec0c7ab32e00e1a20a66e7f99a85bd9a63b8c2aaba57145917c879" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="a4c0718efa407c22923d3e77d36fd83594c7d44aec2b9ad9fbbd6cbc19cd96e4" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="c64ef72534a9aa61c868787537f207de1e7cff5ba18471639b61ad83c14f67c6" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="1d4715089107d9935b59625feb14641b73e01812ee8f47d309f3b897551baba5" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="1988cf1755925e132166427adc23e220e98067a801a5cd8b3b062e856e576b0a" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="de414c51a2190d5ffbf986805ce1b5a6fa54cc871c4d26996d64b67c8dee19be" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="17a5f76e78182f1b24d0289d5d67fcadbf9b06e8eb49784b3d465fce8cc22655" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="0e52ca46ebe60db679fa3beab94cdc3f0a1986c5d71a8cf61fa359c25fafe43e" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="74d65ac48e8711e4eaf90df435b23a16473abad9e0eaf9e4e13178b0f6ea465f" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="8d11902bcb622f80b2620eb66fb57cfda51c5084e26b9a212a26069ff0fcb839" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="40b062cb575eb0ef6d2f4fc6552e4edb2b7ea69566df1668fc3fe8d23408794c" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="5f15e44b9602d212291cc056baf4eb458db6b335fdd8b0479b20ec565cb6d15e" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 1.0.10:
  + Process the offline update triggered by older PK versions.
  + Use Glib for reading symlink to prevent crash with some
    compilers.</changelog>
  <changelog author="tchvatal@suse.com" date="1447070400">- Add Suggests: cron due to existing cronscript
- Slight whitespace with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1447416000">- Add PackageKit-fix-offline-trigger.patch: Fix the PK trigger
  detection: if not done properly, PK might believe that something
  else triggered the system update and expects something else to
  handle the update (boo#954125).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447416001">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936).</changelog>
</package>
<package pkgid="78b8132e388d527b1e5bcab0a0a392112ff460dc2f99914f1661ccbecd1eda58" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1447416000">- Add PackageKit-avoid-endless-loop-on-autoupdate.patch: Avoid a
  endless loop on autoupdates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448798400">- Update to version 1.0.11:
  + By popular demand, reintroduce the UpgradeSystem method.
  + Backends:
  - python:
    . Make PackagekitProgress an Iterable.
    . Set steps on PackagekitProgress instanciation.
  - zypp: Raise priority of ZYPP stack updates if a security
    patch is shadowed (bsc#951592).
  - dummy: Implement simulating UpgradeSystem and respect the
    transaction flags.
  - Lots of fixes for aptcc, hif and portage backends.
  + New Features: Allow the use of variadic functions in vala.
  + Bugfixes: Make pk_details_get_size documentation more specific.
- Add PackageKit-zypp-buildfix.patch: Fix build of the zypp
  backend.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 1.1.0:
  + New Features:
  - Add client side API for triggering offline system upgrades.
  - Add getters for PkProgress.
  - Add pk_get_distro_version_id.
  - Add system upgrade API to PkTask.
  - Port to g_autoptr().
  - Remove the PackageKit browser plugin.
  - Use the GLib network monitoring support.
  + Backends:
  - zypp:
    . Avoid media access when testing for cd/dvd URL scheme.
    . Fix build.
    . Use libzypp's arch compatibility check.
  - Other fixes for alpm, aptcc and hif.
  + Bugfixes:
  - Add missing description for obsoleted packages.
  - Add support for offline system upgrades.
  - Allow to enable or disable systemd units for offline update.
  - Correctly store file descriptor from logind (bgo#94070).
  - Do not crash on GetPrepared when there are no offline
    updates.
  - Do not crash on transaction database corruption.
  - Do not crash when parsing a very broken transaction log.
  - Do not install offline update related files if disabled.
  - Emit PropertiesChanged for UpgradeSystem transaction flags.
  - Fix download-size-remaining property type.
  - Fix various minor memory leaks.
  - Make transaction get_proxy() return TRUE for no proxy
    settings.
  - Minor fixes in command_not_found_handle{,r}() for bash and
    zsh.
  - Relax validation performed on input strings passed to
    backends.
  - Require dbus.socket for offline update.
  - Set PACKAGEKIT_CALLER_UID environment.
  - Sort package names when printing out simulation.
  - Use new PkTask API for system upgrades.
- Rebase PackageKit-dbus-location.patch.
- Drop PackageKit-zypp-buildfix.patch: fixed upstream.
- Drop PackageKit-browser-plugin subpackage: the plugin was removed
  upstream.
- No longer pass --with-mozilla-plugin-dir to configure: without
  the plugin there is no need to know where it would need to be
  installed.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461931200">- Update to version 1.1.1:
  + Backends:
  - alpm: port to g_autoptr().
  - hif: Set ALLOW_DOWNGRADE flag for all transactions.
  - zypp: Enforce formatting input as string.
  + New Features:
  - Add UpdateTriggered / UpgradeTriggered DBus properties.
  - Add TriggerUpgrade DBus method handling.
  + Bugfixes:
  - Emit UpdatesChanges when installing packages.
  - Fix GIR annotations for progress callbacks.
  - Increase the number of packages that can be resolved.
  - Point offline update/upgrade trigger to the prepared update.
  - Unlink any existing offline update triggers before creating.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Drop docbook-utils BuildRequires: No longer needed for man pages
  building.</changelog>
  <changelog author="hpj@suse.com" date="1463659200">- Update to GNOME 3.20.2 (FATE#318572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 1.1.2:
  + This release adds a new backend for the Nix package manager.
  + New Features:
  - Add a test for offline distro upgrades.
  - Add PreparedUpgrade DBus property.
  + Bugfixes:
  - Make pk_console_get_prompt() big endian safe.
  - Require admin authorisation to trigger a distro upgrade.
  - build: Avoid g_simple_async_result deprecation warnings.
  - task: Fix only-trusted property notifications.
  - task: Honour the only_trusted property when setting up
    transactions.
  + Backends: fixes for alpm. aptcc, hif and katja.
- Add trusted key of Kalev Lember (8F62AF74) to the keyring.
- Fix update-alternatives usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Update to version 1.1.3:
  + Bugfixes:
  - backend job: Avoid emitting duplicates with parallel
    download.
  - Revert a patch that caused PackageKit to always request auth
    when installing packages.
  - Update the GPLv2 text in COPYING.
  + Backends: zypp: PK_FILTER_ENUM_ARCH is supposed to filter on
    primary arch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468584000">- Add PackageKit-annotate-dbus-interface.patch: annotate the DBus
  interface introduced with version 1.1.2 in order for PK-Qt to
  be able to build.</changelog>
  <changelog author="ma@suse.com" date="1469448000">- Add
  0001-zypp-Return-error-if-invalid-package-IDs-are-detecte.patch:
  Fix segfaults when detecting invalid package IDs
  (gh#hughsie/PackageKit#148).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471003200">- Stop Providing/Obsoleting opensuse-codecs-installer, it was
  dropped more than 5 years ago.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126400">- Drop PackageKit-fix-offline-trigger.patch: in line with upstreams
  expectation we package /var/cache/PackageKit. With this present
  the symlink produced for offline update can correctly symlink
  to an existing directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472126401">- Drop PackageKit-1.0.1-fix-bashisms.patch: this patch has been
  submitted upstream for discussion (gh#hughsie/PackageKit#162). If
  accepted, we'll inherit with a future update, if declined, it is
  not important enough to carry around. The code it touches is only
  used by the internal test suite.</changelog>
  <changelog author="sckang@suse.com" date="1516017600">- Mark
  bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch
  as PATCH-FIX-UPSTREAM (bsc#1075260).</changelog>
  <changelog author="sckang@suse.com" date="1523966400">- Add 0001-Do-not-set-JUST_REINSTALL-on-any-kind-of-auth-failur.patch:
  Do not set JUST_REINSTALL on any kind of auth failure
  (bsc#1086936).</changelog>
  <changelog author="sckang@suse.com" date="1523966401">- Add PackageKit-drop-polkit-rule.patch: Drop the polkit rule
  which allow users in wheel group to install packages without
  root password (bsc#1086936, CVE-2018-1106).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="e2ab50b9cf53f5fcaa85ccc89dbcc7300c221e6a35fe0ce4575fcc1c4b26b61e" name="Regina-REXX" arch="src">
  <version epoch="0" ver="3.9.1" rel="4.3.1"/>
  <changelog author="ro@suse.de" date="968932800">- update to 2.1
- fix for alpha</changelog>
  <changelog author="schwab@suse.de" date="969278400">- Use alpha patch on ia64 and lower opt level.</changelog>
  <changelog author="mfabian@suse.de" date="989409600">- bzip2 sources</changelog>
  <changelog author="schwab@suse.de" date="992606400">- Fix for new autoconf.</changelog>
  <changelog author="coolo@suse.de" date="1021982400">- use %_libdir</changelog>
  <changelog author="mge@suse.de" date="1029412800">- update to 3.0</changelog>
  <changelog author="mge@suse.de" date="1029499200">- fix building on 64bit</changelog>
  <changelog author="mge@suse.de" date="1029844800">- fix dependencies (remove BuildRoot from installed scripts)</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="mmj@suse.de" date="1055678400">- Package all dirs</changelog>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="7ad834276b55188e939d5dc13d5c428cbfbee60267ba5da0f4bc5ba020e01e34" name="Regina-REXX" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="4.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="b4d5c516372f1fca456a222911b543f17b83cc6e322e5a9d3ac6d99d82736364" name="Regina-REXX-devel" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="4.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="b804def78068d0764936224f50431c9d0be4dfc2e1c4a72358c1a77a72fb446b" name="Regina-REXX-doc" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="4.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="aa48928c08c596f19eb5508a45c4ace11e2734078d4e5800fa68b919777a7ab4" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.3" rel="14.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
  <changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
  <changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
  <changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
  <changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
  <changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
  <changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>
</package>
<package pkgid="8dbc237e2eb913fdfd1ea4d2ee27067d37fe2ee24226f5c6459a38266d495c88" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="18.1"/>
  <changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- update to version 2.0.4
  General:
  * Added support for web applications using Emscripten, see
    docs/README-emscripten.md for more information
  * Added support for web applications using Native Client (NaCl), see
    docs/README-nacl.md for more information
  * Added an API to queue audio instead of using the audio callback:
    SDL_QueueAudio(), SDL_GetQueuedAudioSize(), SDL_ClearQueuedAudio()
  * Added events for audio device hot plug support:
    SDL_AUDIODEVICEADDED, SDL_AUDIODEVICEREMOVED
  * Added SDL_PointInRect()
  * Added SDL_HasAVX2() to detect CPUs with AVX2 support
  * Added SDL_SetWindowHitTest() to let apps treat parts of their SDL window
    like traditional window decorations (drag areas, resize areas)
  * Added SDL_GetGrabbedWindow() to get the window that currently has input
    grab, if any
  * Added SDL_RenderIsClipEnabled() to tell whether clipping is currently
    enabled in a renderer
  * Added SDL_CaptureMouse() to capture the mouse to get events while the
    mouse is not in your window
  * Added SDL_WarpMouseGlobal() to warp the mouse cursor in global screen
    space
  * Added SDL_GetGlobalMouseState() to get the current mouse state outside of
    an SDL window* Added a direction field to mouse wheel events to tell
    whether they are flipped (natural) or not
  * Added GL_CONTEXT_RELEASE_BEHAVIOR GL attribute (maps to
    [WGL|GLX]_ARB_context_flush_control extension)
  * Added EGL_KHR_create_context support to allow OpenGL ES version selection
    on some platforms* Added NV12 and NV21 YUV texture support for OpenGL and
    OpenGL ES 2.0 renderers
  * Added a Vivante video driver that is used on various SoC platforms
  * Added an event SDL_RENDER_DEVICE_RESET that is sent from the D3D
    renderers when the D3D device is lost, and from Android's event loop when
    the GLES context had to be recreated
  * Added a hint SDL_HINT_NO_SIGNAL_HANDLERS to disable SDL's built in signal
    handling* Added a hint SDL_HINT_THREAD_STACK_SIZE to set the stack size of
    SDL's threads
  * Added SDL_sqrtf(), SDL_tan(), and SDL_tanf() to the stdlib routines
  * Improved support for WAV and BMP files with unusual chunks in them
  * Renamed SDL_assert_data to SDL_AssertData and SDL_assert_state to
    SDL_AssertState
  * Added a hint SDL_HINT_WINDOW_FRAME_USABLE_WHILE_CURSOR_HIDDEN to prevent
    window interaction while cursor is hidden
  * Added SDL_GetDisplayDPI() to get the DPI information for a display* Added
    SDL_JoystickCurrentPowerLevel() to get the battery level of a joystick
  * Added SDL_JoystickFromInstanceID(), as a helper function, to get the
    SDL_Joystick* that an event is referring to.
  * Added SDL_GameControllerFromInstanceID(), as a helper function, to get
    the SDL_GameController* that an event is referring to.</changelog>
  <changelog author="jengelh@inai.de" date="1457611200">- Enable udev support</changelog>
  <changelog author="mpluskal@suse.com" date="1458216000">- Make building more verbose</changelog>
  <changelog author="aloisio@gmx.com" date="1476964800">- Update to 2.0.5
  General:
  * Implemented audio capture support for some platforms
  * Added SDL_DequeueAudio() to retrieve audio when buffer
    queuing is turned on for audio capture
  * Added events for dragging and dropping text
  * Added events for dragging and dropping multiple items
  * By default the click raising a window will not be
    delivered to the SDL application. You can set the hint
    SDL_HINT_MOUSE_FOCUS_CLICKTHROUGH to "1" to allow that click
    through to the window.
  * Saving a surface with an alpha channel as a BMP will use a
    newer BMP format that supports alpha information. You can
    set the hint SDL_HINT_BMP_SAVE_LEGACY_FORMAT to "1" to use
    the old format.
  * Added SDL_GetHintBoolean() to get the boolean value of a
    hint
  * Added SDL_RenderSetIntegerScale() to set whether to
    smoothly scale or use integral multiples of the viewport
    size when scaling the rendering output
  * Added SDL_CreateRGBSurfaceWithFormat() and
    SDL_CreateRGBSurfaceWithFormatFrom() to create an SDL
    surface with a specific pixel format
  * Added SDL_GetDisplayUsableBounds() which returns the area
    usable for windows. For example, on Mac OS X, this subtracts
    the area occupied by the menu bar and dock.
  * Added SDL_GetWindowBordersSize() which returns the size of
    the window's borders around the client area
  * Added a window event SDL_WINDOWEVENT_HIT_TEST when a
    window had a hit test that wasn't SDL_HITTEST_NORMAL (e.g.
    in the title bar or window frame)
  * Added SDL_SetWindowResizable() to change whether a window
    is resizable
  * Added SDL_SetWindowOpacity() and SDL_GetWindowOpacity() to
    affect the window transparency
  * Added SDL_SetWindowModalFor() to set a window as modal for
    another window
  * Added support for AUDIO_U16LSB and AUDIO_U16MSB to
    SDL_MixAudioFormat()
  * Fixed flipped images when reading back from target
    textures when using the OpenGL renderer
  * Fixed texture color modulation with SDL_BLENDMODE_NONE
    when using the OpenGL renderer
  * Fixed bug where the alpha value of colorkeys was ignored
    when blitting in some cases
  Linux:
  * Added support for the Fcitx IME
  * Added a window event SDL_WINDOWEVENT_TAKE_FOCUS when a
    window manager asks the SDL window whether it wants to take
    focus.
  * Refresh rates are now rounded instead of truncated, e.g.
    59.94 Hz is rounded up to 60 Hz instead of 59.
  * Added initial support for touchscreens on Raspberry Pi</changelog>
  <changelog author="aloisio@gmx.com" date="1477224000">- Backported commit 5184186d4366 and fbf9b0e3589a as
  SDL2-ppc64-declaration-after-statement.patch to fix build
  on ppc64/ppc64le</changelog>
  <changelog author="jengelh@inai.de" date="1487160000">- Add dbus-ime.diff and build with fcitx [boo#1025413]</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- CVE-2017-2888: Incorrect XCF property handling (boo#1062784).
  * Add SDL-bnc1062784-check-overflow-xcf-props.patch.</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
</package>
<package pkgid="df48d17da500cc5edb270903c21d98938e61762e0c9193e1f9bfea9214e07ade" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.0" rel="13.7.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="astieger@suse.com" date="1518696000">- CVE-2017-2887: A specially crafted file could have been used to
  cause a stack overflow resulting in potential code execution.
  bsc#1062777, add CVE-2017-2887.patch</changelog>
</package>
<package pkgid="77bd749a625e2ad291e3f73bdbd9c16513129e0f3506f27d1a6f8b1fee963430" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.3" rel="13.10.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
</package>
<package pkgid="4d77f9b8b2da00fa476f63582552b94c7ec47cc7f4f93cea0fa038c43d9dc9f7" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.4" rel="13.13.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="9d3d780e5ab58b4fc700a8049e1343304fdc132b66b6399699a2966fa86ec443" name="SDL_image" arch="src">
  <version epoch="0" ver="1.2.12" rel="16.3.1"/>
  <changelog author="prusnak@suse.cz" date="1185364800">- updated to 1.2.6
  * PNG and TIFF images are correctly identified even if dynamic
    libraries to load them aren't available
  * fixed loading of TIFF images using libtiff
  * fixed static linking with libjpeg
  * fixed crash in IMG_ReadXPMFromArray()
- dropped obsolete patch:
  * xcfinc.diff (included in update)</changelog>
  <changelog author="sndirsch@suse.de" date="1197806400">- fixed BuildRequires for SUSE &lt; 10.2</changelog>
  <changelog author="prusnak@suse.cz" date="1201262400">- fix buffer overflow in GIF code (gif-overflow.patch) [#355864]</changelog>
  <changelog author="prusnak@suse.cz" date="1201608000">- fix buffer overflow in LBM code (lbm-overflow.patch) [#355864]</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files, useless without
  SDL static libraries too.
- fix -devel package dependencies.</changelog>
  <changelog author="prusnak@suse.cz" date="1242734400">- updated to 2.1.7
  * Fixed buffer overflow in BMP loading code
  * Fixed buffer overflow in GIF loading code
- removed obsoleted patches:
  * gif-overflow.patch (mainline)
  * lbm-overflow.patch (mainline)</changelog>
  <changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
  <changelog author="prusnak@suse.cz" date="1243598400">- removed VisualC.zip, Watcom-OS2.zip, Xcode.tar.gz from upstream
  tarball [bnc#508084]</changelog>
  <changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="astieger@suse.com" date="1518696000">- CVE-2017-2887: A specially crafted file could have been used to
  cause a stack overflow resulting in potential code execution.
  bsc#1062777, add CVE-2017-2887.patch</changelog>
</package>
<package pkgid="61ea669de936eeb918927a75c4bacbda1697c62ff71fd6a85a91aefc5c2147e6" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.10" rel="2.6.1"/>
  <changelog author="thutterer@suse.com" date="1470139200">- Update to 0.2.38:
  - Fix for bnc#975484: better error message if SMT is too old</changelog>
  <changelog author="thutterer@suse.com" date="1470916800">- Update to 0.2.39:
  - Fix for bnc#990475: support for aarch64 hardware info</changelog>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
</package>
<package pkgid="3d22a94775fbd01e7e5c93e8dae928764cb91dc0616670e6783432c724ad4b67" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.10" rel="2.6.1"/>
  <changelog author="thutterer@suse.com" date="1470139200">- Update to 0.2.38:
  - Fix for bnc#975484: better error message if SMT is too old</changelog>
  <changelog author="thutterer@suse.com" date="1470916800">- Update to 0.2.39:
  - Fix for bnc#990475: support for aarch64 hardware info</changelog>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
</package>
<package pkgid="467db35d38a666c772e87c7987aed9819bf3919a4cb0eb47807c4041a35bfba5" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.11" rel="2.9.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="42a390407a9af1ff5fcfdec0462b996043699c956b584f1d45b50c4f248c2d7c" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="2.9.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="68058716785b687950c0b54bba33cbc02746eea093fa61944dfcd484863821cc" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.12" rel="2.13.1"/>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
</package>
<package pkgid="e60c073bac77f7caf4a7ed49ba577dc4b4f9a1e20bb7bca95a8a184aa3b03503" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.12" rel="2.13.1"/>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
</package>
<package pkgid="9e5c2b5c1d51c081cf8a1c8a831865eb975b60519281b24b8d0142b9a83e7c73" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.7" rel="2.3.1"/>
  <changelog author="ashaidurov@suse.com" date="1459857600">- Update to 0.2.35:
  - Fix for bnc#973315: Direct update from &lt;=0.2.27 does not remove /usr/bin symlink</changelog>
  <changelog author="ashaidurov@suse.com" date="1462968000">- Update to 0.2.36:
  - Fix for bnc#973851: More flexible exit codes handling in internal zypper calls</changelog>
  <changelog author="hschmidt@suse.com" date="1466510400">- Update to 0.2.37:
  - Add method to YaST class to get Installer-Updates repositories (fate#319716).</changelog>
  <changelog author="thutterer@suse.com" date="1470139200">- Update to 0.2.38:
  - Fix for bnc#975484: better error message if SMT is too old</changelog>
  <changelog author="thutterer@suse.com" date="1470916800">- Update to 0.2.39:
  - Fix for bnc#990475: support for aarch64 hardware info</changelog>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
</package>
<package pkgid="aec8417cf7e69de5cb9beb91abe03950c29e7af39a12bf456f99b2bb60f0c3e9" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.7" rel="2.3.1"/>
  <changelog author="ashaidurov@suse.com" date="1459857600">- Update to 0.2.35:
  - Fix for bnc#973315: Direct update from &lt;=0.2.27 does not remove /usr/bin symlink</changelog>
  <changelog author="ashaidurov@suse.com" date="1462968000">- Update to 0.2.36:
  - Fix for bnc#973851: More flexible exit codes handling in internal zypper calls</changelog>
  <changelog author="hschmidt@suse.com" date="1466510400">- Update to 0.2.37:
  - Add method to YaST class to get Installer-Updates repositories (fate#319716).</changelog>
  <changelog author="thutterer@suse.com" date="1470139200">- Update to 0.2.38:
  - Fix for bnc#975484: better error message if SMT is too old</changelog>
  <changelog author="thutterer@suse.com" date="1470916800">- Update to 0.2.39:
  - Fix for bnc#990475: support for aarch64 hardware info</changelog>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
</package>
<package pkgid="96ee3dad6ce191478dcd274307fad6d5ed0c5750a21d0027afe069d287f3cbf3" name="SuSEfirewall2" arch="noarch">
  <version epoch="0" ver="3.6.312.333" rel="10.1"/>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511870400">- remove duplicate rules created in the context of dynamic rpc rules
  (bnc#1069760).
  0004-support-trace-messages.patch
  0005-remove-duplicate-rules-in-the-rpc-rules.patch
- fixed an issue in the logging logic to show the correct PID and avoid losing
  log lines:
  0006-logging-correctly-set-the-PID-of-the-logging-process.patch
- Set RPC related rules also for IPv6 (bnc#1074933)
  0007-Set-RPC-related-rules-also-for-IPv6-bnc-1074933.patch
- Fixed a regression in setting up the final LOG/DROP/REJECT rules for IPv6 (bnc#1075251)
  0008-Fixed-a-regression-in-setting-up-the-final-LOG-DROP.patch</changelog>
</package>
<package pkgid="28a3d361378944ed0880e4b21f81730c5d30548650455c31eeb864b5b50ce57c" name="SuSEfirewall2" arch="src">
  <version epoch="0" ver="3.6.312.333" rel="10.1"/>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511870400">- remove duplicate rules created in the context of dynamic rpc rules
  (bnc#1069760).
  0004-support-trace-messages.patch
  0005-remove-duplicate-rules-in-the-rpc-rules.patch
- fixed an issue in the logging logic to show the correct PID and avoid losing
  log lines:
  0006-logging-correctly-set-the-PID-of-the-logging-process.patch
- Set RPC related rules also for IPv6 (bnc#1074933)
  0007-Set-RPC-related-rules-also-for-IPv6-bnc-1074933.patch
- Fixed a regression in setting up the final LOG/DROP/REJECT rules for IPv6 (bnc#1075251)
  0008-Fixed-a-regression-in-setting-up-the-final-LOG-DROP.patch</changelog>
</package>
<package pkgid="1a2ceeed3b5a9b93c9d95ed63e20b7a893316bbb141067a70e5f8265e7cf21c4" name="SuSEfirewall2" arch="noarch">
  <version epoch="0" ver="3.6.312.333" rel="4.1"/>
  <changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
  <changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
</package>
<package pkgid="8d73e2d070558425309e8cc7a66c5b6676a46e98053c079bb90fcc66f38561fc" name="SuSEfirewall2" arch="src">
  <version epoch="0" ver="3.6.312.333" rel="4.1"/>
  <changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
  <changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
</package>
<package pkgid="1a0de86454444acbf351159634c41df4da66532b45446e30d3784d1f826782ee" name="SuSEfirewall2" arch="noarch">
  <version epoch="0" ver="3.6.312.333" rel="7.1"/>
  <changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>
</package>
<package pkgid="f63f172a5618bdfc74e96713e0a82e3ea18c82b89b6a90f1091e369dfece08ce" name="SuSEfirewall2" arch="src">
  <version epoch="0" ver="3.6.312.333" rel="7.1"/>
  <changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
  <changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
  <changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
  <changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
  <changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
  <changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
  <changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
  <changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
  <changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
  <changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
  <changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
  <changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>
</package>
<package pkgid="ffae04d8eb30b06f148c27b21cd954d0484da53274e1545ca93242bafc29eb78" name="VirtualGL" arch="src">
  <version epoch="0" ver="2.5.2" rel="7.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="28d1251b742ca99cd97ba3142951d0ec255f169f7b640f4133ca288c210bdeb9" name="VirtualGL" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="7.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="ba1896de73ca46085ce21e878a22c69ca03004ac02c4211492d539c4485249cb" name="VirtualGL-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="7.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="c8e1e5591708cd7e09d4a470e27a7eb7b93cf6004982a383b0a8730d420f61e3" name="VirtualGL-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="7.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="39473bbebe15150b3bd096bf2fea1c60e4f1306871c616653d1fb85c2aef50f3" name="WindowMaker-applets" arch="src">
  <version epoch="0" ver="1.0.1" rel="7.1"/>
  <changelog author="nadvornik@suse.cz" date="1156161600">- changed prefix to /usr</changelog>
  <changelog author="nadvornik@suse.cz" date="1169208000">- dropped wmbattery, as it depends on apmd
- fixed array subscript out of range [#233579] and other warnins</changelog>
  <changelog author="nadvornik@suse.cz" date="1185278400">- dropped xmms dependent applets
- fixed wmtimer to compile</changelog>
  <changelog author="nadvornik@suse.cz" date="1193227200">- fixed to build with new gcc
- used fdupes</changelog>
  <changelog author="ro@suse.de" date="1209297600">- remove hermes-devel from buildreq</changelog>
  <changelog author="nadvornik@novell.com" date="1244721600">- fixed to compile</changelog>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="vuntz@opensuse.org" date="1262088000">- Bump version to 1.0.1.
- Update wmcliphist to 1.0:
  + ported to GTK+ 2.0
  + confirmation dialogs supports Enter (Yes) and Esc (No) keys
  + wmcliphist now can run with almost invisible window (-s 0)
    which is usable on systems running windows manager without
    docking capabilities
  + some debug messages was removed, minor code tweaking and
    auto_take_up feature is now DISABLED by default due to problems
    with some GTK 2.x based applications
- Update wmcliphist-0.6-default.patch: some parts were applied
  upstream.
- Update wmtimer to 2.92:
  + Ported to GTK+ 2.0
  + Fixed a bug in the the command line parsing where the -color
    option would conflict with the -c option in some cases.
- Drop E-Notes: it's really old and not maintained, and it requires
  GTK+ 1.x which we want to remove.
- Remove imlib-devel BuildRequires.
- Add gtk2-devel BuildRequires.</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow in wmgmon (detected by gcc-4.5) and minor
  packaging glitches</changelog>
  <changelog author="ma@novell.com" date="1270728000">- wmSMPmon: Add options -c1/-c2 to define which CPUs data to show
  in case the system has more than two CPUs.</changelog>
  <changelog author="idonmez@novell.com" date="1310040000">- Add wmtv-v4l-2.6.38.patch: use new v4l interface</changelog>
  <changelog author="suse-tux@gmx.de" date="1316260800">- fixed build for factory:
  * added Patch47 wmfire-0.0.3.9pre4-configure_fix.diff (fixes x_includes
    and x_libraries handling in configure.in - this needs an autoreconf)
  * added Patch48: wmswallow-0.6.1-ld_fix.diff (add -lX11)
  * added Patch49: wmcliphist-1.0-ld_fix.diff (add -lX11)</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1335528000">- wmgmon and wmmail use proplist-compat.h there for disabled
  as they need to be fixed. Probably need quite a lof of rewriting
  proplist-compat.h has been removed from windowmaker 0.95.2
  See: http://lists.windowmaker.org/dev/msg02649.html</changelog>
  <changelog author="coolo@suse.com" date="1346760000">- buildrequire xmessage to fix build on 12.2+</changelog>
  <changelog author="schwab@suse.de" date="1363521600">- Build wmtune only on architectures that implement ioperm</changelog>
  <changelog author="schwab@suse.de" date="1433851200">- Force gnu89 inline semantics</changelog>
  <changelog author="mvetter@suse.com" date="1471435200">- Fix boo#707539: Adapt parameter change of ImageMagick convert
  tool. And also remove not used and deprecated requre ctime.pl.
- Add wmgrabimage-0.70-boo-707539-fix-GrabImage.patch</changelog>
  <changelog author="kmroz@suse.com" date="1501934400">- Fix invalid XPM icon paths in /etc/wmmount
  bsc#1046193: wmmount doesn't start
- Modified: wmmount-1.0-beta2.dif</changelog>
</package>
<package pkgid="403606da48e6f4316d3da8322b23a12321d078462bc7ef32b33ed77d919dddc9" name="WindowMaker-applets" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="7.1"/>
  <changelog author="nadvornik@novell.com" date="1244721600">- fixed to compile</changelog>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="vuntz@opensuse.org" date="1262088000">- Bump version to 1.0.1.
- Update wmcliphist to 1.0:
  + ported to GTK+ 2.0
  + confirmation dialogs supports Enter (Yes) and Esc (No) keys
  + wmcliphist now can run with almost invisible window (-s 0)
    which is usable on systems running windows manager without
    docking capabilities
  + some debug messages was removed, minor code tweaking and
    auto_take_up feature is now DISABLED by default due to problems
    with some GTK 2.x based applications
- Update wmcliphist-0.6-default.patch: some parts were applied
  upstream.
- Update wmtimer to 2.92:
  + Ported to GTK+ 2.0
  + Fixed a bug in the the command line parsing where the -color
    option would conflict with the -c option in some cases.
- Drop E-Notes: it's really old and not maintained, and it requires
  GTK+ 1.x which we want to remove.
- Remove imlib-devel BuildRequires.
- Add gtk2-devel BuildRequires.</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow in wmgmon (detected by gcc-4.5) and minor
  packaging glitches</changelog>
  <changelog author="ma@novell.com" date="1270728000">- wmSMPmon: Add options -c1/-c2 to define which CPUs data to show
  in case the system has more than two CPUs.</changelog>
  <changelog author="idonmez@novell.com" date="1310040000">- Add wmtv-v4l-2.6.38.patch: use new v4l interface</changelog>
  <changelog author="suse-tux@gmx.de" date="1316260800">- fixed build for factory:
  * added Patch47 wmfire-0.0.3.9pre4-configure_fix.diff (fixes x_includes
    and x_libraries handling in configure.in - this needs an autoreconf)
  * added Patch48: wmswallow-0.6.1-ld_fix.diff (add -lX11)
  * added Patch49: wmcliphist-1.0-ld_fix.diff (add -lX11)</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1335528000">- wmgmon and wmmail use proplist-compat.h there for disabled
  as they need to be fixed. Probably need quite a lof of rewriting
  proplist-compat.h has been removed from windowmaker 0.95.2
  See: http://lists.windowmaker.org/dev/msg02649.html</changelog>
  <changelog author="coolo@suse.com" date="1346760000">- buildrequire xmessage to fix build on 12.2+</changelog>
  <changelog author="schwab@suse.de" date="1363521600">- Build wmtune only on architectures that implement ioperm</changelog>
  <changelog author="schwab@suse.de" date="1433851200">- Force gnu89 inline semantics</changelog>
  <changelog author="mvetter@suse.com" date="1471435200">- Fix boo#707539: Adapt parameter change of ImageMagick convert
  tool. And also remove not used and deprecated requre ctime.pl.
- Add wmgrabimage-0.70-boo-707539-fix-GrabImage.patch</changelog>
  <changelog author="kmroz@suse.com" date="1501934400">- Fix invalid XPM icon paths in /etc/wmmount
  bsc#1046193: wmmount doesn't start
- Modified: wmmount-1.0-beta2.dif</changelog>
</package>
<package pkgid="d35954a64dca5513f6ab9c9c7000f93a88ecef7500486b282f707e50b412bedc" name="a2ps" arch="src">
  <version epoch="0" ver="4.14" rel="5.3.1"/>
  <changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
  <changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
  <changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>
  <changelog author="werner@suse.de" date="1403697600">- Remove obsolete tarball</changelog>
  <changelog author="sfalken@opensuse.org" date="1408536000">- Updated to 4.14
  * No UTF-8 Support yet, Basically a maintenance release.
  * GNU a2ps is now licensed under GPLv3 or later
  * Can now be built with Modern GNU Autotools, and gcc&gt;=3.4
  * Numerous minor bugfixes, including:
  * input buffer overflow
  * IA64, PPC, and AMD64 fixes
  * Several security issues (CVE-2004-1377)
  * Addition of a number of new stylesheets
  * Translations for Japanese, Dutch, and French added/updated
- Patches rebased for 4.14 sources
  * Added:
    a2ps-4.14-acroread.patch
    a2ps-4.14-linker.patch
    a2ps-4.14-ogonkify.patch
    a2ps-4.14-tempfile.patch
    a2ps-4.14.diff
  * Deleted:
    a2ps-4.13-acroread.patch
    a2ps-4.13-linker.patch
    a2ps-4.13-ogonkify.patch
    a2ps-4.13-tempfile.patch
    a2ps-4.13.dif
    a2ps-4.13-gv-arguments.patch
    a2ps-4.13-nb.patch
    a2ps-4.13-space.patch
  * Modified:
    CVE-2014-0466.diff
- Deleted a2ps-4.13.tar.gz, replaced with a2ps-4.14.tar.gz
- a2ps.spec cleanup, and updating to work with new sources.</changelog>
  <changelog author="sfalken@opensuse.org" date="1410955200">- Fixed license in .spec file to reflect upstream changing to GPLv3
  (sr#248177)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Do not buildrequire xorg-x11-devel, never used.</changelog>
  <changelog author="sfalken@opensuse.org" date="1415620800">- Removed pkgconfig entries from Requires: section, per OBS
  request 243897</changelog>
  <changelog author="meissner@suse.com" date="1419336000">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1422878400">- Correct patch a2ps-4.14.diff (boo#915483)
- Make a2ps-open smart now</changelog>
  <changelog author="werner@suse.de" date="1423224000">- BuildRequire texi2html</changelog>
  <changelog author="werner@suse.de" date="1425297600">- Fix ported patch a2ps-4.14.diff to avoid bug in locale handling
  as well in font format definition (boo#919249, boo#919243)</changelog>
  <changelog author="werner@suse.de" date="1425384000">- Avoid automake-1.9 as there is no automake-1.9 anymore
  therefore add patch a2ps-4.14-automake.patch
- Avoid useless warning and add patch a2ps-4.14-iswprint.patch</changelog>
  <changelog author="werner@suse.de" date="1425384001">- Avoid zero length FAQ</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Add a test case to be able to detect any broken backport</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Add gpg signature
- Update info scriplet dependencies
- Add a2ps-4.14-gperf.patch (boo#932138)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1439553600">- Add a2ps to SLES-12 as legacy package (fate#318775, bsc#940627)</changelog>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
</package>
<package pkgid="517803f05b03e43c53c3f3602b8e2a35711a83294ac19310933b281fcdcc41ab" name="a2ps" arch="x86_64">
  <version epoch="0" ver="4.14" rel="5.3.1"/>
  <changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
  <changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
  <changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>
  <changelog author="werner@suse.de" date="1403697600">- Remove obsolete tarball</changelog>
  <changelog author="sfalken@opensuse.org" date="1408536000">- Updated to 4.14
  * No UTF-8 Support yet, Basically a maintenance release.
  * GNU a2ps is now licensed under GPLv3 or later
  * Can now be built with Modern GNU Autotools, and gcc&gt;=3.4
  * Numerous minor bugfixes, including:
  * input buffer overflow
  * IA64, PPC, and AMD64 fixes
  * Several security issues (CVE-2004-1377)
  * Addition of a number of new stylesheets
  * Translations for Japanese, Dutch, and French added/updated
- Patches rebased for 4.14 sources
  * Added:
    a2ps-4.14-acroread.patch
    a2ps-4.14-linker.patch
    a2ps-4.14-ogonkify.patch
    a2ps-4.14-tempfile.patch
    a2ps-4.14.diff
  * Deleted:
    a2ps-4.13-acroread.patch
    a2ps-4.13-linker.patch
    a2ps-4.13-ogonkify.patch
    a2ps-4.13-tempfile.patch
    a2ps-4.13.dif
    a2ps-4.13-gv-arguments.patch
    a2ps-4.13-nb.patch
    a2ps-4.13-space.patch
  * Modified:
    CVE-2014-0466.diff
- Deleted a2ps-4.13.tar.gz, replaced with a2ps-4.14.tar.gz
- a2ps.spec cleanup, and updating to work with new sources.</changelog>
  <changelog author="sfalken@opensuse.org" date="1410955200">- Fixed license in .spec file to reflect upstream changing to GPLv3
  (sr#248177)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Do not buildrequire xorg-x11-devel, never used.</changelog>
  <changelog author="sfalken@opensuse.org" date="1415620800">- Removed pkgconfig entries from Requires: section, per OBS
  request 243897</changelog>
  <changelog author="meissner@suse.com" date="1419336000">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1422878400">- Correct patch a2ps-4.14.diff (boo#915483)
- Make a2ps-open smart now</changelog>
  <changelog author="werner@suse.de" date="1423224000">- BuildRequire texi2html</changelog>
  <changelog author="werner@suse.de" date="1425297600">- Fix ported patch a2ps-4.14.diff to avoid bug in locale handling
  as well in font format definition (boo#919249, boo#919243)</changelog>
  <changelog author="werner@suse.de" date="1425384000">- Avoid automake-1.9 as there is no automake-1.9 anymore
  therefore add patch a2ps-4.14-automake.patch
- Avoid useless warning and add patch a2ps-4.14-iswprint.patch</changelog>
  <changelog author="werner@suse.de" date="1425384001">- Avoid zero length FAQ</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Add a test case to be able to detect any broken backport</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Add gpg signature
- Update info scriplet dependencies
- Add a2ps-4.14-gperf.patch (boo#932138)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1439553600">- Add a2ps to SLES-12 as legacy package (fate#318775, bsc#940627)</changelog>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
</package>
<package pkgid="c9308ad297cb426d8c583239566cb4f416ed8514bb39d0a67764c7cf67790cc4" name="a2ps-devel" arch="x86_64">
  <version epoch="0" ver="4.14" rel="5.3.1"/>
  <changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
  <changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
  <changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>
  <changelog author="werner@suse.de" date="1403697600">- Remove obsolete tarball</changelog>
  <changelog author="sfalken@opensuse.org" date="1408536000">- Updated to 4.14
  * No UTF-8 Support yet, Basically a maintenance release.
  * GNU a2ps is now licensed under GPLv3 or later
  * Can now be built with Modern GNU Autotools, and gcc&gt;=3.4
  * Numerous minor bugfixes, including:
  * input buffer overflow
  * IA64, PPC, and AMD64 fixes
  * Several security issues (CVE-2004-1377)
  * Addition of a number of new stylesheets
  * Translations for Japanese, Dutch, and French added/updated
- Patches rebased for 4.14 sources
  * Added:
    a2ps-4.14-acroread.patch
    a2ps-4.14-linker.patch
    a2ps-4.14-ogonkify.patch
    a2ps-4.14-tempfile.patch
    a2ps-4.14.diff
  * Deleted:
    a2ps-4.13-acroread.patch
    a2ps-4.13-linker.patch
    a2ps-4.13-ogonkify.patch
    a2ps-4.13-tempfile.patch
    a2ps-4.13.dif
    a2ps-4.13-gv-arguments.patch
    a2ps-4.13-nb.patch
    a2ps-4.13-space.patch
  * Modified:
    CVE-2014-0466.diff
- Deleted a2ps-4.13.tar.gz, replaced with a2ps-4.14.tar.gz
- a2ps.spec cleanup, and updating to work with new sources.</changelog>
  <changelog author="sfalken@opensuse.org" date="1410955200">- Fixed license in .spec file to reflect upstream changing to GPLv3
  (sr#248177)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412251200">- Do not buildrequire xorg-x11-devel, never used.</changelog>
  <changelog author="sfalken@opensuse.org" date="1415620800">- Removed pkgconfig entries from Requires: section, per OBS
  request 243897</changelog>
  <changelog author="meissner@suse.com" date="1419336000">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1422878400">- Correct patch a2ps-4.14.diff (boo#915483)
- Make a2ps-open smart now</changelog>
  <changelog author="werner@suse.de" date="1423224000">- BuildRequire texi2html</changelog>
  <changelog author="werner@suse.de" date="1425297600">- Fix ported patch a2ps-4.14.diff to avoid bug in locale handling
  as well in font format definition (boo#919249, boo#919243)</changelog>
  <changelog author="werner@suse.de" date="1425384000">- Avoid automake-1.9 as there is no automake-1.9 anymore
  therefore add patch a2ps-4.14-automake.patch
- Avoid useless warning and add patch a2ps-4.14-iswprint.patch</changelog>
  <changelog author="werner@suse.de" date="1425384001">- Avoid zero length FAQ</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Add a test case to be able to detect any broken backport</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Add gpg signature
- Update info scriplet dependencies
- Add a2ps-4.14-gperf.patch (boo#932138)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1439553600">- Add a2ps to SLES-12 as legacy package (fate#318775, bsc#940627)</changelog>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
</package>
<package pkgid="630c254f2a42cdc55ed37ac7b5140bc2626860d11744096a6d626670a4157be3" name="a52dec" arch="src">
  <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>
  <changelog author="waldemar@links2linux.de" date="1009627200">- first build</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1022760000">- update to Version 0.7.3</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1025697600">- update to Version 0.7.4</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1044446400">- added german description
- some changes I got from Philipp Thomas &lt;pthomas@suse.de&gt;</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1045915200">- added --enable-shared</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1048593600">- changes to use Packman upload-script</changelog>
  <changelog author="detlef@dreichelt.de" date="1101211200">- changes for x86_64:
  - added CFLAGS= -fPIC</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1208692800">- splitted in different packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1221912000">- rename of the lib packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="364b52d7db58f6055721d106c11c6710a6b0e84868b6d4a0a29b8846333a915d" name="a52dec" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="7b4f5a4d0a84d1eef869d907a2cfc04b3a6686199276eb86e824eab25e87962d" name="aaa_base" arch="src">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.3.1"/>
  <changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
</package>
<package pkgid="b01b2a47cdb5e802921676c5d9336614b1ebecc93a4dca1446e4c3f6d14145a0" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.3.1"/>
  <changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
</package>
<package pkgid="1de295e2fc40a18b2c1c6029827b49cdaea9aef76f3250a6839bbc7cf022d76e" name="aaa_base" arch="src">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.6.1"/>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
</package>
<package pkgid="f3055d831a420776103d3deadeb057722be4d773d94d087f9c5019b0df1bf95d" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.6.1"/>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
</package>
<package pkgid="fe01e11a171d5e2e9a1758c70f9c63229b194d40a8f50f7757da0384fa063788" name="aaa_base" arch="src">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.9.1"/>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1536321600">-  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
  * Get mixed use case of service wrapper script straight
    (bsc#1040613)</changelog>
  <changelog author="ro@suse.de" date="1542110400">- add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
  test for xdgdir/applications before adding data dir (bsc#1095969)</changelog>
</package>
<package pkgid="eeeec97b41b68bac0900aca79095d818ffeadbabdad6d8f1086f6a605edd15bf" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.9.1"/>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1536321600">-  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
  * Get mixed use case of service wrapper script straight
    (bsc#1040613)</changelog>
  <changelog author="ro@suse.de" date="1542110400">- add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
  test for xdgdir/applications before adding data dir (bsc#1095969)</changelog>
</package>
<package pkgid="0aa542485baa42386685ecf7c257b9b17b977c75032bb64ecb8d130260eb022e" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.3.1"/>
  <changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
</package>
<package pkgid="ca3d6968dba99d12ea5f8373daedf0c53377779efa97333e35686b02711e9bfd" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.6.1"/>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
</package>
<package pkgid="7c2d2944ad38b937d9c16169aae4f6c226410b6f05dc20621708af5761929442" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.9.1"/>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1536321600">-  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
  * Get mixed use case of service wrapper script straight
    (bsc#1040613)</changelog>
  <changelog author="ro@suse.de" date="1542110400">- add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
  test for xdgdir/applications before adding data dir (bsc#1095969)</changelog>
</package>
<package pkgid="5d19fa5bb670b1738f2990b5677c8dbf9aa3960f49b82a4155da033b9409e603" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.3.1"/>
  <changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
</package>
<package pkgid="97534fb76a2e7dc0eb08bade2c3f701fc3b7dfccfec2baa26cbeb051f44ad860" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.6.1"/>
  <changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
  <changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
  <changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
</package>
<package pkgid="713b33df50dd43b9a5ed219c1c892bd718a1711561ccacf40ceda6eb27dc9f22" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="13.2+git20140911.61c1681" rel="28.9.1"/>
  <changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
  <changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
  <changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>
  <changelog author="ro@suse.de" date="1452859200">- add patches from git master for bnc#960393
  - git-13-e8d89ec1b9ff6dfe144665a7bab60dda9079adf6.patch
    Use the '+' for find's -exec option
  - git-14-f5670c1d7ec3fb3d0a759cfee23346987bc7a820.patch
    Replace UNICODE double dash with simple ASCII single dash
    also (bnc#954909)</changelog>
  <changelog author="ro@suse.de" date="1460116800">- add patches from git master for bnc#971567
  - git-15-39beb10d05082324d93a68c087d017efb9592e91.patch
    make chkconfig -a/-d work (bsc#926539)
  - git-16-c3faa6cbc3a2b62c616104dbdaf9c5d04f278c99.patch
    avoid recursion if systemd call chkconfig back for sysv units
  - git-17-e8eb1690d77fc3880267de3912ae934ec3b4afa0.patch
    chkconfig: return 1 trying to list unknown service
  - git-18-3d9d3a8adf6b34ef1a3a4bfa23325e5cc3b2bc06.patch
    chckconfig: add --no-systemctl option</changelog>
  <changelog author="ro@suse.de" date="1461672000">- fix typo in last patch (no-systemctl support for chkconfig)
  (still bnc#971567)</changelog>
  <changelog author="ro@suse.de" date="1469016000">- add patches from git master for bnc#970395
  - git-20-36aeb3915e52b957f6a4aba57833b0be9898ac64.patch
    Let the ~/.i18n values parsed as well if GDM_LANG is set
    (boo#958295)
  - git-21-52d873754994b203d26a4268993599716607c082.patch
    lang.sh, lang.csh: allow GDM to override locale
  - git-22-ed9debfbf942796f76f6ded8f01002b56b356a74.patch
    lang.sh, lang.csh: if GDM_LANG equals system LANG then use
    system defaults</changelog>
  <changelog author="werner@suse.de" date="1470312000">- add patch from git master to fix usage of setenv (bsc#992144)
  - git-23-d026b75b1f95d810c0a0b10cd35845ec50662bbd.patch
    Do not use the = sign for setenv in /etc/profile.d/lang.csh</changelog>
  <changelog author="ro@suse.de" date="1470398400">- add patch from git master to disabled IPv6 privacy by default
  - git-24-7f4c8c4dc6adaac428c539ebf76410954a0d900d.patch
    switch IPv6 privacy extensions (use_tempaddr) back to 1
    history see bsc#678066,bsc#752842,bsc#988023,bsc#990838</changelog>
  <changelog author="ro@suse.de" date="1473940800">- fix regression introduced by fix for bnc#971567 (bnc#996442)</changelog>
  <changelog author="werner@suse.de" date="1485518400">- add patch git-26-ee32da3058ea9880ccc4340d1958e9c484775f83.patch
  to fix spurious assignment to unknown variable term from
  /etc/inputrc (boo#1022105)</changelog>
  <changelog author="werner@suse.de" date="1488974400">- Add patch git-27-c0ecf2e203db2b03e684132669563f7ca71edac4.patch
  to make lang.csh work again (bsc#1025673)</changelog>
  <changelog author="werner@suse.de" date="1496404800">- Add patch git-28-4555aa28348043b69ef0c66442eff95c1c6398c8.patch
  support changing PS1 even for mksh and user root (bsc#1036895)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Add aaa_base-pullreq42-default-wm.patch: Set DEFAULT_WM to
  'default'; the pre-existing setting is overwritten by YaST on SLE
  during installation (kde-plasma is not even a valid option for
  SLE) (boo#1030873).</changelog>
  <changelog author="werner@suse.de" date="1518091200">- Add patch git-29-b9a57d5a64b3d2d09bc591f894f6558f1945df70.patch
  Unset unused variables on profile files (bsc#1049577)
- Add patch git-30-4ad097303df998e830fffeda8c5a990d0bec6de9.patch
  Unset id in csh.cshrc instead of profile.csh (bsc#1049577)
- Add patch git-31-cc9e34e45854d7313e07a0f4b2cc41b720a16003.patch
  Allow that personal ~/.bashrc is read again (boo#1052182)
- Add patch git-32-20687eff2438980a54dbd073fc4a754d2987faae.patch
  Avoid that IFS becomes global in _ls ksh shell function
  (bsc#1079674, bsc#1025743)</changelog>
  <changelog author="ro@suse.de" date="1518782400">- add aaa_base-pre_post-bug-1038549.patch
  replace "cat &gt; file" by "mv -f ... file" in pre/post to
  fix issues with clients having these files mmapped (bnc#1038549)</changelog>
  <changelog author="werner@suse.de" date="1526299200">- Add patch git-33-04c9daea971d58248c64076d41315129a7083629.patch
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524)
  * Avoid the shell code checker stumble over `function' keys
    word in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-35-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1536321600">-  Add patch git-34-011e1546bd1092c2a8c9754866ca02439ed23d54.patch
  * Get mixed use case of service wrapper script straight
    (bsc#1040613)</changelog>
  <changelog author="ro@suse.de" date="1542110400">- add patch git-36-7a00987c0df059cc1495cba7d70d319593d4cfed.patch
  test for xdgdir/applications before adding data dir (bsc#1095969)</changelog>
</package>
<package pkgid="670489d9c20c57e05e4cdef96e94c610093b690597ee2361e457b2bfa3c1cad1" name="abxtest" arch="x86_64">
  <version epoch="0" ver="0.15.2b" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
  <changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="efb1d0484684fde7c6a5c7bafe357d32bc31c8e05cf67444ad90d6b4d4b94c5e" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.42" rel="8.1"/>
  <changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
  <changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35:
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38:
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.</changelog>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess form the blacklist
  (bsc#1063794, fdo#103879).</changelog>
</package>
<package pkgid="c9fdc6500f0a4fbe097e6f0c682a75c87c8f679836d47dfeddaa80397e6ddfbf" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.42" rel="8.1"/>
  <changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
  <changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35:
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38:
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.</changelog>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess form the blacklist
  (bsc#1063794, fdo#103879).</changelog>
</package>
<package pkgid="ced45c210aeb82295b160fb5856e813cbebdcf75d013092b4989a63db77085b0" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.42" rel="8.1"/>
  <changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
  <changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35:
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38:
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.</changelog>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess form the blacklist
  (bsc#1063794, fdo#103879).</changelog>
</package>
<package pkgid="e50025eea1d69c4c34688062e4406e5e9c7c54739f0fb780c130957c4fed30ce" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.42" rel="8.1"/>
  <changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
  <changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
  <changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35:
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38:
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.</changelog>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess form the blacklist
  (bsc#1063794, fdo#103879).</changelog>
</package>
<package pkgid="ad3d917d18d8a93cfe43d653a99f127f60004796608e04b569649091abf25449" name="acct" arch="src">
  <version epoch="0" ver="6.6.2" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc, %__cxx macros</changelog>
  <changelog author="bart.vanassche@gmail.com" date="1327320000">- switch from acct-6.3.5 to acct-6.5.5. From the upstream acct ChangeLog:
  * Fix potential buffer-overflows.
  * UNIX 98 pty support.
  * Add Linux multiformat support.
  * lastcomm.c: integrated patch from Paul Jones which adds
  paging and swapping support to lastcomm and sa</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vcizek@suse.com" date="1346846400">- drop useless acct-axp.patch</changelog>
  <changelog author="coolo@suse.com" date="1357992000">- remove suse_update_config</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Added makeinfo BuildRequire to fix build with new automake</changelog>
  <changelog author="schuetzm@gmx.net" date="1370520000">- Converted rc file to systemd unit file.
- Fixed a bug where the accounting file wasn't reopened after
  logrotate, because force-reload isn't implemented.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382184000">- Remove useless %inserv_prereq and fillup_prereq macro; acct package
  doesn't contain neither sysvinit script and sysconfig file</changelog>
  <changelog author="vcizek@suse.com" date="1387627200">- update to 6.6.1
  * Fixed vulnabilities, due to autmake. Thanks to Karl Berry
    for pointing this out.
  * Update gnulib to latest git.
- dropped acct-stdio.h.patch (upstream)
- add gpg verification</changelog>
  <changelog author="werner@suse.de" date="1395057600">- cleanup of acct
  * Add install section in service unit (bnc#867138)
  * Add a simple script to create pacct file</changelog>
  <changelog author="vcizek@suse.com" date="1409227200">- fixed libexec path in acct.service (bnc#893980)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
  <changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
  <changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>
</package>
<package pkgid="eedfaa4c40602e736608d552c97dad3f9105cb329b55e5c3c5d5e728625ab28b" name="acct" arch="x86_64">
  <version epoch="0" ver="6.6.2" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc, %__cxx macros</changelog>
  <changelog author="bart.vanassche@gmail.com" date="1327320000">- switch from acct-6.3.5 to acct-6.5.5. From the upstream acct ChangeLog:
  * Fix potential buffer-overflows.
  * UNIX 98 pty support.
  * Add Linux multiformat support.
  * lastcomm.c: integrated patch from Paul Jones which adds
  paging and swapping support to lastcomm and sa</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vcizek@suse.com" date="1346846400">- drop useless acct-axp.patch</changelog>
  <changelog author="coolo@suse.com" date="1357992000">- remove suse_update_config</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Added makeinfo BuildRequire to fix build with new automake</changelog>
  <changelog author="schuetzm@gmx.net" date="1370520000">- Converted rc file to systemd unit file.
- Fixed a bug where the accounting file wasn't reopened after
  logrotate, because force-reload isn't implemented.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382184000">- Remove useless %inserv_prereq and fillup_prereq macro; acct package
  doesn't contain neither sysvinit script and sysconfig file</changelog>
  <changelog author="vcizek@suse.com" date="1387627200">- update to 6.6.1
  * Fixed vulnabilities, due to autmake. Thanks to Karl Berry
    for pointing this out.
  * Update gnulib to latest git.
- dropped acct-stdio.h.patch (upstream)
- add gpg verification</changelog>
  <changelog author="werner@suse.de" date="1395057600">- cleanup of acct
  * Add install section in service unit (bnc#867138)
  * Add a simple script to create pacct file</changelog>
  <changelog author="vcizek@suse.com" date="1409227200">- fixed libexec path in acct.service (bnc#893980)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
  <changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
  <changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>
</package>
<package pkgid="1e6fbdc72c433da733f2d8a8f52a7b60c008a3aa89d3ed4aa5380b11ca4e4aa9" name="acl" arch="src">
  <version epoch="0" ver="2.2.52" rel="11.3.1"/>
  <changelog author="meissner@suse.de" date="1256558400">- fixed implicit strchr() usage.</changelog>
  <changelog author="meissner@suse.de" date="1259150400">- readded incorrectly removed libattr-devel requires in -devel</changelog>
  <changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- adjust baselibs.conf for SPARC</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="bphilips@novell.com" date="1302955200">- upgrade to 2.2.50
  - OPTIONS in man pages should be a section heading, not a subsection heading
  - Fix a typo in the setfacl man page
  - setfacl: Clarify that removing a non-existent acl entry is not an error
  - Prevent setfacl --restore from SIGSEGV on malformed restore file
  - setfacl: make sure that -R only calls stat(2) on symlinks when it needs to
  - libacl: fix potential null pointer dereference
  - setfacl: fix restore crash on malformed input
  - setfacl: print useful error from read_acl_comments
  - setfacl: changing owner and when S_ISUID should be set --restore fix</changelog>
  <changelog author="bphilips@novell.com" date="1303214400">- upgrade to 2.2.51
  - Test fixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib package (libacl1)
- Enable libacl-devel on all baselib arches</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1316520000">- Fix provides/Obsoletes</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322654401">- license update: GPL-2.0+;LGPL-2.1+
  SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake deps</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356523200">- Use OS byteswapping routines, application already Includes
  "endian.h" but then goes ahead defining ad-hoc equivalent
  functionality (0001-Use-OS-byteswapping-macros.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-sub-update.diff:
  update config.guess/sub to latest state for AArch64</changelog>
  <changelog author="coolo@suse.com" date="1363348800">- use source url</changelog>
  <changelog author="meissner@suse.com" date="1363694400">- add gpg checking</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.2.52
  * This release fixes a few build system issues that were found and
  merges in a tree walking bug fix.
- Remove acl-fiximplicit.patch (merged upstream),
  config-guess-sub-update.diff (no longer applies)
- Sync baselibs.conf with in-.spec obsoletes/provides.</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline calls from bootstrap package</changelog>
  <changelog author="jeffm@suse.com" date="1443182400">- Added important fixes since last release:
  * getfacl: Fix memory leak
  * getfacl: Fix minor resource leak
  * libacl: fix SIGSEGV of getfacl -e on overly long group name (bsc#945899)
  * libacl: Make sure that acl_from_text() always sets errno when it fails (bsc#945899)
  * read_acl_{comments,seq}: rename "line" to "lineno"
  * read_acl_{comments,seq}: switch to next_line
- Added patches:
  * getfacl-fix-memory-leak.patch
  * getfacl-fix-minor-resource-leak.patch
  * libacl-fix-sigsegv-of-getfacl-e-on-overly-long-group-name.patch
  * libacl-make-sure-that-acl_from_text-always-sets-errno-when-it-fails.patch
  * read_acl_-comments-seq-rename-line-to-lineno.patch
  * read_acl_-comments-seq-switch-to-next_line.patch</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="10b970e6cd2d33db0a4bdadcacc7dfbefc226fa57108772818a15b2c88d8ba62" name="acl" arch="x86_64">
  <version epoch="0" ver="2.2.52" rel="11.3.1"/>
  <changelog author="meissner@suse.de" date="1256558400">- fixed implicit strchr() usage.</changelog>
  <changelog author="meissner@suse.de" date="1259150400">- readded incorrectly removed libattr-devel requires in -devel</changelog>
  <changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- adjust baselibs.conf for SPARC</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="bphilips@novell.com" date="1302955200">- upgrade to 2.2.50
  - OPTIONS in man pages should be a section heading, not a subsection heading
  - Fix a typo in the setfacl man page
  - setfacl: Clarify that removing a non-existent acl entry is not an error
  - Prevent setfacl --restore from SIGSEGV on malformed restore file
  - setfacl: make sure that -R only calls stat(2) on symlinks when it needs to
  - libacl: fix potential null pointer dereference
  - setfacl: fix restore crash on malformed input
  - setfacl: print useful error from read_acl_comments
  - setfacl: changing owner and when S_ISUID should be set --restore fix</changelog>
  <changelog author="bphilips@novell.com" date="1303214400">- upgrade to 2.2.51
  - Test fixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib package (libacl1)
- Enable libacl-devel on all baselib arches</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1316520000">- Fix provides/Obsoletes</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322654401">- license update: GPL-2.0+;LGPL-2.1+
  SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake deps</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356523200">- Use OS byteswapping routines, application already Includes
  "endian.h" but then goes ahead defining ad-hoc equivalent
  functionality (0001-Use-OS-byteswapping-macros.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-sub-update.diff:
  update config.guess/sub to latest state for AArch64</changelog>
  <changelog author="coolo@suse.com" date="1363348800">- use source url</changelog>
  <changelog author="meissner@suse.com" date="1363694400">- add gpg checking</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.2.52
  * This release fixes a few build system issues that were found and
  merges in a tree walking bug fix.
- Remove acl-fiximplicit.patch (merged upstream),
  config-guess-sub-update.diff (no longer applies)
- Sync baselibs.conf with in-.spec obsoletes/provides.</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline calls from bootstrap package</changelog>
  <changelog author="jeffm@suse.com" date="1443182400">- Added important fixes since last release:
  * getfacl: Fix memory leak
  * getfacl: Fix minor resource leak
  * libacl: fix SIGSEGV of getfacl -e on overly long group name (bsc#945899)
  * libacl: Make sure that acl_from_text() always sets errno when it fails (bsc#945899)
  * read_acl_{comments,seq}: rename "line" to "lineno"
  * read_acl_{comments,seq}: switch to next_line
- Added patches:
  * getfacl-fix-memory-leak.patch
  * getfacl-fix-minor-resource-leak.patch
  * libacl-fix-sigsegv-of-getfacl-e-on-overly-long-group-name.patch
  * libacl-make-sure-that-acl_from_text-always-sets-errno-when-it-fails.patch
  * read_acl_-comments-seq-rename-line-to-lineno.patch
  * read_acl_-comments-seq-switch-to-next_line.patch</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="dee6e8bfd6a0f90dbad2a717d9d25b5957a85a3d081ec6cfe383353f5c60d367" name="adminer" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="76b438df0b83f69455c5cfc5e34082d3575c02c5a538dd075cddf1cf2e61d772" name="adminer" arch="src">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="5082e95450f73cb83f3ecdd63127c4bf3e843f94b2f7f421cd9158a73e80b7e9" name="adminer-designs" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="e46e1da640a5f263ea394acb1340662193b49c7577cea400bf6d6b7a3e8c5e09" name="adminer-editor" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="78464896e06aea3acb5dab8a1758cb2381390d91baa6b4899161afd022cfdb39" name="adminer-firebird" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="0e2f80270fedf15be6fa28550212b993eb9b95d62c9ca469cd15e16a9963fa88" name="adminer-mysql" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="ddbfbc533e544da4ef9b64e3223b5f7804ed19bbe3654e098741a56eca2db200" name="adminer-pgsql" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="0b65da88d4c17b42bb3725da6d298309cddd92028f9568332656ae810af1faba" name="adminer-sqlite" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="4.5.1"/>
  <changelog author="jimmy@boombatower.com" date="1435752000">- Initial import of 4.2.1.</changelog>
  <changelog author="jimmy@boombatower.com" date="1439035200">- Update to 4.2.2.</changelog>
  <changelog author="aj@ajaissle.de" date="1447416000">- Spec file reworked, adjusted apache2 conf.</changelog>
  <changelog author="jimmy@boombatower.com" date="1447675200">- Update to 4.2.3.</changelog>
  <changelog author="jimmy@boombatower.com" date="1448366400">- Correct license to 'GPL-2.0 or Apache-2.0'.</changelog>
  <changelog author="jimmy@boombatower.com" date="1449662400">- Correct elasticsearch and mongodb virtual package requires.
- Add %bcond_with mongodb until submitted to Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1455019200">- Update to 4.2.4.
  + Add escaping (not fixing any XSS)
  + Release 4.2.3
  + Use HTTPS Google Font URL
  + Support PHP 7
  + Delete unused variable and method
  + Bosnian language
  + Add Bosnian translation
  + Add Finnish translation
  + Fix remote execution in SQLite query (discovered by ???(??))
  + Release 4.2.4</changelog>
  <changelog author="jimmy@boombatower.com" date="1464782400">- Update to version v4.2.5:
  + Fix http:// links in stylesheets to protocol-independent ones (//)
  + improved kill command support for MySQL and initial support for PgSQL
  + Remove global variable
  + Fix remote execution in SQLite query (thanks to Vincent Waart)
  + SQLite: Require credentials to use (thanks to Vincent Waart)
  + Release 4.2.5</changelog>
  <changelog author="jimmy@boombatower.com" date="1520251200">- Update to version v4.4.0 for boo#1083948 to resolve CVE-2018-7667</changelog>
  <changelog author="jimmy@boombatower.com" date="1520424000">- Sync up conditional sub-packages with devel package to disable
  uninstallable pacakges for boo#1002214.</changelog>
</package>
<package pkgid="4df5c5ab178dca81478c14c33c0a9c0d0821691a892f446f6c5ff0253ee350b9" name="agrep" arch="x86_64">
  <version epoch="0" ver="0.8.0_git201402282055" rel="10.1"/>
  <changelog author="dmueller@suse.de" date="1172404800">- Initial package (0.7.5)</changelog>
  <changelog author="coolo@suse.de" date="1201176000">- fix build</changelog>
  <changelog author="pgajdos@suse.cz" date="1245326400">- updated to 0.7.6 (see NEWS)</changelog>
  <changelog author="pgajdos@suse.cz" date="1260446400">- updated to 0.8.0:
  - Added tre_ prefix to all functions exported from libtre.  This
    changes the binary interface (ABI).  The old source interface
    (API) is still available in &lt;tre/regex.h&gt;.  New programs should
    use &lt;tre/tre.h&gt;.
  - Visual C++ 6 project files replaced with Visual Studio 2008 files.
  - Bug fixes.
- package renamed to tre, splitted out subpackage libtre5</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags
- Enable pkgconfig provides</changelog>
  <changelog author="cfarrell@suse.com" date="1336478400">- license update: BSD-3-Clause
  Package is predominantly BSD-3-Clause licensed. This spec file license
  update makes the openSUSE package license substantially similar to the
  Fedora package license"</changelog>
  <changelog author="bjones@ece.msstate.edu" date="1396958400">- Added make check tests
- Added python-tre wrapper
- Used updated source from https://github.com/laurikari/tre/
- Added chicken.patch to correct Python build failures</changelog>
  <changelog author="pgajdos@suse.com" date="1398340800">- remove redundant setting of C(XX)FLAGS
- package translations in tre-lang</changelog>
  <changelog author="kbabioch@suse.com" date="1516104000">- CVE-2016-8859.patch: Fix multiple integer overflows which allowed
  attackers to cause memory corruption via a large number of (1) states or
  (2) tags, which triggered an out-of-bounds write (bnc#1005483)</changelog>
</package>
<package pkgid="7eebb003d07043fbc0111e3d53f1c58f1568f846440364ec5a2dc9ce4f565c02" name="amanda" arch="src">
  <version epoch="0" ver="3.3.6" rel="10.3.1"/>
  <changelog author="ro@suse.de" date="1297252800">- amanda-2.6.1p1-newer_glib.patch:
  at least glib-2.27 brings g_list_free_full and g_slist_free_full
  with own definitions, prefix local variant with my_</changelog>
  <changelog author="coolo@opensuse.org" date="1304164800">- amanda-2.6.1p1-avoid-perl-provides.patch:
  patch perl code not to trigger bogus perl provides</changelog>
  <changelog author="jmatejek@novell.com" date="1308830400">- update to version 3.3.0
  * the following changers were dropped:
    chg-chio, chg-chs, chg-iomega, chg-juke, chg-mcutil, chg-mtx,
    chg-null, chg-rait, chg-rth, chg-scsi-chio, chg-scsi
  - see amanda-changers(7) for replacements
  * deprecated configuration keywords:
    label_new_tapes, tapebufs, file-pad, amrecover_do_fsf,
    amrecover_check_label
  * amidxtaped now requires CONFIG parameter, meaning that
    amrecover &lt; 2.4.3 will be unable to recover from new servers
  * need to specify a changer device explicitly
  * default auth is now "bsdtcp"
  * amtape behavior was changed, see amtape manpage for details
  * better cmdline interface for amreport (just "amreport $config")
  * multiple simultaneous writes - can write to all drives in parallel
  * many new features and bugfixes, see NEWS file for details
- -pie and -fPIE are now part of global CFLAGS/LDFLAGS</changelog>
  <changelog author="jmatejek@novell.com" date="1312977600">- explicit permissions for docdir (fixes failure on SLE11)
- %pre script can now handle a situation where user doesn't exist</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jmatejek@suse.com" date="1328616000">- removed custom definition of g_queue_free_full which was
  conflicting with a function newly added to glib2</changelog>
  <changelog author="aj@suse.de" date="1343649600">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vdziewiecki@suse.com" date="1349265600">-Update to 3.3.2 (see NEWS)
-Remove queue patch (fixed upstream, see ChangeLog)
-Replaced %run_permissions with %set_permissions (bnc#764124)</changelog>
  <changelog author="jmatejek@suse.com" date="1349438400">- fixed some functions without return values</changelog>
  <changelog author="vdziewiecki@suse.com" date="1357905600">-Update to 3.3.3
  * amdump.X log files use timestamp instead of number, amdump and amdump.1
    are maintained as symlink.
  * chg-disk
    o Use the changerfile for the statefile.
  * s3 device
    o support CASTOR storage
  * amanda.conf
    o New REPORT-USE-MEDIA and REPORT-NEXT-MEDIA.
  * amfetchdump
    o new --extract, --directory, --data-path and --application-property
    arguments. It allow to do the extraction on the server.
  * --exact-match argument to many command, and '=' prefix to expression.
    o It diable use of expression for host, disk, level and datestamp on
    command line argument.
  * All changer scripts.
    o Add LOCK-TIMEOUT property.
  * Many bug fix
-Fixed bnc#784375 - Clarify licensing of amanda. Zmanda changed its
  licensing from GPL-2.0 to GPL-2.0+ and LGPLv2 to LGPLv2+.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Added automake --add-missing option to fix build with new automake</changelog>
  <changelog author="mls@suse.de" date="1405944000">- comment out all 'undef bool' lines, as they break the build
  with modern perl versions
  added patch: amanda-3.3.3-noundefbool.patch</changelog>
  <changelog author="darin@darins.net" date="1410782400">- update to 3.3.6
  * ambsdtar
    new application that use BSD tar to do the backup.
  3.3.5 release notes
  * faster 'verify' command.
    fix parsing of config override arguments.
  * amsamba
    Add REGEX-MATCH property.
  * amvault
    Print progress status.
  * ndmp device
    INDIRECT property default to yes.
  3.3.4 release notes
  * amreport
    new --format argument
    new 'json' and 'json_raw' format.
  * amanda.conf
    new REPORT-FORMAT option.
  * amtape
    new 'verify' command.
  * amadmin
    new 'force-level-1' command.
  * ampgsql
    Add VERBOSE property.
  * S3 device
    handle DURABLE_REDUCED_AVAILABILITY for google storage.
  See ChangeLog for a full listing of changes:
    /usr/share/doc/packages/amanda/ChangeLog
- removed amanda-gets.patch, applied upstream</changelog>
  <changelog author="darin@darins.net" date="1410868800">- wrap %post permissions routines in conditionals for SLES</changelog>
  <changelog author="mpluskal@suse.com" date="1417089600">- Fix for boo#907361 -- amanda-2.6.1p1-fix-perl-format.patch
- Clean spec file with spec-cleaner</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  amanda-timestamp.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1460808000">- Replace libsmbclient and libsmbclient-devel for
  pkgconfig(smbclient) BuildRequires: Following samba changes.</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add openssh to BuildRequires to support ssh [bsc#1022028]</changelog>
  <changelog author="kstreitova@suse.com" date="1541160000">- add amanda-3.3.6-CVE-2016-10729.patch to fix local privilege
  escalation from amanda to root via unsafe tar command options
  [bsc#1112916] [CVE-2016-10729]</changelog>
</package>
<package pkgid="e3fd43fef5dd5be3c4c78215444f721588aabda1c0f7c3653ce4a1f32cb0599d" name="amanda" arch="x86_64">
  <version epoch="0" ver="3.3.6" rel="10.3.1"/>
  <changelog author="ro@suse.de" date="1297252800">- amanda-2.6.1p1-newer_glib.patch:
  at least glib-2.27 brings g_list_free_full and g_slist_free_full
  with own definitions, prefix local variant with my_</changelog>
  <changelog author="coolo@opensuse.org" date="1304164800">- amanda-2.6.1p1-avoid-perl-provides.patch:
  patch perl code not to trigger bogus perl provides</changelog>
  <changelog author="jmatejek@novell.com" date="1308830400">- update to version 3.3.0
  * the following changers were dropped:
    chg-chio, chg-chs, chg-iomega, chg-juke, chg-mcutil, chg-mtx,
    chg-null, chg-rait, chg-rth, chg-scsi-chio, chg-scsi
  - see amanda-changers(7) for replacements
  * deprecated configuration keywords:
    label_new_tapes, tapebufs, file-pad, amrecover_do_fsf,
    amrecover_check_label
  * amidxtaped now requires CONFIG parameter, meaning that
    amrecover &lt; 2.4.3 will be unable to recover from new servers
  * need to specify a changer device explicitly
  * default auth is now "bsdtcp"
  * amtape behavior was changed, see amtape manpage for details
  * better cmdline interface for amreport (just "amreport $config")
  * multiple simultaneous writes - can write to all drives in parallel
  * many new features and bugfixes, see NEWS file for details
- -pie and -fPIE are now part of global CFLAGS/LDFLAGS</changelog>
  <changelog author="jmatejek@novell.com" date="1312977600">- explicit permissions for docdir (fixes failure on SLE11)
- %pre script can now handle a situation where user doesn't exist</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jmatejek@suse.com" date="1328616000">- removed custom definition of g_queue_free_full which was
  conflicting with a function newly added to glib2</changelog>
  <changelog author="aj@suse.de" date="1343649600">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vdziewiecki@suse.com" date="1349265600">-Update to 3.3.2 (see NEWS)
-Remove queue patch (fixed upstream, see ChangeLog)
-Replaced %run_permissions with %set_permissions (bnc#764124)</changelog>
  <changelog author="jmatejek@suse.com" date="1349438400">- fixed some functions without return values</changelog>
  <changelog author="vdziewiecki@suse.com" date="1357905600">-Update to 3.3.3
  * amdump.X log files use timestamp instead of number, amdump and amdump.1
    are maintained as symlink.
  * chg-disk
    o Use the changerfile for the statefile.
  * s3 device
    o support CASTOR storage
  * amanda.conf
    o New REPORT-USE-MEDIA and REPORT-NEXT-MEDIA.
  * amfetchdump
    o new --extract, --directory, --data-path and --application-property
    arguments. It allow to do the extraction on the server.
  * --exact-match argument to many command, and '=' prefix to expression.
    o It diable use of expression for host, disk, level and datestamp on
    command line argument.
  * All changer scripts.
    o Add LOCK-TIMEOUT property.
  * Many bug fix
-Fixed bnc#784375 - Clarify licensing of amanda. Zmanda changed its
  licensing from GPL-2.0 to GPL-2.0+ and LGPLv2 to LGPLv2+.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Added automake --add-missing option to fix build with new automake</changelog>
  <changelog author="mls@suse.de" date="1405944000">- comment out all 'undef bool' lines, as they break the build
  with modern perl versions
  added patch: amanda-3.3.3-noundefbool.patch</changelog>
  <changelog author="darin@darins.net" date="1410782400">- update to 3.3.6
  * ambsdtar
    new application that use BSD tar to do the backup.
  3.3.5 release notes
  * faster 'verify' command.
    fix parsing of config override arguments.
  * amsamba
    Add REGEX-MATCH property.
  * amvault
    Print progress status.
  * ndmp device
    INDIRECT property default to yes.
  3.3.4 release notes
  * amreport
    new --format argument
    new 'json' and 'json_raw' format.
  * amanda.conf
    new REPORT-FORMAT option.
  * amtape
    new 'verify' command.
  * amadmin
    new 'force-level-1' command.
  * ampgsql
    Add VERBOSE property.
  * S3 device
    handle DURABLE_REDUCED_AVAILABILITY for google storage.
  See ChangeLog for a full listing of changes:
    /usr/share/doc/packages/amanda/ChangeLog
- removed amanda-gets.patch, applied upstream</changelog>
  <changelog author="darin@darins.net" date="1410868800">- wrap %post permissions routines in conditionals for SLES</changelog>
  <changelog author="mpluskal@suse.com" date="1417089600">- Fix for boo#907361 -- amanda-2.6.1p1-fix-perl-format.patch
- Clean spec file with spec-cleaner</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  amanda-timestamp.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1460808000">- Replace libsmbclient and libsmbclient-devel for
  pkgconfig(smbclient) BuildRequires: Following samba changes.</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add openssh to BuildRequires to support ssh [bsc#1022028]</changelog>
  <changelog author="kstreitova@suse.com" date="1541160000">- add amanda-3.3.6-CVE-2016-10729.patch to fix local privilege
  escalation from amanda to root via unsafe tar command options
  [bsc#1112916] [CVE-2016-10729]</changelog>
</package>
<package pkgid="566c5ec49a0add1b2d4ea899c967dfb103aa20b68bbdcd8b47af88d52c590b07" name="amarok" arch="src">
  <version epoch="0" ver="2.8.0" rel="19.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
</package>
<package pkgid="b1f22cc9d0ecf4adc2f113c6fecd10b43273921918d59f84b01660d42a09007c" name="amarok" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="19.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
</package>
<package pkgid="0a05913ef8f4da4ca4ae2fece31af503e93e8d5e2661767f44a187ed568c3f0e" name="amarok" arch="src">
  <version epoch="0" ver="2.8.0" rel="22.1"/>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514030400">- Add patch to avoid automatic network requests (boo#1070899):
  * disable-web-plugins-by-default.patch
- Also disable all scripts by default
- Fix loading of scripts:
  * load-scrips-without-qca.patch</changelog>
</package>
<package pkgid="a85642dc2d511436da0c495ac2dedac4c87c8f8fa2214a142f79b9fb7da3552f" name="amarok" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="22.1"/>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514030400">- Add patch to avoid automatic network requests (boo#1070899):
  * disable-web-plugins-by-default.patch
- Also disable all scripts by default
- Fix loading of scripts:
  * load-scrips-without-qca.patch</changelog>
</package>
<package pkgid="2150312aafe2994073daf49e31c98e008b0f4c96a5b056615b0c1383ef729931" name="amarok-lang" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="19.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
</package>
<package pkgid="347f0ef3ab04731dd862d2763c811d720718347abd38cd1a70e41a0a1993d052" name="amarok-lang" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="22.1"/>
  <changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
  <changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
  <changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
  <changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
  <changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
  <changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
  <changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
  <changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514030400">- Add patch to avoid automatic network requests (boo#1070899):
  * disable-web-plugins-by-default.patch
- Also disable all scripts by default
- Fix loading of scripts:
  * load-scrips-without-qca.patch</changelog>
</package>
<package pkgid="15bc253a0fb171311f5ecbf0ee489f61f7478cec83514993c877e02e03203a78" name="amavisd-new" arch="src">
  <version epoch="0" ver="2.8.1" rel="11.1"/>
  <changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
  <changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
  <changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
  <changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
  <changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
  <changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>
</package>
<package pkgid="debe364dde20b48d8622a67f3b6295a6cdd96b825f62aadacdd37041589d2613" name="amavisd-new" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="11.1"/>
  <changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
  <changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
  <changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
  <changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
  <changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
  <changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>
</package>
<package pkgid="28e0cd4d0b40643f38d8f75dfde16a05250b51d169a0432b97ca74ba7152c977" name="amavisd-new-docs" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="11.1"/>
  <changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
  <changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
  <changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
  <changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
  <changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
  <changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>
</package>
<package pkgid="7743c4beef857a25c57dba09453c3faba241ec5c23f4ca29e980e50393139745" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="2.2.325.0" rel="2.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
</package>
<package pkgid="237644aff2e32b4d1a2f4e50d5e5e9ad95d5334b90982b388b17defda4491d68" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="2.2.325.0" rel="2.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
</package>
<package pkgid="ed5ebbf8fcdf1d9ef416b4c6d0b350f0e5b1d7731315ea192b793a3a4bcf70f7" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="2.2.45.0" rel="2.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
</package>
<package pkgid="cf809aaea067e9dbcb8ad77170fc54d8b886ab8c848496e6355213e77252ea8a" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="2.2.45.0" rel="2.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
</package>
<package pkgid="37448381f281548820de30457e3667de26a46f448c976f45e471c76969f5c121" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="2.3.50.0" rel="2.9.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537012800">- Update to 2.3.50.0 2018-09-12 (bsc#1108265)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user
    is reset on every session. You can change the permissions
    by moving the ssm-user to a less-privileged group or by
    changing the sudoers file. The ssm-user is not removed
    from the system when SSM Agent is uninstalled.
- Update to 2.3.13.0 2018-08-16
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 2018-08-02
  + NOTE: This build should not be installed for Windows since
    the SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 2018-07-31
  + NOTE: This build should not be installed for Windows since
    you might see the error - "Encountered error while starting
    the plugin: Unable to locate cloudwatch.exe" for Cloudwatch
    plugin. This bug has been fixed in SSM Agent version 2.2.916.0.
    Also SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 2018-06-26
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output
    to CloudWatch Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 2018-05-29
  + Various bug fixes
- Update to 2.2.607.0 2018-05-23
  + Various bug fixes
- Update to 2.2.546.0 2018-05-07
  + Bug fix to retry sending document results if they
    couldn't reach the service
- Update to 2.2.493.0 2018-04-25
  + NOTE: Downgrade to this version using AWS-UpdateSSMAgent
    is not permitted for agent installed using snap
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change
    permissions of directories
  + Bug fix to Cloudwatch plugin where StartType has
    duplicated Enabled value
- Update to 2.2.392.0 2018-03-27
  + Added support for agent hibernation so that Agent backs
    off or enters hibernation mode if it does not have access
    to the service
  + Various bug fixes
- Update to 2.2.355.0 2018-03-16
  + Fix S3Download to download from cross regions.
  + Various bug fixes
- Refresh patches for new version
  + fix-config.patch
  + fix-version.patch</changelog>
</package>
<package pkgid="ada658ca150658119f69f913f1dd134136a3251ba563f3b0419b2668499dad9c" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="2.3.50.0" rel="2.9.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1537012800">- Update to 2.3.50.0 2018-09-12 (bsc#1108265)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user
    is reset on every session. You can change the permissions
    by moving the ssm-user to a less-privileged group or by
    changing the sudoers file. The ssm-user is not removed
    from the system when SSM Agent is uninstalled.
- Update to 2.3.13.0 2018-08-16
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 2018-08-02
  + NOTE: This build should not be installed for Windows since
    the SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 2018-07-31
  + NOTE: This build should not be installed for Windows since
    you might see the error - "Encountered error while starting
    the plugin: Unable to locate cloudwatch.exe" for Cloudwatch
    plugin. This bug has been fixed in SSM Agent version 2.2.916.0.
    Also SSM Agent service may remain in starting status if unable
    to authenticate to the Systems Manager service, which is
    fixed in the latest release.
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 2018-06-26
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output
    to CloudWatch Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 2018-05-29
  + Various bug fixes
- Update to 2.2.607.0 2018-05-23
  + Various bug fixes
- Update to 2.2.546.0 2018-05-07
  + Bug fix to retry sending document results if they
    couldn't reach the service
- Update to 2.2.493.0 2018-04-25
  + NOTE: Downgrade to this version using AWS-UpdateSSMAgent
    is not permitted for agent installed using snap
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change
    permissions of directories
  + Bug fix to Cloudwatch plugin where StartType has
    duplicated Enabled value
- Update to 2.2.392.0 2018-03-27
  + Added support for agent hibernation so that Agent backs
    off or enters hibernation mode if it does not have access
    to the service
  + Various bug fixes
- Update to 2.2.355.0 2018-03-16
  + Fix S3Download to download from cross regions.
  + Various bug fixes
- Refresh patches for new version
  + fix-config.patch
  + fix-version.patch</changelog>
</package>
<package pkgid="0316ff10677e15928b9c6e684fcee18fdd005853f876c903e3cb1cc7ff9e9623" name="ansible" arch="noarch">
  <version epoch="0" ver="2.4.1.0" rel="6.1"/>
  <changelog author="lars@linux-schulserver.de" date="1444478400">- update to 1.9.4
  This release addresses several bugs, most notably those related to
  the yum module (introduced in 1.9.3):
  + Fixes a bug where yum state=latest would error if there were no
    updates to install.
  + Fixes a bug where yum state=latest did not work with wildcard
    package names.
  + Fixes a bug in lineinfile relating to escape sequences.
  + Fixes a bug where vars_prompt was not keeping passwords private
    by default.
  + Fix ansible-galaxy and the hipchat callback plugin to check that
    the host it is contacting matches its TLS Certificate.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1444564800">- build again on SLE-11-SP4 by ignoring some dependencies that are
  not available in the official OBS repository: python-paramiko,
  python-Jinja2, python-PyYAML, python-pycrypto</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1455192000">- update to 2.0.0.2
  Version 2.0 is a new major version with a lot of changes, among which:
  + New modules for cloud-based services and many more
  + The new block/rescue/always directives allow for making task blocks and exception-like semantics
  + Many API changes
- more info at:
  https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#20-over-the-hills-and-far-away</changelog>
  <changelog author="eshmarnev@suse.com" date="1455537600">- fix_zypper_errorhandling.patch is being deleted</changelog>
  <changelog author="lars@linux-schulserver.de" date="1457524800">- update to 2.0.1.0:
  * Fixes a major compatibility break in the synchronize module shipped
    with 2.0.0.x. That version of synchronize ran sudo on the controller
    prior to running rsync. In 1.9.x and previous, sudo was run on the
    host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
  * Additionally, several other problems with where synchronize chose
    to run when combined with delegate_to were fixed. In particular, if
    a playbook targetted localhost and then delegated_to a remote host
    the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
    the src and destination directories on the delegated host. This has
    now been fixed to copy between localhost and the delegated host.
  * Fix a regression where synchronize was unable to deal with unicode paths.
  * Fix a regression where synchronize deals with inventory hosts that
    use localhost but with an alternate port.
  * Fixes a regression where the retry files feature was not implemented.
  * Fixes a regression where the any_errors_fatal option was implemented
    in 2.0 incorrectly, and also adds a feature where any_errors_fatal
    can be set at the block level.
  * Fix tracebacks when playbooks or ansible itself were located in
    directories with unicode characters.
  * Fix bug when sending unicode characters to an external pager
    for display.
  * Fix a bug with squashing loops for special modules (mostly package
    managers). The optimization was squashing when the loop did not
    apply to the selection of packages. This has now been fixed.
  * Temp files created when using vault are now "shredded" using the
    unix shred program which overwrites the file with random data.
  * Some fixes to cloudstack modules for case sensitivity
  * Fix non-newstyle modules (non-python modules and old-style modules)
    to disabled pipelining.
  * Fix fetch module failing even if fail_on_missing is set to False
  * Fix for cornercase when local connections, sudo, and raw were
    used together.
  * Fix dnf module to remove dependent packages when state=absent is
    specified. This was a feature of the 1.9.x version that was left
    out by mistake when the module was rewritten for 2.0.
  * Fix bugs with non-english locales in yum, git, and apt modules
  * Fix a bug with the dnf module where state=latest could only
    upgrade, not install.</changelog>
  <changelog author="michael@stroeder.com" date="1462622400">- update to 2.0.2.0:
  * Backport of the 2.1 feature to ensure per-item callbacks are sent as they occur,
    rather than all at once at the end of the task.
  * Fixed bugs related to the iteration of tasks when certain combinations of roles,
    blocks, and includes were used, especially when handling errors in rescue/always
    portions of blocks.
  * Fixed handling of redirects in our helper code, and ported the uri module to use
    this helper code. This removes the httplib dependency for this module while fixing
    some bugs related to redirects and SSL certs.
  * Fixed some bugs related to the incorrect creation of extra temp directories for
    uploading files, which were not cleaned up properly.
  * Improved error reporting in certain situations, to provide more information such as
    the playbook file/line.
  * Fixed a bug related to the variable precedence of role parameters, especially when
    a role may be used both as a dependency of a role and directly by itself within the
    same play.
  * Fixed some bugs in the 2.0 implementation of do/until.
  * Fixed some bugs related to run_once:
  - Ensure that all hosts are marked as failed if a task marked as run_once fails.
  - Show a warning when using the free strategy when a run_once task is encountered, as
    there is no way for the free strategy to guarantee the task is not run more than once.
  * Fixed a bug where the assemble module was not honoring check mode in some situations.
  * Fixed a bug related to delegate_to, where we were incorrectly using variables from
    the inventory host rather than the delegated-to host.
  * The 'package' meta-module now properly squashes items down to a single execution (as the
    apt/yum/other package modules do).
  * Fixed a bug related to the ansible-galaxy CLI command dealing with paged results from
    the Galaxy server.
  * Pipelining support is now available for the local and jail connection plugins, which is
    useful for users who do not wish to have temp files/directories created when running
    tasks with these connection types.
  * Improvements in support for additional shell types.
  * Improvements in the code which is used to calculate checksums for remote files.
  * Some speed ups and bug fixes related to the variable merging code.
  * Workaround bug in python subprocess on El Capitan that was making vault fail
    when attempting to encrypt a file
  * Fix lxc_container module having predictable temp file names and setting file
    permissions on the temporary file too leniently on a temporary file that was
    executed as a script.  Addresses CVE-2016-3096
  * Fix a bug in the uri module where setting headers via module params that
    start with HEADER_ were causing a traceback.
  * Fix bug in the free strategy that was causing it to synchronize its workers
    after every task (making it a lot more like linear than it should have been).</changelog>
  <changelog author="michael@stroeder.com" date="1464523200">- update to 2.1.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- on SuSE platforms recommend package python-dnspython for
  DNS lookups in playbooks</changelog>
  <changelog author="michael@stroeder.com" date="1467115200">- update to 2.1.1.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- changed download link to https://releases.ansible.com</changelog>
  <changelog author="michael@stroeder.com" date="1473940800">- update to 2.1.2.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
  <changelog author="michael@stroeder.com" date="1476705600">- update to 2.2.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
  <changelog author="boris@steki.net" date="1484136000">- security update to rc4 of 2.2.1.0 version
  CVE-2016-9587, CVE-2016-8628 and CVE-2016-8614
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
  <changelog author="michael@stroeder.com" date="1484568000">- update to 2.2.1.0 (final)</changelog>
  <changelog author="michael@stroeder.com" date="1490616000">- update to 2.2.2.0
  This release fixes a few bugs introduced in the previous version,
  as well as another small tweak to catch an additional way in
  which CVE-2016-9587 could be triggered.</changelog>
  <changelog author="michael@stroeder.com" date="1490702400">- update to 2.3.0.0
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
  <changelog author="lars@linux-schulserver.de" date="1494417600">- update to 2.3.1 RC1 (package version 2.3.0.1):
  * SECURITY (MODERATE): fix for CVE-2017-7481, in which data for
    lookup plugins used as variables was not being correctly marked
    as "unsafe".</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1496836800">- update to 2.3.1.0 (final)
- clean up of spec file with spec-cleaner</changelog>
  <changelog author="michael@stroeder.com" date="1502193600">- update to 2.3.2.0 (final)
- replaced hard-coded version by var</changelog>
  <changelog author="lars@linux-schulserver.de" date="1506168000">- update to 2.4.0.0 (final)
  Major Changes
  + Support for Python-2.4 and Python-2.5 on the managed system's side
    was dropped. If you need to manage a system that ships with Python-2.4
    or Python-2.5, you'll need to install Python-2.6 or better on the
    managed system or run Ansible-2.3 until you can upgrade the system.
  + New import/include keywords to replace the old bare include directives.
    The use of static: {yes|no} on such includes is now deprecated.
  ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
  ++ Using include_* (include_tasks, include_role) directives are dynamic.
    This is done to avoid collisions and possible security issues as
    facts come from the remote targets and they might be compromised.
  + New order play level keyword that allows the user to change the
    order in which Ansible processes hosts when dispatching tasks.
  + Users can now set group merge priority for groups of the same depth
    (parent child relationship), using the new ansible_group_priority variable,
    when values are the same or don't exist it will fallback to the previous
    sorting by name'.
  + Inventory has been revamped:
  ++ Inventory classes have been split to allow for better
    management and deduplication
  ++ Logic that each inventory source duplicated is now common and pushed
    up to reconciliation
  ++ VariableManager has been updated for better interaction with inventory
  ++ Updated CLI with helper method to initialize base objects for plays
  ++ New inventory plugins for creating inventory
  ++ Old inventory formats are still supported via plugins
  ++ Inline host_list is also an inventory plugin, an example alternative
    advanced_host_list is also provided (it supports ranges)
  ++ New configuration option to list enabled plugins and precedence
    order: whitelist_inventory in ansible.cfg
  ++ vars_plugins have been reworked, they are now run from Vars manager
    and API has changed (need docs)
  ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
  ++ It is now possible to specify mulitple inventory sources in the
    command line (-i /etc/hosts1 -i /opt/hosts2)
  ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
    is affected by meta: refresh_inventory
  ++ Group variable precedence is now configurable via new 'precedence'
    option in ansible.cfg (needs docs)
  ++ Improved warnings and error messages across the board
  + Configuration has been changed from a hardcoded listing in the
    constants module to dynamically loaded from yaml definitions
  ++ Also added an ansible-config CLI to allow for listing config options
    and dumping current config (including origin)
  ++ TODO: build upon this to add many features detailed in ansible-config
    proposal https://github.com/ansible/proposals/issues/35
  + Windows modules now support the use of multiple shared module_utils
    files in the form of Powershell modules (.psm1), via
    [#]Requires -Module Ansible.ModuleUtils.Whatever.psm1
  + Python module argument_spec now supports custom validation logic
    by accepting a callable as the type argument.
  + Windows become_method: runas now works across all authtypes and
    will auto-elevate under UAC if WinRM user has "Act as part of the
    operating system" privilege
  - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
    further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
  + python-httplib2
  + python-keyczar
  + python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
  adding/enhancing the needed (build)requires if needed</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Remove radical wording from descriptions.
  Use improved find syntax.</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1509105600">- Update to 2.4.1.0:
  * CVE-2017-7550: Prevent jenkins_plugin module from exposing
    passwords in remote host logs (bsc#1065872)
  * Various bug fixes and improvements</changelog>
</package>
<package pkgid="79836085c642eec32ca6400e31e7be7ecb32e16dfd39d018fb173af199ef5030" name="ansible" arch="src">
  <version epoch="0" ver="2.4.1.0" rel="6.1"/>
  <changelog author="lars@linux-schulserver.de" date="1444478400">- update to 1.9.4
  This release addresses several bugs, most notably those related to
  the yum module (introduced in 1.9.3):
  + Fixes a bug where yum state=latest would error if there were no
    updates to install.
  + Fixes a bug where yum state=latest did not work with wildcard
    package names.
  + Fixes a bug in lineinfile relating to escape sequences.
  + Fixes a bug where vars_prompt was not keeping passwords private
    by default.
  + Fix ansible-galaxy and the hipchat callback plugin to check that
    the host it is contacting matches its TLS Certificate.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1444564800">- build again on SLE-11-SP4 by ignoring some dependencies that are
  not available in the official OBS repository: python-paramiko,
  python-Jinja2, python-PyYAML, python-pycrypto</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1455192000">- update to 2.0.0.2
  Version 2.0 is a new major version with a lot of changes, among which:
  + New modules for cloud-based services and many more
  + The new block/rescue/always directives allow for making task blocks and exception-like semantics
  + Many API changes
- more info at:
  https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#20-over-the-hills-and-far-away</changelog>
  <changelog author="eshmarnev@suse.com" date="1455537600">- fix_zypper_errorhandling.patch is being deleted</changelog>
  <changelog author="lars@linux-schulserver.de" date="1457524800">- update to 2.0.1.0:
  * Fixes a major compatibility break in the synchronize module shipped
    with 2.0.0.x. That version of synchronize ran sudo on the controller
    prior to running rsync. In 1.9.x and previous, sudo was run on the
    host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
  * Additionally, several other problems with where synchronize chose
    to run when combined with delegate_to were fixed. In particular, if
    a playbook targetted localhost and then delegated_to a remote host
    the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
    the src and destination directories on the delegated host. This has
    now been fixed to copy between localhost and the delegated host.
  * Fix a regression where synchronize was unable to deal with unicode paths.
  * Fix a regression where synchronize deals with inventory hosts that
    use localhost but with an alternate port.
  * Fixes a regression where the retry files feature was not implemented.
  * Fixes a regression where the any_errors_fatal option was implemented
    in 2.0 incorrectly, and also adds a feature where any_errors_fatal
    can be set at the block level.
  * Fix tracebacks when playbooks or ansible itself were located in
    directories with unicode characters.
  * Fix bug when sending unicode characters to an external pager
    for display.
  * Fix a bug with squashing loops for special modules (mostly package
    managers). The optimization was squashing when the loop did not
    apply to the selection of packages. This has now been fixed.
  * Temp files created when using vault are now "shredded" using the
    unix shred program which overwrites the file with random data.
  * Some fixes to cloudstack modules for case sensitivity
  * Fix non-newstyle modules (non-python modules and old-style modules)
    to disabled pipelining.
  * Fix fetch module failing even if fail_on_missing is set to False
  * Fix for cornercase when local connections, sudo, and raw were
    used together.
  * Fix dnf module to remove dependent packages when state=absent is
    specified. This was a feature of the 1.9.x version that was left
    out by mistake when the module was rewritten for 2.0.
  * Fix bugs with non-english locales in yum, git, and apt modules
  * Fix a bug with the dnf module where state=latest could only
    upgrade, not install.</changelog>
  <changelog author="michael@stroeder.com" date="1462622400">- update to 2.0.2.0:
  * Backport of the 2.1 feature to ensure per-item callbacks are sent as they occur,
    rather than all at once at the end of the task.
  * Fixed bugs related to the iteration of tasks when certain combinations of roles,
    blocks, and includes were used, especially when handling errors in rescue/always
    portions of blocks.
  * Fixed handling of redirects in our helper code, and ported the uri module to use
    this helper code. This removes the httplib dependency for this module while fixing
    some bugs related to redirects and SSL certs.
  * Fixed some bugs related to the incorrect creation of extra temp directories for
    uploading files, which were not cleaned up properly.
  * Improved error reporting in certain situations, to provide more information such as
    the playbook file/line.
  * Fixed a bug related to the variable precedence of role parameters, especially when
    a role may be used both as a dependency of a role and directly by itself within the
    same play.
  * Fixed some bugs in the 2.0 implementation of do/until.
  * Fixed some bugs related to run_once:
  - Ensure that all hosts are marked as failed if a task marked as run_once fails.
  - Show a warning when using the free strategy when a run_once task is encountered, as
    there is no way for the free strategy to guarantee the task is not run more than once.
  * Fixed a bug where the assemble module was not honoring check mode in some situations.
  * Fixed a bug related to delegate_to, where we were incorrectly using variables from
    the inventory host rather than the delegated-to host.
  * The 'package' meta-module now properly squashes items down to a single execution (as the
    apt/yum/other package modules do).
  * Fixed a bug related to the ansible-galaxy CLI command dealing with paged results from
    the Galaxy server.
  * Pipelining support is now available for the local and jail connection plugins, which is
    useful for users who do not wish to have temp files/directories created when running
    tasks with these connection types.
  * Improvements in support for additional shell types.
  * Improvements in the code which is used to calculate checksums for remote files.
  * Some speed ups and bug fixes related to the variable merging code.
  * Workaround bug in python subprocess on El Capitan that was making vault fail
    when attempting to encrypt a file
  * Fix lxc_container module having predictable temp file names and setting file
    permissions on the temporary file too leniently on a temporary file that was
    executed as a script.  Addresses CVE-2016-3096
  * Fix a bug in the uri module where setting headers via module params that
    start with HEADER_ were causing a traceback.
  * Fix bug in the free strategy that was causing it to synchronize its workers
    after every task (making it a lot more like linear than it should have been).</changelog>
  <changelog author="michael@stroeder.com" date="1464523200">- update to 2.1.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- on SuSE platforms recommend package python-dnspython for
  DNS lookups in playbooks</changelog>
  <changelog author="michael@stroeder.com" date="1467115200">- update to 2.1.1.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- changed download link to https://releases.ansible.com</changelog>
  <changelog author="michael@stroeder.com" date="1473940800">- update to 2.1.2.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
  <changelog author="michael@stroeder.com" date="1476705600">- update to 2.2.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
  <changelog author="boris@steki.net" date="1484136000">- security update to rc4 of 2.2.1.0 version
  CVE-2016-9587, CVE-2016-8628 and CVE-2016-8614
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
  <changelog author="michael@stroeder.com" date="1484568000">- update to 2.2.1.0 (final)</changelog>
  <changelog author="michael@stroeder.com" date="1490616000">- update to 2.2.2.0
  This release fixes a few bugs introduced in the previous version,
  as well as another small tweak to catch an additional way in
  which CVE-2016-9587 could be triggered.</changelog>
  <changelog author="michael@stroeder.com" date="1490702400">- update to 2.3.0.0
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
  <changelog author="lars@linux-schulserver.de" date="1494417600">- update to 2.3.1 RC1 (package version 2.3.0.1):
  * SECURITY (MODERATE): fix for CVE-2017-7481, in which data for
    lookup plugins used as variables was not being correctly marked
    as "unsafe".</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1496836800">- update to 2.3.1.0 (final)
- clean up of spec file with spec-cleaner</changelog>
  <changelog author="michael@stroeder.com" date="1502193600">- update to 2.3.2.0 (final)
- replaced hard-coded version by var</changelog>
  <changelog author="lars@linux-schulserver.de" date="1506168000">- update to 2.4.0.0 (final)
  Major Changes
  + Support for Python-2.4 and Python-2.5 on the managed system's side
    was dropped. If you need to manage a system that ships with Python-2.4
    or Python-2.5, you'll need to install Python-2.6 or better on the
    managed system or run Ansible-2.3 until you can upgrade the system.
  + New import/include keywords to replace the old bare include directives.
    The use of static: {yes|no} on such includes is now deprecated.
  ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
  ++ Using include_* (include_tasks, include_role) directives are dynamic.
    This is done to avoid collisions and possible security issues as
    facts come from the remote targets and they might be compromised.
  + New order play level keyword that allows the user to change the
    order in which Ansible processes hosts when dispatching tasks.
  + Users can now set group merge priority for groups of the same depth
    (parent child relationship), using the new ansible_group_priority variable,
    when values are the same or don't exist it will fallback to the previous
    sorting by name'.
  + Inventory has been revamped:
  ++ Inventory classes have been split to allow for better
    management and deduplication
  ++ Logic that each inventory source duplicated is now common and pushed
    up to reconciliation
  ++ VariableManager has been updated for better interaction with inventory
  ++ Updated CLI with helper method to initialize base objects for plays
  ++ New inventory plugins for creating inventory
  ++ Old inventory formats are still supported via plugins
  ++ Inline host_list is also an inventory plugin, an example alternative
    advanced_host_list is also provided (it supports ranges)
  ++ New configuration option to list enabled plugins and precedence
    order: whitelist_inventory in ansible.cfg
  ++ vars_plugins have been reworked, they are now run from Vars manager
    and API has changed (need docs)
  ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
  ++ It is now possible to specify mulitple inventory sources in the
    command line (-i /etc/hosts1 -i /opt/hosts2)
  ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
    is affected by meta: refresh_inventory
  ++ Group variable precedence is now configurable via new 'precedence'
    option in ansible.cfg (needs docs)
  ++ Improved warnings and error messages across the board
  + Configuration has been changed from a hardcoded listing in the
    constants module to dynamically loaded from yaml definitions
  ++ Also added an ansible-config CLI to allow for listing config options
    and dumping current config (including origin)
  ++ TODO: build upon this to add many features detailed in ansible-config
    proposal https://github.com/ansible/proposals/issues/35
  + Windows modules now support the use of multiple shared module_utils
    files in the form of Powershell modules (.psm1), via
    [#]Requires -Module Ansible.ModuleUtils.Whatever.psm1
  + Python module argument_spec now supports custom validation logic
    by accepting a callable as the type argument.
  + Windows become_method: runas now works across all authtypes and
    will auto-elevate under UAC if WinRM user has "Act as part of the
    operating system" privilege
  - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
    further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
  + python-httplib2
  + python-keyczar
  + python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
  adding/enhancing the needed (build)requires if needed</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Remove radical wording from descriptions.
  Use improved find syntax.</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1509105600">- Update to 2.4.1.0:
  * CVE-2017-7550: Prevent jenkins_plugin module from exposing
    passwords in remote host logs (bsc#1065872)
  * Various bug fixes and improvements</changelog>
</package>
<package pkgid="a50327d87ef6b6422bfa5208b5c36fe11b834684cba43c98133ee421619d24cb" name="apache-commons-email" arch="noarch">
  <version epoch="0" ver="1.2" rel="10.1"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora. Removed maven stuff</changelog>
  <changelog author="dmacvicar@suse.de" date="1325851200">- add BuildRoot so it builds on SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Security fix [bsc#1077893, CVE-2018-1294]
  * Avoid passing unvalidated input containing line-breaks as email
    details (recipients, contents, etc.) might be manipulated.
  * Added apache-commons-email-CVE-2018-1294.patch</changelog>
</package>
<package pkgid="c33ebc6da112568564aaeb37ffb26ca10315dfda397233bdd818faf220f3fd7a" name="apache-commons-email" arch="src">
  <version epoch="0" ver="1.2" rel="10.1"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora. Removed maven stuff</changelog>
  <changelog author="dmacvicar@suse.de" date="1325851200">- add BuildRoot so it builds on SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Security fix [bsc#1077893, CVE-2018-1294]
  * Avoid passing unvalidated input containing line-breaks as email
    details (recipients, contents, etc.) might be manipulated.
  * Added apache-commons-email-CVE-2018-1294.patch</changelog>
</package>
<package pkgid="860d54e65ed361eaf99eac8a7fc103e711e3f9abf4f2a46cd8762b2d3ca07146" name="apache-commons-email-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="10.1"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora. Removed maven stuff</changelog>
  <changelog author="dmacvicar@suse.de" date="1325851200">- add BuildRoot so it builds on SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Security fix [bsc#1077893, CVE-2018-1294]
  * Avoid passing unvalidated input containing line-breaks as email
    details (recipients, contents, etc.) might be manipulated.
  * Added apache-commons-email-CVE-2018-1294.patch</changelog>
</package>
<package pkgid="b4d2d4b680cfa81bf7f02c4989a68ab8672bab9060703f91786cb4b8aa583f68" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="4882578add7d96864886502453bbab57e502e334b698b136b10a0fb207efc907" name="apache-pdfbox" arch="src">
  <version epoch="0" ver="1.8.12" rel="4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="40c017b0ad2025ee5265d2df8632af00dab6653dd4bc9ebfbf1ba4f1d8999bb9" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="3e9747aff114c43378e7b1e8f66cd4e1c30149310252e03e8b253ef13d2080bf" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="7bc576b8e67d1e4756000679b27187696a269682e466c10d12289f97dee489cf" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="6b3547962e631c08996cee4f00f312ec70796bc1262b37b3d2ae55222d436548" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="26475c87219de3b5aec8b5491b39bf0bc42f1eb0e7dc8c4ed961b7204f804ed7" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="fe386d92eb3d72040a7cdba0a0850cb3714cff36e0689296f8e4d7b79f514e0d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="31c87525097ec8bde3f5ea20f3ae02ec27edf2ff98f9ca3a76d30f8dd2266c1a" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="e010df82e6974dbeab4ba920d06a4141102f37fae76f86152da99446f680e8f5" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="2c130e0b6b38149102d091565b312918732a13a8fbd95f7779f5591c49c7565c" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="05711f86a0233a836862cd02786e84de4f9f953a8c19e7a5c9c1aaff5b37ec5d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="0c72b5bbb8e20414698cd246b19f0712d4402797ce3ffecd87a8c2e92b7390f9" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="31695f48e33cfbc3d79b57a51e84f28c504b968210f130c03cfd03d833f5a0ef" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="d761a6fbeeb2751d53396acbc03eabd2aad2b99c20f3fb6e2fc09c1507a361bb" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="e71aea45383df4238900406e255f73cae8a74b8068ab26c27cc2c9586b8723c0" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="4e7c14e2fe564fe0956bee8d6b5958348e09bee69904d4129f2305cbbe0cc988" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="35dd51e9160faecba3edf691d0fccdc8d8f313a804d112aff0a1aaddad377e94" name="apache2" arch="src">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="33269d27672b03fc8cce93c1205c632e56d4174550a16f224126b46166c0bcad" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="743b8abeb6512b552e2bb627887e47c8f2f858375067563ae5f5fb3699b2bd54" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="5bd7b8aa1b151182a49e3beb6948fa44da784d13f08c9a8c7923947a58a00819" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="6e818c0f75c0eaef20654a607c8b0982667c3131948b1cd65f94d9cabe0cc293" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="7568c4905b55e7f40aa3d2b4ecd399c546eb397c4d03c77ccb0eb27e439dc00e" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="c3c76cff99e4a83051e8bfadc045e70dde2dbc69cdb2bfdf76cdf69cdf4501ca" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="94ef7e27d566fbd8cc942b6133836a8a1d02027af31ef13851b5552efb2de7ed" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="a8f342c26cfb177843884a3dda34c31721510d251a5aabfaf640683841c3b026" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="1e514de53ed4f599b0fe7188fcec5a91bb7ce311be1fa80b1f952409dc3d6ef5" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="bc1ebfb5426d14e823d72ba84e0b3357e098f5bb37cb0c4cd8ca4a4d67c75d1e" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="75cf3c286ab113f2b62aaa23639d65bb0a4123a8de2d91fd7de09238683d5f33" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="0e719c0def455208299fe8f2e587d22a48ce7ef3c43bf54eed4b5d527100ed8e" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="886f4a30cf8d77959965439e1a2bcd33b270d96858bf44f3a2e982937f177d99" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="df42769d833596898eb50b9689f11d3c6c33d1dd7eb692df30d3663c19fa1aaf" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="4e190d0fa75b9142295d976cc4d1d00e8a285901f1d8608e6754c8c610d5823d" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="19ccf1d715fc2cee6325c5c2f1a38cacf5655a0485bc025f076d749637a1c623" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="7f3356b29709ab01fe926a829c91408aa5b7e630dd762b024fc29be40eca9048" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="812d06aaa33b33f4f8d7d88e7def5d02395efe119bb6150d5dfd16e9d5be003d" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="99189164f582b26727eff14c0d067bcf7c8d221c1b2180dac9e41bf072436058" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="ab0bc230b9b4f5ee8320fc1997a4e6497b10399a27f21da47a23065fe363b2d9" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="21e6a5d805449aa8728e23b12efc3011361d45520b240be8e3c322eb963cce62" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="dced545316c8e42d7d4ea791199fcdff48bf3595c57d19c091c9f4c5b1d709a1" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="4e5209f10764923ffdafbc694c0345b8365e117d917a69c6b311cde8cd6499f5" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="a28e9c1592cfaa2c3e77cadd69c3709299fa8e09a699574dbfddeaf832b2803e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="fb3291d2e028d77eca66a5c11fbfd511eaed1fa6a56807b3423e4aa1abf422dc" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="ffc967e68c37d14201522c7725fce9dd0cbce3b4fb60f73d24add7cd5c815406" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="0835cba28d0e1efe57daf7a2498db3301c514d7fdda812280aa1ddff88d55547" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="7787428300caafdc6a3c6585854906400151693f8d2d1a0c288e982fff81838b" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="7d0b3ba565c0dbfbcb45c07fceca88f7741d4f68a3c4f3fa5fbc124adf6206dc" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="bec7bac818d4fa35a56e6c78e4fe07cc59b4db651abfc668cce453ef2d8d4ce9" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="9ce8d80ff87ba55a937bcc8e546f305ce08e15093fce014cb8626b4b607da5cb" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="9f87a7ae956e66bb124b7d04e22531dfa3e8b67e56bebdf5793baa2e4fbc2418" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="b1cec6343a0e1468b9c770ddce0fdab0b3ec0311f64da1b0de17ac2dde0342e5" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="e19baba0eb199414ac7db9cfc4516f42982da2aa5d488da91f1cea7d378d8310" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="e38ba2579e2af99129d36ea1e3d764a4615f3a8a594882f73b34c478c98fedde" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="adc148e77d3b5f3ab1947c787889b565966379422525def961709a83b193117c" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="100.1"/>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
</package>
<package pkgid="017c4c042a50f3f2b2f48d74be859517bd4875a8a6f309423d385a055e783b83" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="103.1"/>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update
  * CVE-2018-10360 [bsc#1096984]
    + php-CVE-2018-10360.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php5-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535544000">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
</package>
<package pkgid="13e09d8696ace9adf5b9af34dd5050bd043971e483a5bc5b527e973b74bebdbb" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="106.2"/>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update
  * CVE-2018-10360 [bsc#1096984]
    + php-CVE-2018-10360.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php5-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535544000">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
</package>
<package pkgid="cf0f0e3a6237cf30ab06818ce6a858341afaa471e1f2a09652cdd209f489e39a" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="109.1"/>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update
  * CVE-2018-10360 [bsc#1096984]
    + php-CVE-2018-10360.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php5-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535544000">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542974400">- security update
  * imap_open script injection flaw, CVE-2018-19518 [bsc#1117107]
    + php-imap_open-script-injection.patch</changelog>
</package>
<package pkgid="9bbcc1b69d0d1b98e17c30daa8fc2928de12d77d476c8170d26743e984d53a9f" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="112.1"/>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update
  * CVE-2018-10360 [bsc#1096984]
    + php-CVE-2018-10360.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php5-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535544000">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542974400">- security update
  * imap_open script injection flaw, CVE-2018-19518 [bsc#1117107]
    + php-imap_open-script-injection.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549281600">- CVE-2019-6977 [bsc#1123354]
    + php-CVE-2019-6977.patch</changelog>
</package>
<package pkgid="bda78f48de275f9aab5073ed277298ae4f985ee7384c7193aca54c9010fdfb8a" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="82.1"/>
  <changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
</package>
<package pkgid="bd89fcba53261fe702e422c343e1a86d92d19eb04507c336a1d6fa67121e5ef2" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="85.1"/>
  <changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
</package>
<package pkgid="d35fcd2e5c5d000f44a06a4112fe8ea9564e4637a407886447c36c4b94aa7a81" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="88.1"/>
  <changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
</package>
<package pkgid="78dce08ae990b659dba2657559312d9a2d8b76d88188770817ba5d0374a203b5" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="91.2"/>
  <changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="760a548a6fe82b93a4cad834c407bd3eba6938743117a831cb2189ce2c03b916" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="94.1"/>
  <changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
</package>
<package pkgid="5043cb73ea714763a9d7efb687cba8531f4e528671cd61c99c16067cbecc21ed" name="apache2-mod_php5" arch="x86_64">
  <version epoch="0" ver="5.5.14" rel="97.1"/>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- security update:
  * CVE-2016-10712 [bsc#1080234]
    + php-CVE-2016-10712.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
</package>
<package pkgid="44d5038c221ab6ad48180f5c14ce411b9bc3623c8faa347f36fc72de57ca8d3f" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
  <changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
</package>
<package pkgid="de9e58a93e805952aab00cdeb093996bc6ff53fd8e50694bdf9048d27ec60798" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
</package>
<package pkgid="bf6973b4e1e1ec56053cd011018079d65ec07f919859a3a29ed7e4ae2809c48e" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
</package>
<package pkgid="e1a4ba2064796aae2b822a72ce963ba28b8897831fc4cd041557b789f6620d87" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="89be8621e01f0e3431471b15084a6e9cc4c470d758e17b559d0947ba6b7ef23a" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
</package>
<package pkgid="6ed86a3c6ed3f4d5c06e368ac0132908089d1a5007d73fb5799794b4c48d1797" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
</package>
<package pkgid="5848eafd0b7a486da2b1467c46df8734d3cdc4db89bbb355cb03271646e463e6" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="37.2"/>
  <changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
</package>
<package pkgid="78929938112ae5aa7345db3359dea317f5311c29d42971a62e29b6e6e34d1738" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="40.1"/>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="37a628b3cd4891fd679b87faa19085ca406a926ebbc1cde8252eedfa65ee1601" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="43.1"/>
  <changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="724770b16a2317997425880d7cdc3dd48a9c57a06efa5a2288a4507b1f00c03c" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="46.1"/>
  <changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  * php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  * php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457601">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
</package>
<package pkgid="3f4c7226d63ee4b9612efa95c4ae326afc17b2023ae0626379c364bf6b48d3a3" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="49.1"/>
  <changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  * php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  * php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457601">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
</package>
<package pkgid="9c6231c8ed7a354209ef10a761b586ed2bafdb4614293470e0f4385a48532db0" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="52.1"/>
  <changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
  <changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  * php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  * php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457601">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542974400">- security update
  * imap_open script injection flaw, CVE-2018-19518 [bsc#1117107]
    + php-imap_open-script-injection.patch</changelog>
</package>
<package pkgid="d2f2a775e0294fb153ccc4eb1122f22b645a86dfd5ebe703776d06369c103225" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.0.7" rel="55.1"/>
  <changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
  <changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5712 [bsc#1076220]
    + php-CVE-2018-5712.patch
  * CVE-2018-5711 [bsc#1076391]
    + php-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  [bsc#1076970]
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519992000">- security update:
  * CVE-2018-7584 [bsc#1083639]
    + php-CVE-2018-7584.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1524484800">- SplFileObject::getCsvControl() returns escape character
  [bsc#1090133]
  + php7-splfileobject-escape-character.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- security update
  * CVE-2018-10545 [bsc#1091367]
    + php-CVE-2018-10545.patch
  * CVE-2018-10547 [bsc#1091362]
    + php-CVE-2018-10547.patch
  * CVE-2018-10546 [bsc#1091363]
    + php-CVE-2018-10546.patch
  * CVE-2018-10548 [bsc#1091355]
    + php-CVE-2018-10548.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  * php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  * php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457601">- fix segfault in pcre extension, CVE-2017-9118 [bsc#1105466]
  + php-pcre-replace-impl-CWE-680.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1542974400">- security update
  * imap_open script injection flaw, CVE-2018-19518 [bsc#1117107]
    + php-imap_open-script-injection.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544529600">- security update
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + php-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123354]
    + php-CVE-2019-6977.patch</changelog>
</package>
<package pkgid="791bd823f2106c5281218b541319ff89bf0d8865043c1a7ac1cd28cf97f76147" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="de8722b4cda4298ceeab0e9f43e53945ea68c660f291a13f50e2c62bb14335b0" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="1b74251655fba43a2593a8662455b3cce0894bdb3a00aad160bf5da017364b97" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="7134b1c31358d23eac62eefcd7c947f285a6ca945342fc1acd50271cd5d79195" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="f22c230eb0efc8c7145a855e7ec76351c9c0f1a975f69eadbec0d9d0e32ded4d" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="c9abd6f13c98c58a55b7eb0aff47f01c9c5a57da180baa76bb16b6eeab4e5a3c" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="451e2d5c9bba0a9c2b4a1f3ff570acce3237d7f526b5b43623daab7ebba012fe" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="37eb2f6845ba0e46c78b7cbd3c77edfef882ffdc379f75fccc4b7e133ab19fa5" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="9b467870d3abce21cd825e4fb5d9b482f2684aa1b777a548888d3111a339bbc2" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="3644e3d8a1a860d034d3fddc95029f5065fb8c6a93d11f3bdd19b0b8f131d31d" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="2c3403ede309d8f6d60d176fad4ad1e1249a1de7f10ce301732439fb1bdcbf45" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="f7f58035d4072a5783998b45adf28b558b1904236aa293b00cb84dbbfa6fcb58" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="f27bfdcc44cf9fd9de84da495f8216317fc1025aabe65e023fdf9dcce6c6345a" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="96cc359a9d40dfeb305bc684a613955d9e039157cb88114fb3d536be220a4d89" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="3a8bbb7a5358f11edeb0c0e3af3a5e62f6e73d700134cc887bb18598755e4909" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="e531b554019db4403035743f2e25f22447f58b8f68819477cb8b35fc3e3e868d" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="ce5115a1f220c71b35968eb5785b95de8e673f3120aaf0ed6a5847a2357289af" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="13.1"/>
  <changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
</package>
<package pkgid="6db3035a7c2c17004fa1abacd6f29e6c4924c92834d76a831a9c6ce63f675b74" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="16.1"/>
  <changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
</package>
<package pkgid="77cc6d272d9baaee5cc1290dedca634e986ce922e8edc2440e2d25873c4e6047" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="19.1"/>
  <changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
</package>
<package pkgid="456905c496ce8ec0b555b5944cf0988a8cdcd3765a28138b1bb50f461be71e78" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="22.1"/>
  <changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
</package>
<package pkgid="c98e0607349f56e965e1ec9045fd4c9a5fb35447b3e44eafe5767e7299ff2932" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="25.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="4b5ae4da1c00d592830535cddcb10567853f675bf4aeeb4e31fe7f08d30a5959" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="28.1"/>
  <changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
</package>
<package pkgid="d947b24e9fa377d5d057aad0c78720dc85cc349235b786eedb2ad51c91d51e68" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="31.1"/>
  <changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="a1d35fec78807594f2bbb8aa57a0f7a631fafec45a7ab592bf909d3af502e859" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.23" rel="34.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
  <changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
  <changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
  <changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
  <changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715], CVE-2016-4975 [bsc#1104826]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
    + apache2-CVE-2016-8743-2.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
  <changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
  <changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
  <changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1507032000">- full path to a2{en,dis}mod in apache-22-24-upgrade [bsc#1042037]</changelog>
  <changelog author="pgajdos@suse.com" date="1509105600">- gensslcert: fall back to 'localhost' as hostname [bsc#1057406]</changelog>
  <changelog author="pgajdos@suse.com" date="1514376000">- update mod_http2 to 1.10.12 (from apache 2.4.29)
  fixes: CVE-2017-9789 [bsc#1048575], CVE-2017-7659 [bsc#1045160]
  + apache2-mod_http2-1.10.12.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522238400">- security update:
  * CVE-2018-1283 [bsc#1086814]
    + apache2-CVE-2018-1283.patch
  * CVE-2018-1301 [bsc#1086817]
    + apache2-CVE-2018-1301.patch
  * CVE-2018-1303 [bsc#1086813]
    + apache2-CVE-2018-1303.patch
  * CVE-2017-15715 [bsc#1086774]
    + apache2-CVE-2017-15715.patch
  * CVE-2018-1312 [bsc#1086775]
    + apache2-CVE-2018-1312.patch
  * CVE-2017-15710 [bsc#1086776]
    + apache2-CVE-2017-15710.patch
  * CVE-2018-1302 [bsc#1086820]
    + apache2-CVE-2018-1302.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-CVE-2018-1333.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538481600">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="jcejka@suse.com" date="1540468800">- Fix for SG#52358, bsc#1108989:
  * ap_reclaim_child_processes-Implement-terminate-immed.patch:
    Fix full scoreboard error.</changelog>
</package>
<package pkgid="9637e320c2d45c7303fffd0ce8cca854f024ab8aebbf6582e59cc06139f1cd49" name="apparmor" arch="src">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="0c661acb4f6f2b480ef7cdca10dfe0f8c6a40028590abcf96dca68bca64c3763" name="apparmor" arch="src">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="bb04bff112be1604b27a238c297bfb111b72dc006885b12f7ce47c900c1629c1" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="963125b8089729d253a6475ab48e0b0058c77af80e6e7188aefe954c5491843a" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="1aadbaa7ef3b008559cc6811e8f9af5998c574b71f23721edeb9f2647cf20cfe" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="dd210f38305c4134386955f0d696cc3752befb6f8a4a9e770d947eeeee328916" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="c6a1f0624ee94f5c4afbf5895f7e6867a130b07e2a8413fa51045b728ef469f3" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="1aa32088926d63956b3d8a2c86a4038fd3fef03ab0770cba4b90af52d80be10a" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="79a65667b908657d901b2524012a49ffbc9236246cca54ad34f8c2d26952fe78" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="000a4582295c4c38c7dee70850acda6c9e9ccc326f87baf7fa5b7e96f85b69c2" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="d9d02495899488b3af116f0f1bbe231c9bb981b07f843a22f54390908dfdcaf4" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="6538cedc6d99203dab2e7ee1a15e2d7614af816dcb47220e70eecfcd78f35fa2" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="d065690be8494574ebc2bcbeb3d56bff158bae97daa0195068a0bff57cc254b9" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="bc8ad9caf4bccaa7647971d56a7c14f368e0c1fa8afb1a2222554efda5fcba24" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="3bc1bd5535ba5b307f793edb3390282d61006eb40df95b1008abbea0d445a8a1" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.10.3" rel="16.1"/>
  <changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
  <changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
</package>
<package pkgid="ea9282528f7fa4844a71e1e6856f4fc025accb89536987e75707573357aa8105" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.10.4" rel="19.1"/>
  <changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
  <changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
  <changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
  <changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
  <changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
  <changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
  <changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
  <changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1537099200">- add sssd-mcpath.diff to adjust sssd paths in abstractions/nameservice</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- update to AppArmor 2.10.4
  - parser: make sure cache write failure doesn't cause load failure
  - parser: disable cache write on read-only filesystems
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - tools: fix writing alias and "link subset" rules
  - remove group restriction in aa-notify (boo#1100779)
  - ignore *.orig and *.rej files when loading profiles
  - several bugfixes
  - profile updates for samba (including boo#1092099), netstat, ntpd,
    syslog-ng, mlmmj-sub, postalias and dovecot
  - abstraction updates: audio, base, gnupg, kde, nameservice, nvidia,
    php, python, ssl_certs/keys (add letsencrypt and dehydrated paths), X
  - add vulkan, qtf and qt5-compose-cache abstractions
  - tunables: add @{uid} and @{uids} kernel var placeholders
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.10.4
    for the detailed upstream changelog
- remove upstreamed patches:
  - nameservice-libtirpc.diff
- add apparmor-nameservice-resolv-conf-link.patch - allow netconfig to
  write resolv.conf to /run with link to /etc (fate#325872, boo#1097370)
- add fix-parser-abi-crash.diff to fix a parser crash on invalid abi rules</changelog>
</package>
<package pkgid="2a5a36c673543451b6b1bb3e43c301053dfd2bfb9f79a18d0a8c02a23f9b4462" name="appengine" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>
</package>
<package pkgid="165afd25f36c8a2860bf90b8fb44a29b88fd35fe06c387935811ca9191dbdacf" name="aria2" arch="src">
  <version epoch="0" ver="1.24.0" rel="4.4.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 1.16.5:
  This release fixes the bug that invalid range error is thrown when
  requesting range starts from 0 in HTTP download.
- changes from 1.16.4:
  This release fixes the bug that active downloads are not saved with
  - -save-session-interval and the bug that aria2 hangs when size of
  download result exceeds its maximum. BitTorrent UDP tracker support
  was added. If the filename specified using --save-session ends with
  ".gz", aria2 stores the session file in gzipped form. The -i option
  can handle this gzipped file as well as plain text file.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1367841600">- Update to 1.17.0
  * Updated Russian manual
  * Updated Portuguese manual
  * Append --static to pkg-config arguments when ARIA2_STATIC=yes
  * Save options directly specified for download in --save-session
  * Save URI returned only from FileEntry::getRemainingUris()
  * Print linked 3rd party libraries with version in aria2c -v output
  * Use info level log for system trusted ca imports failure
  * Remove deprecated options: --enable-direct-io and --metalink-servers
  * Deprecate --enable-async-dns6
  * Fix uninitialized UDPTrackerClient::numWatchers_
  * Implement simple Happy Eyeballs for HTTP/FTP downloads
  * Parallel A and AAAA record lookups with c-ares</changelog>
  <changelog author="reddwarf@opensuse.org" date="1370606400">- Update to 1.17.1
  * Add code to detect rst2html.py or rst2html
  * Enable multicast loopback in BitTorrent local peer discovery
  * Enable TLS1.1 with gnutls build
  * Check zlib availability usin AC_CHECK_LIB
  * Treat response is completed if EOF is received before streamFilter
    completes
  * uitos: Fix off-by-one error bug
  * Add configure support for linking tcmalloc_minimal and/or jemalloc
  * Close GZipFiles in the d'tor
  * Add libaria2, C++ library interface to aria2 (not built)
  * Add missing check for sigaction
  * Fix cached data is not flushed when downloaded data is less than
    16KiB
  * LibUV: Implement LibuvEventPoll</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378900800">- Update to 1.18.0
  * Use AM subdir-objects
  * AM_SILENT_RULES([yes]) with backwards-compatiblity
  * Fix automake-1.14 am_aux_dir
  * Require external gettext for --enable-nls
  * Make AX_CXX_COMPILE_STDCXX_11 test for -stdlib=libc++ via std::shared_ptr
  * Make the configure check for C++11 compiler mandatory
  * Always build doc/manual-src
  * Implement a simple resource lock (threading)
  * Check for sphinx-build during configure
  * Add --with-disk-cache configure option
  * Change defaults: Enable 16M disk cache by default.
  * Always save control file if --force-save is given
  * Set log level DEBUG for unittests
  * Check that C++ compiler supports override keyword
  * Use AX_CXX_COMPILE_STDCXX_11 macro to detect C++0x/C++11 support in
    compiler
  * Require -std=c++11 and use std::shared_ptr instead of SharedHandle
  * Join URI on redirect
  * Send HAVE message to the peer which the piece is downloaded from
  * Improvements to --follow-torrent=false documentation.
  * SessionSerializer: Truly unique URIs
  * Make getOption RPC method return option for stopped downloads
  * SessionSerializer: Save spent URIs as well as remaining ones
- Remove support for end of life openSUSE versions (&lt;= 12.1)</changelog>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to 1.18.1
  * LibsslTLSContext: Remove weak cipher suite
  * AppleTLS: Enable --certificate
  * util::percentEncodeMini: Fix regression bug removed unsignedness
  * Log exception; throw error if loading private key and/or certificate
    failed
  * Provide internal ARC4 implementation
  * Internal implementation of DHKeyExchange
  * PKCS12 support in --certificate and --rpc-certificate options.
  * Add --disable-ssl configure option
  * Add internal md5 and sha1 message digests
  * Fix AppleMessageDigestImpl use with large data
  * Set old cookie's creation-time to new cookie on replacement
  * Fix link error with Android NDK r9</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388836800">- update to 1.18.2:
  * fix crash when metaurl contains unsupported URI or text
  * fix bad fork() return value handling
  * use some colors in progress reports (where available)
  * limit number of opened file globally with --bt-max-open-files option
  * don't fail multiple concurrent dl same file if auto-file-renaming is
    enabled
- add /etc/ssl/ca-bundle.pem as the CA bundle for aria2, and add a
  recommends for ca-certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388923200">- update to 1.18.3:
  * fix crash if unpause failed before assigning BtProgressInfoFile object
  * fix bug that numOpenFile_ is not reduced when MultiDiskAdaptor is deleted;
    this bug caused assertion error in RequestGroupMan::ensureMaxOpenFileLimit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to aria2 1.18.5
  * Ignore error when setting DSCP value
- Update to aria2 1.18.4
  * Added support for RPC channel encryption in aria2rpc
  * Add aria2.saveSession RPC method
  * Add numStoppedTotal key to aria2.getGlobalStat() RPC method response
  * Better handling of 30x HTTP status codes
  * Implement new RPC authorization using --rpc-secret option
  * Add --enable-color option to enable/disable terminal color output
  * Add DSCP support
  * gnutls: Don't fail handshake if returned error is not fatal
  * Add workaround GnuTLS bug with OCSP status extension and
    non-blocking socket
  * Make GnuTLS log level dependent on the aria2 ones
- Remove ca-certificates requirement. It conflicted with the same recommendation
- Stop specifying a CA bundle. Let the SSL library use the "system" one.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418817600">- Update to version 1.18.8
  + WinTLS: Fix abrupt connection closing and closing in general.
  + Fixes GH-277
  + LibsslTLSSession: Treat 0 from readData as EOF
  + Enable dynamicbase and nxcompat in Windows binaries
  + Fix crash in OpenedFileCounter::ensureMaxOpenFileLimit()
  + The crash happens if PieceStorage and/or DiskAdaptor are not
    initialized in one of active RequestGroups.
  + mingw32: Fix bug that aria2 does not read piped stdin
  + Fix std::length_error when no_proxy is used
  + This is regression introduced in 8cada497.
  + Try to set sane limits for RLIMIT_NO_FILE
    E.g. on OSX the default is 256, which isn't exactly compatible
    with torrent downloads.
    Closes GH-257
  + Delay auth failures instead of PBKDF2
    Closes GH-256
- Split out language files and recommend the subpackage</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429012800">- update to version 1.18.10:
  * Add encoding specifier to Russian man page
    Fixes GH-341
  * Mingw: Use _wgetenv to get user's home directory
    Fixes GH-342
  * Handle linux getrandom returning EINTR on interrupts/signals
    Fixes GH-336
- additional changes from 1.18.9:
  * Support HTTP date ending "+0000" as well as "GMT".
    Closes GH-330
  * Revise getRandom facilities
    Closes GH-320
  * Added debug log of all Metalink URLs with final priorities
  * Use gcc-4.9 and android-16 API level for android build
  * Add --bt-force-encryption option
  * TLS: Fix memory leak with OpenSSL
  * Warn about insecure SSL connections.
    Fixed GH-313
  * Add --min-tls-version option
  * LibsslTLSContext: Disable SSLv3 and enable ECDHE cipher suites
  * Add Dockerfile.mingw
  * Fix crash when JSON batch response vector is empty
  * Fix doc: Wrong rpc secret token prefix
  * Add --bt-detach-seed-only option
  * mingw: Use MoveFileExW for better atomic move
  * Work around libintl's vprintf macro messing with
    OutputFile::vprintf
  * Fix crash on OSX when proxy is used
    See GH-275
  * Support Adler32 checksum</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add dependency on libuv for current Tumbleweed
- Remove _DATE_ and _TIME_</changelog>
  <changelog author="mpluskal@suse.com" date="1438603200">- Update to 1.19.0
  * android: Build and link with zlib Previously, we linked with
    zlib shipped with NDK, but it seems this is not part of NDK
    API, and thus could break our app.
  * Allow netrc-path to be specified in the config file Adds
  - -netrc-path to override default .netrc search path.
  * Exit with 32 status code if checksum verification failed
  * Add SFTP support using libssh2 aria2 can now download files
    via sftp protocol: aria2c sftp://.... --ssh-host-key-md option
    is added to specify expected server's fingerprint.
  * Added Dockerfile to cross complile aria2 for RaspberryPI (armhf)
  * multiple interface support for link aggregation Adds
  - -multiple-interface option.  Patch from Sarim Khan
  * Run on-bt-download-complete command when -V reports download
    finished
  * Use dedicated DiskWriter in MultiDiskFileAllocationIterator
    We have to use dedicated DiskWriter instead of
    (*entryItr_)-&gt;getDiskWriter().  This is because
    SingleFileAllocationIterator cannot reopen file if file is
    closed by OpenedFileCounter.
  * Fix getrandom for system with libc not including errno or
    systems not supporting ENOSYS in the first place.
  * Don't send back rpc-secret option value in
    aria2.getGlobalOption RPC method
  * Make libuv default off
  * Fixed slow RPC response
  * Fix getrandom interface detection
- Enable ssh suport using libssh2</changelog>
  <changelog author="mpluskal@suse.com" date="1448107200">- Update to 1.19.2
  * Fix bug that progress summary is not shown timely
- Changes for 1.19.1
  * Update README.android
  * Providing some workarounds about CA certificates and standard
  output
  * Return 400 HTTP status code if exception was caught while
  executing RPC method
  * Fix on-download-error is executed even if download succeeded
  * Increase --select-file upper bound to 1m for torrent
  containing lots of files
  * Fix busy loop with --dry-run and 4xx response for URI listed
  in metalink
  * Make LibuvEventPoll compatible with the latest libuv again
  * gnutls: Allow SIGN-RSA-SHA1 for compatibility reason
  * Make script compatible with both Python 2 and 3
  * Make config and cache files conform to XDG
  * ftp, sftp: Fix heap-after-free bug on exception
  * ftp: Fix timeout when reusing FTP connection
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="a32b1da524d6bcf5194a15af81f24aabd28e8fb55721cadd9eb4bc3760513486" name="aria2" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="4.4.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 1.16.5:
  This release fixes the bug that invalid range error is thrown when
  requesting range starts from 0 in HTTP download.
- changes from 1.16.4:
  This release fixes the bug that active downloads are not saved with
  - -save-session-interval and the bug that aria2 hangs when size of
  download result exceeds its maximum. BitTorrent UDP tracker support
  was added. If the filename specified using --save-session ends with
  ".gz", aria2 stores the session file in gzipped form. The -i option
  can handle this gzipped file as well as plain text file.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1367841600">- Update to 1.17.0
  * Updated Russian manual
  * Updated Portuguese manual
  * Append --static to pkg-config arguments when ARIA2_STATIC=yes
  * Save options directly specified for download in --save-session
  * Save URI returned only from FileEntry::getRemainingUris()
  * Print linked 3rd party libraries with version in aria2c -v output
  * Use info level log for system trusted ca imports failure
  * Remove deprecated options: --enable-direct-io and --metalink-servers
  * Deprecate --enable-async-dns6
  * Fix uninitialized UDPTrackerClient::numWatchers_
  * Implement simple Happy Eyeballs for HTTP/FTP downloads
  * Parallel A and AAAA record lookups with c-ares</changelog>
  <changelog author="reddwarf@opensuse.org" date="1370606400">- Update to 1.17.1
  * Add code to detect rst2html.py or rst2html
  * Enable multicast loopback in BitTorrent local peer discovery
  * Enable TLS1.1 with gnutls build
  * Check zlib availability usin AC_CHECK_LIB
  * Treat response is completed if EOF is received before streamFilter
    completes
  * uitos: Fix off-by-one error bug
  * Add configure support for linking tcmalloc_minimal and/or jemalloc
  * Close GZipFiles in the d'tor
  * Add libaria2, C++ library interface to aria2 (not built)
  * Add missing check for sigaction
  * Fix cached data is not flushed when downloaded data is less than
    16KiB
  * LibUV: Implement LibuvEventPoll</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378900800">- Update to 1.18.0
  * Use AM subdir-objects
  * AM_SILENT_RULES([yes]) with backwards-compatiblity
  * Fix automake-1.14 am_aux_dir
  * Require external gettext for --enable-nls
  * Make AX_CXX_COMPILE_STDCXX_11 test for -stdlib=libc++ via std::shared_ptr
  * Make the configure check for C++11 compiler mandatory
  * Always build doc/manual-src
  * Implement a simple resource lock (threading)
  * Check for sphinx-build during configure
  * Add --with-disk-cache configure option
  * Change defaults: Enable 16M disk cache by default.
  * Always save control file if --force-save is given
  * Set log level DEBUG for unittests
  * Check that C++ compiler supports override keyword
  * Use AX_CXX_COMPILE_STDCXX_11 macro to detect C++0x/C++11 support in
    compiler
  * Require -std=c++11 and use std::shared_ptr instead of SharedHandle
  * Join URI on redirect
  * Send HAVE message to the peer which the piece is downloaded from
  * Improvements to --follow-torrent=false documentation.
  * SessionSerializer: Truly unique URIs
  * Make getOption RPC method return option for stopped downloads
  * SessionSerializer: Save spent URIs as well as remaining ones
- Remove support for end of life openSUSE versions (&lt;= 12.1)</changelog>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to 1.18.1
  * LibsslTLSContext: Remove weak cipher suite
  * AppleTLS: Enable --certificate
  * util::percentEncodeMini: Fix regression bug removed unsignedness
  * Log exception; throw error if loading private key and/or certificate
    failed
  * Provide internal ARC4 implementation
  * Internal implementation of DHKeyExchange
  * PKCS12 support in --certificate and --rpc-certificate options.
  * Add --disable-ssl configure option
  * Add internal md5 and sha1 message digests
  * Fix AppleMessageDigestImpl use with large data
  * Set old cookie's creation-time to new cookie on replacement
  * Fix link error with Android NDK r9</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388836800">- update to 1.18.2:
  * fix crash when metaurl contains unsupported URI or text
  * fix bad fork() return value handling
  * use some colors in progress reports (where available)
  * limit number of opened file globally with --bt-max-open-files option
  * don't fail multiple concurrent dl same file if auto-file-renaming is
    enabled
- add /etc/ssl/ca-bundle.pem as the CA bundle for aria2, and add a
  recommends for ca-certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388923200">- update to 1.18.3:
  * fix crash if unpause failed before assigning BtProgressInfoFile object
  * fix bug that numOpenFile_ is not reduced when MultiDiskAdaptor is deleted;
    this bug caused assertion error in RequestGroupMan::ensureMaxOpenFileLimit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to aria2 1.18.5
  * Ignore error when setting DSCP value
- Update to aria2 1.18.4
  * Added support for RPC channel encryption in aria2rpc
  * Add aria2.saveSession RPC method
  * Add numStoppedTotal key to aria2.getGlobalStat() RPC method response
  * Better handling of 30x HTTP status codes
  * Implement new RPC authorization using --rpc-secret option
  * Add --enable-color option to enable/disable terminal color output
  * Add DSCP support
  * gnutls: Don't fail handshake if returned error is not fatal
  * Add workaround GnuTLS bug with OCSP status extension and
    non-blocking socket
  * Make GnuTLS log level dependent on the aria2 ones
- Remove ca-certificates requirement. It conflicted with the same recommendation
- Stop specifying a CA bundle. Let the SSL library use the "system" one.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418817600">- Update to version 1.18.8
  + WinTLS: Fix abrupt connection closing and closing in general.
  + Fixes GH-277
  + LibsslTLSSession: Treat 0 from readData as EOF
  + Enable dynamicbase and nxcompat in Windows binaries
  + Fix crash in OpenedFileCounter::ensureMaxOpenFileLimit()
  + The crash happens if PieceStorage and/or DiskAdaptor are not
    initialized in one of active RequestGroups.
  + mingw32: Fix bug that aria2 does not read piped stdin
  + Fix std::length_error when no_proxy is used
  + This is regression introduced in 8cada497.
  + Try to set sane limits for RLIMIT_NO_FILE
    E.g. on OSX the default is 256, which isn't exactly compatible
    with torrent downloads.
    Closes GH-257
  + Delay auth failures instead of PBKDF2
    Closes GH-256
- Split out language files and recommend the subpackage</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429012800">- update to version 1.18.10:
  * Add encoding specifier to Russian man page
    Fixes GH-341
  * Mingw: Use _wgetenv to get user's home directory
    Fixes GH-342
  * Handle linux getrandom returning EINTR on interrupts/signals
    Fixes GH-336
- additional changes from 1.18.9:
  * Support HTTP date ending "+0000" as well as "GMT".
    Closes GH-330
  * Revise getRandom facilities
    Closes GH-320
  * Added debug log of all Metalink URLs with final priorities
  * Use gcc-4.9 and android-16 API level for android build
  * Add --bt-force-encryption option
  * TLS: Fix memory leak with OpenSSL
  * Warn about insecure SSL connections.
    Fixed GH-313
  * Add --min-tls-version option
  * LibsslTLSContext: Disable SSLv3 and enable ECDHE cipher suites
  * Add Dockerfile.mingw
  * Fix crash when JSON batch response vector is empty
  * Fix doc: Wrong rpc secret token prefix
  * Add --bt-detach-seed-only option
  * mingw: Use MoveFileExW for better atomic move
  * Work around libintl's vprintf macro messing with
    OutputFile::vprintf
  * Fix crash on OSX when proxy is used
    See GH-275
  * Support Adler32 checksum</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add dependency on libuv for current Tumbleweed
- Remove _DATE_ and _TIME_</changelog>
  <changelog author="mpluskal@suse.com" date="1438603200">- Update to 1.19.0
  * android: Build and link with zlib Previously, we linked with
    zlib shipped with NDK, but it seems this is not part of NDK
    API, and thus could break our app.
  * Allow netrc-path to be specified in the config file Adds
  - -netrc-path to override default .netrc search path.
  * Exit with 32 status code if checksum verification failed
  * Add SFTP support using libssh2 aria2 can now download files
    via sftp protocol: aria2c sftp://.... --ssh-host-key-md option
    is added to specify expected server's fingerprint.
  * Added Dockerfile to cross complile aria2 for RaspberryPI (armhf)
  * multiple interface support for link aggregation Adds
  - -multiple-interface option.  Patch from Sarim Khan
  * Run on-bt-download-complete command when -V reports download
    finished
  * Use dedicated DiskWriter in MultiDiskFileAllocationIterator
    We have to use dedicated DiskWriter instead of
    (*entryItr_)-&gt;getDiskWriter().  This is because
    SingleFileAllocationIterator cannot reopen file if file is
    closed by OpenedFileCounter.
  * Fix getrandom for system with libc not including errno or
    systems not supporting ENOSYS in the first place.
  * Don't send back rpc-secret option value in
    aria2.getGlobalOption RPC method
  * Make libuv default off
  * Fixed slow RPC response
  * Fix getrandom interface detection
- Enable ssh suport using libssh2</changelog>
  <changelog author="mpluskal@suse.com" date="1448107200">- Update to 1.19.2
  * Fix bug that progress summary is not shown timely
- Changes for 1.19.1
  * Update README.android
  * Providing some workarounds about CA certificates and standard
  output
  * Return 400 HTTP status code if exception was caught while
  executing RPC method
  * Fix on-download-error is executed even if download succeeded
  * Increase --select-file upper bound to 1m for torrent
  containing lots of files
  * Fix busy loop with --dry-run and 4xx response for URI listed
  in metalink
  * Make LibuvEventPoll compatible with the latest libuv again
  * gnutls: Allow SIGN-RSA-SHA1 for compatibility reason
  * Make script compatible with both Python 2 and 3
  * Make config and cache files conform to XDG
  * ftp, sftp: Fix heap-after-free bug on exception
  * ftp: Fix timeout when reusing FTP connection
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="027ce5e7b46d9d911f1ac4db7b320bee5f4f92bc6d85508b653973ba28d44453" name="aria2-devel" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="4.4.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 1.16.5:
  This release fixes the bug that invalid range error is thrown when
  requesting range starts from 0 in HTTP download.
- changes from 1.16.4:
  This release fixes the bug that active downloads are not saved with
  - -save-session-interval and the bug that aria2 hangs when size of
  download result exceeds its maximum. BitTorrent UDP tracker support
  was added. If the filename specified using --save-session ends with
  ".gz", aria2 stores the session file in gzipped form. The -i option
  can handle this gzipped file as well as plain text file.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1367841600">- Update to 1.17.0
  * Updated Russian manual
  * Updated Portuguese manual
  * Append --static to pkg-config arguments when ARIA2_STATIC=yes
  * Save options directly specified for download in --save-session
  * Save URI returned only from FileEntry::getRemainingUris()
  * Print linked 3rd party libraries with version in aria2c -v output
  * Use info level log for system trusted ca imports failure
  * Remove deprecated options: --enable-direct-io and --metalink-servers
  * Deprecate --enable-async-dns6
  * Fix uninitialized UDPTrackerClient::numWatchers_
  * Implement simple Happy Eyeballs for HTTP/FTP downloads
  * Parallel A and AAAA record lookups with c-ares</changelog>
  <changelog author="reddwarf@opensuse.org" date="1370606400">- Update to 1.17.1
  * Add code to detect rst2html.py or rst2html
  * Enable multicast loopback in BitTorrent local peer discovery
  * Enable TLS1.1 with gnutls build
  * Check zlib availability usin AC_CHECK_LIB
  * Treat response is completed if EOF is received before streamFilter
    completes
  * uitos: Fix off-by-one error bug
  * Add configure support for linking tcmalloc_minimal and/or jemalloc
  * Close GZipFiles in the d'tor
  * Add libaria2, C++ library interface to aria2 (not built)
  * Add missing check for sigaction
  * Fix cached data is not flushed when downloaded data is less than
    16KiB
  * LibUV: Implement LibuvEventPoll</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378900800">- Update to 1.18.0
  * Use AM subdir-objects
  * AM_SILENT_RULES([yes]) with backwards-compatiblity
  * Fix automake-1.14 am_aux_dir
  * Require external gettext for --enable-nls
  * Make AX_CXX_COMPILE_STDCXX_11 test for -stdlib=libc++ via std::shared_ptr
  * Make the configure check for C++11 compiler mandatory
  * Always build doc/manual-src
  * Implement a simple resource lock (threading)
  * Check for sphinx-build during configure
  * Add --with-disk-cache configure option
  * Change defaults: Enable 16M disk cache by default.
  * Always save control file if --force-save is given
  * Set log level DEBUG for unittests
  * Check that C++ compiler supports override keyword
  * Use AX_CXX_COMPILE_STDCXX_11 macro to detect C++0x/C++11 support in
    compiler
  * Require -std=c++11 and use std::shared_ptr instead of SharedHandle
  * Join URI on redirect
  * Send HAVE message to the peer which the piece is downloaded from
  * Improvements to --follow-torrent=false documentation.
  * SessionSerializer: Truly unique URIs
  * Make getOption RPC method return option for stopped downloads
  * SessionSerializer: Save spent URIs as well as remaining ones
- Remove support for end of life openSUSE versions (&lt;= 12.1)</changelog>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to 1.18.1
  * LibsslTLSContext: Remove weak cipher suite
  * AppleTLS: Enable --certificate
  * util::percentEncodeMini: Fix regression bug removed unsignedness
  * Log exception; throw error if loading private key and/or certificate
    failed
  * Provide internal ARC4 implementation
  * Internal implementation of DHKeyExchange
  * PKCS12 support in --certificate and --rpc-certificate options.
  * Add --disable-ssl configure option
  * Add internal md5 and sha1 message digests
  * Fix AppleMessageDigestImpl use with large data
  * Set old cookie's creation-time to new cookie on replacement
  * Fix link error with Android NDK r9</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388836800">- update to 1.18.2:
  * fix crash when metaurl contains unsupported URI or text
  * fix bad fork() return value handling
  * use some colors in progress reports (where available)
  * limit number of opened file globally with --bt-max-open-files option
  * don't fail multiple concurrent dl same file if auto-file-renaming is
    enabled
- add /etc/ssl/ca-bundle.pem as the CA bundle for aria2, and add a
  recommends for ca-certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388923200">- update to 1.18.3:
  * fix crash if unpause failed before assigning BtProgressInfoFile object
  * fix bug that numOpenFile_ is not reduced when MultiDiskAdaptor is deleted;
    this bug caused assertion error in RequestGroupMan::ensureMaxOpenFileLimit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to aria2 1.18.5
  * Ignore error when setting DSCP value
- Update to aria2 1.18.4
  * Added support for RPC channel encryption in aria2rpc
  * Add aria2.saveSession RPC method
  * Add numStoppedTotal key to aria2.getGlobalStat() RPC method response
  * Better handling of 30x HTTP status codes
  * Implement new RPC authorization using --rpc-secret option
  * Add --enable-color option to enable/disable terminal color output
  * Add DSCP support
  * gnutls: Don't fail handshake if returned error is not fatal
  * Add workaround GnuTLS bug with OCSP status extension and
    non-blocking socket
  * Make GnuTLS log level dependent on the aria2 ones
- Remove ca-certificates requirement. It conflicted with the same recommendation
- Stop specifying a CA bundle. Let the SSL library use the "system" one.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418817600">- Update to version 1.18.8
  + WinTLS: Fix abrupt connection closing and closing in general.
  + Fixes GH-277
  + LibsslTLSSession: Treat 0 from readData as EOF
  + Enable dynamicbase and nxcompat in Windows binaries
  + Fix crash in OpenedFileCounter::ensureMaxOpenFileLimit()
  + The crash happens if PieceStorage and/or DiskAdaptor are not
    initialized in one of active RequestGroups.
  + mingw32: Fix bug that aria2 does not read piped stdin
  + Fix std::length_error when no_proxy is used
  + This is regression introduced in 8cada497.
  + Try to set sane limits for RLIMIT_NO_FILE
    E.g. on OSX the default is 256, which isn't exactly compatible
    with torrent downloads.
    Closes GH-257
  + Delay auth failures instead of PBKDF2
    Closes GH-256
- Split out language files and recommend the subpackage</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429012800">- update to version 1.18.10:
  * Add encoding specifier to Russian man page
    Fixes GH-341
  * Mingw: Use _wgetenv to get user's home directory
    Fixes GH-342
  * Handle linux getrandom returning EINTR on interrupts/signals
    Fixes GH-336
- additional changes from 1.18.9:
  * Support HTTP date ending "+0000" as well as "GMT".
    Closes GH-330
  * Revise getRandom facilities
    Closes GH-320
  * Added debug log of all Metalink URLs with final priorities
  * Use gcc-4.9 and android-16 API level for android build
  * Add --bt-force-encryption option
  * TLS: Fix memory leak with OpenSSL
  * Warn about insecure SSL connections.
    Fixed GH-313
  * Add --min-tls-version option
  * LibsslTLSContext: Disable SSLv3 and enable ECDHE cipher suites
  * Add Dockerfile.mingw
  * Fix crash when JSON batch response vector is empty
  * Fix doc: Wrong rpc secret token prefix
  * Add --bt-detach-seed-only option
  * mingw: Use MoveFileExW for better atomic move
  * Work around libintl's vprintf macro messing with
    OutputFile::vprintf
  * Fix crash on OSX when proxy is used
    See GH-275
  * Support Adler32 checksum</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add dependency on libuv for current Tumbleweed
- Remove _DATE_ and _TIME_</changelog>
  <changelog author="mpluskal@suse.com" date="1438603200">- Update to 1.19.0
  * android: Build and link with zlib Previously, we linked with
    zlib shipped with NDK, but it seems this is not part of NDK
    API, and thus could break our app.
  * Allow netrc-path to be specified in the config file Adds
  - -netrc-path to override default .netrc search path.
  * Exit with 32 status code if checksum verification failed
  * Add SFTP support using libssh2 aria2 can now download files
    via sftp protocol: aria2c sftp://.... --ssh-host-key-md option
    is added to specify expected server's fingerprint.
  * Added Dockerfile to cross complile aria2 for RaspberryPI (armhf)
  * multiple interface support for link aggregation Adds
  - -multiple-interface option.  Patch from Sarim Khan
  * Run on-bt-download-complete command when -V reports download
    finished
  * Use dedicated DiskWriter in MultiDiskFileAllocationIterator
    We have to use dedicated DiskWriter instead of
    (*entryItr_)-&gt;getDiskWriter().  This is because
    SingleFileAllocationIterator cannot reopen file if file is
    closed by OpenedFileCounter.
  * Fix getrandom for system with libc not including errno or
    systems not supporting ENOSYS in the first place.
  * Don't send back rpc-secret option value in
    aria2.getGlobalOption RPC method
  * Make libuv default off
  * Fixed slow RPC response
  * Fix getrandom interface detection
- Enable ssh suport using libssh2</changelog>
  <changelog author="mpluskal@suse.com" date="1448107200">- Update to 1.19.2
  * Fix bug that progress summary is not shown timely
- Changes for 1.19.1
  * Update README.android
  * Providing some workarounds about CA certificates and standard
  output
  * Return 400 HTTP status code if exception was caught while
  executing RPC method
  * Fix on-download-error is executed even if download succeeded
  * Increase --select-file upper bound to 1m for torrent
  containing lots of files
  * Fix busy loop with --dry-run and 4xx response for URI listed
  in metalink
  * Make LibuvEventPoll compatible with the latest libuv again
  * gnutls: Allow SIGN-RSA-SHA1 for compatibility reason
  * Make script compatible with both Python 2 and 3
  * Make config and cache files conform to XDG
  * ftp, sftp: Fix heap-after-free bug on exception
  * ftp: Fix timeout when reusing FTP connection
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="188f6934914d54be0e7fe0dfbd01d81e5c8a04ed7a3cae51492bd810345cd50d" name="aria2-lang" arch="noarch">
  <version epoch="0" ver="1.24.0" rel="4.4.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 1.16.5:
  This release fixes the bug that invalid range error is thrown when
  requesting range starts from 0 in HTTP download.
- changes from 1.16.4:
  This release fixes the bug that active downloads are not saved with
  - -save-session-interval and the bug that aria2 hangs when size of
  download result exceeds its maximum. BitTorrent UDP tracker support
  was added. If the filename specified using --save-session ends with
  ".gz", aria2 stores the session file in gzipped form. The -i option
  can handle this gzipped file as well as plain text file.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1367841600">- Update to 1.17.0
  * Updated Russian manual
  * Updated Portuguese manual
  * Append --static to pkg-config arguments when ARIA2_STATIC=yes
  * Save options directly specified for download in --save-session
  * Save URI returned only from FileEntry::getRemainingUris()
  * Print linked 3rd party libraries with version in aria2c -v output
  * Use info level log for system trusted ca imports failure
  * Remove deprecated options: --enable-direct-io and --metalink-servers
  * Deprecate --enable-async-dns6
  * Fix uninitialized UDPTrackerClient::numWatchers_
  * Implement simple Happy Eyeballs for HTTP/FTP downloads
  * Parallel A and AAAA record lookups with c-ares</changelog>
  <changelog author="reddwarf@opensuse.org" date="1370606400">- Update to 1.17.1
  * Add code to detect rst2html.py or rst2html
  * Enable multicast loopback in BitTorrent local peer discovery
  * Enable TLS1.1 with gnutls build
  * Check zlib availability usin AC_CHECK_LIB
  * Treat response is completed if EOF is received before streamFilter
    completes
  * uitos: Fix off-by-one error bug
  * Add configure support for linking tcmalloc_minimal and/or jemalloc
  * Close GZipFiles in the d'tor
  * Add libaria2, C++ library interface to aria2 (not built)
  * Add missing check for sigaction
  * Fix cached data is not flushed when downloaded data is less than
    16KiB
  * LibUV: Implement LibuvEventPoll</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378900800">- Update to 1.18.0
  * Use AM subdir-objects
  * AM_SILENT_RULES([yes]) with backwards-compatiblity
  * Fix automake-1.14 am_aux_dir
  * Require external gettext for --enable-nls
  * Make AX_CXX_COMPILE_STDCXX_11 test for -stdlib=libc++ via std::shared_ptr
  * Make the configure check for C++11 compiler mandatory
  * Always build doc/manual-src
  * Implement a simple resource lock (threading)
  * Check for sphinx-build during configure
  * Add --with-disk-cache configure option
  * Change defaults: Enable 16M disk cache by default.
  * Always save control file if --force-save is given
  * Set log level DEBUG for unittests
  * Check that C++ compiler supports override keyword
  * Use AX_CXX_COMPILE_STDCXX_11 macro to detect C++0x/C++11 support in
    compiler
  * Require -std=c++11 and use std::shared_ptr instead of SharedHandle
  * Join URI on redirect
  * Send HAVE message to the peer which the piece is downloaded from
  * Improvements to --follow-torrent=false documentation.
  * SessionSerializer: Truly unique URIs
  * Make getOption RPC method return option for stopped downloads
  * SessionSerializer: Save spent URIs as well as remaining ones
- Remove support for end of life openSUSE versions (&lt;= 12.1)</changelog>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to 1.18.1
  * LibsslTLSContext: Remove weak cipher suite
  * AppleTLS: Enable --certificate
  * util::percentEncodeMini: Fix regression bug removed unsignedness
  * Log exception; throw error if loading private key and/or certificate
    failed
  * Provide internal ARC4 implementation
  * Internal implementation of DHKeyExchange
  * PKCS12 support in --certificate and --rpc-certificate options.
  * Add --disable-ssl configure option
  * Add internal md5 and sha1 message digests
  * Fix AppleMessageDigestImpl use with large data
  * Set old cookie's creation-time to new cookie on replacement
  * Fix link error with Android NDK r9</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388836800">- update to 1.18.2:
  * fix crash when metaurl contains unsupported URI or text
  * fix bad fork() return value handling
  * use some colors in progress reports (where available)
  * limit number of opened file globally with --bt-max-open-files option
  * don't fail multiple concurrent dl same file if auto-file-renaming is
    enabled
- add /etc/ssl/ca-bundle.pem as the CA bundle for aria2, and add a
  recommends for ca-certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1388923200">- update to 1.18.3:
  * fix crash if unpause failed before assigning BtProgressInfoFile object
  * fix bug that numOpenFile_ is not reduced when MultiDiskAdaptor is deleted;
    this bug caused assertion error in RequestGroupMan::ensureMaxOpenFileLimit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to aria2 1.18.5
  * Ignore error when setting DSCP value
- Update to aria2 1.18.4
  * Added support for RPC channel encryption in aria2rpc
  * Add aria2.saveSession RPC method
  * Add numStoppedTotal key to aria2.getGlobalStat() RPC method response
  * Better handling of 30x HTTP status codes
  * Implement new RPC authorization using --rpc-secret option
  * Add --enable-color option to enable/disable terminal color output
  * Add DSCP support
  * gnutls: Don't fail handshake if returned error is not fatal
  * Add workaround GnuTLS bug with OCSP status extension and
    non-blocking socket
  * Make GnuTLS log level dependent on the aria2 ones
- Remove ca-certificates requirement. It conflicted with the same recommendation
- Stop specifying a CA bundle. Let the SSL library use the "system" one.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418817600">- Update to version 1.18.8
  + WinTLS: Fix abrupt connection closing and closing in general.
  + Fixes GH-277
  + LibsslTLSSession: Treat 0 from readData as EOF
  + Enable dynamicbase and nxcompat in Windows binaries
  + Fix crash in OpenedFileCounter::ensureMaxOpenFileLimit()
  + The crash happens if PieceStorage and/or DiskAdaptor are not
    initialized in one of active RequestGroups.
  + mingw32: Fix bug that aria2 does not read piped stdin
  + Fix std::length_error when no_proxy is used
  + This is regression introduced in 8cada497.
  + Try to set sane limits for RLIMIT_NO_FILE
    E.g. on OSX the default is 256, which isn't exactly compatible
    with torrent downloads.
    Closes GH-257
  + Delay auth failures instead of PBKDF2
    Closes GH-256
- Split out language files and recommend the subpackage</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429012800">- update to version 1.18.10:
  * Add encoding specifier to Russian man page
    Fixes GH-341
  * Mingw: Use _wgetenv to get user's home directory
    Fixes GH-342
  * Handle linux getrandom returning EINTR on interrupts/signals
    Fixes GH-336
- additional changes from 1.18.9:
  * Support HTTP date ending "+0000" as well as "GMT".
    Closes GH-330
  * Revise getRandom facilities
    Closes GH-320
  * Added debug log of all Metalink URLs with final priorities
  * Use gcc-4.9 and android-16 API level for android build
  * Add --bt-force-encryption option
  * TLS: Fix memory leak with OpenSSL
  * Warn about insecure SSL connections.
    Fixed GH-313
  * Add --min-tls-version option
  * LibsslTLSContext: Disable SSLv3 and enable ECDHE cipher suites
  * Add Dockerfile.mingw
  * Fix crash when JSON batch response vector is empty
  * Fix doc: Wrong rpc secret token prefix
  * Add --bt-detach-seed-only option
  * mingw: Use MoveFileExW for better atomic move
  * Work around libintl's vprintf macro messing with
    OutputFile::vprintf
  * Fix crash on OSX when proxy is used
    See GH-275
  * Support Adler32 checksum</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add dependency on libuv for current Tumbleweed
- Remove _DATE_ and _TIME_</changelog>
  <changelog author="mpluskal@suse.com" date="1438603200">- Update to 1.19.0
  * android: Build and link with zlib Previously, we linked with
    zlib shipped with NDK, but it seems this is not part of NDK
    API, and thus could break our app.
  * Allow netrc-path to be specified in the config file Adds
  - -netrc-path to override default .netrc search path.
  * Exit with 32 status code if checksum verification failed
  * Add SFTP support using libssh2 aria2 can now download files
    via sftp protocol: aria2c sftp://.... --ssh-host-key-md option
    is added to specify expected server's fingerprint.
  * Added Dockerfile to cross complile aria2 for RaspberryPI (armhf)
  * multiple interface support for link aggregation Adds
  - -multiple-interface option.  Patch from Sarim Khan
  * Run on-bt-download-complete command when -V reports download
    finished
  * Use dedicated DiskWriter in MultiDiskFileAllocationIterator
    We have to use dedicated DiskWriter instead of
    (*entryItr_)-&gt;getDiskWriter().  This is because
    SingleFileAllocationIterator cannot reopen file if file is
    closed by OpenedFileCounter.
  * Fix getrandom for system with libc not including errno or
    systems not supporting ENOSYS in the first place.
  * Don't send back rpc-secret option value in
    aria2.getGlobalOption RPC method
  * Make libuv default off
  * Fixed slow RPC response
  * Fix getrandom interface detection
- Enable ssh suport using libssh2</changelog>
  <changelog author="mpluskal@suse.com" date="1448107200">- Update to 1.19.2
  * Fix bug that progress summary is not shown timely
- Changes for 1.19.1
  * Update README.android
  * Providing some workarounds about CA certificates and standard
  output
  * Return 400 HTTP status code if exception was caught while
  executing RPC method
  * Fix on-download-error is executed even if download succeeded
  * Increase --select-file upper bound to 1m for torrent
  containing lots of files
  * Fix busy loop with --dry-run and 4xx response for URI listed
  in metalink
  * Make LibuvEventPoll compatible with the latest libuv again
  * gnutls: Allow SIGN-RSA-SHA1 for compatibility reason
  * Make script compatible with both Python 2 and 3
  * Make config and cache files conform to XDG
  * ftp, sftp: Fix heap-after-free bug on exception
  * ftp: Fix timeout when reusing FTP connection
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="f26f76b9513636cc45c5a1ba95379a76f95b3e697a8a90772301d9dd3af0038d" name="at" arch="src">
  <version epoch="0" ver="3.1.14" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1354104000">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
  <changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
  <changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
  <changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
  <changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
  <changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
  <changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
  <changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
  <changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
  <changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
  <changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
  <changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>
</package>
<package pkgid="fde6c42043c43b7168933b05cf815b856447e0941969afb31157bb1dabdc6d94" name="at" arch="x86_64">
  <version epoch="0" ver="3.1.14" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1354104000">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
  <changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
  <changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
  <changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
  <changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
  <changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
  <changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
  <changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
  <changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
  <changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
  <changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
  <changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>
</package>
<package pkgid="f93701ef299055a59d30a127cfb80a45b64250abaf3b0ecf75e8f99de3724a2e" name="at" arch="src">
  <version epoch="0" ver="3.1.14" rel="17.1"/>
  <changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
  <changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
  <changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
  <changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
  <changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
  <changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
  <changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
  <changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
  <changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
  <changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
  <changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>
  <changelog author="pgajdos@suse.com" date="1532952000">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
</package>
<package pkgid="6fe401b185d7eec3bcd7d944113fe425ec7bf537a4603524adf59daf169c71c3" name="at" arch="x86_64">
  <version epoch="0" ver="3.1.14" rel="17.1"/>
  <changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
  <changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
  <changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
  <changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
  <changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
  <changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
  <changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
  <changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
  <changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
  <changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
  <changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>
  <changelog author="pgajdos@suse.com" date="1532952000">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
</package>
<package pkgid="9691bf3ac54d8532f96f8b7152f61d04498801b1fd59a5a6745e4d208b3450b7" name="at-spi2-core" arch="src">
  <version epoch="0" ver="2.20.2" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.17.90:
  + Modified the cache API to specify an object's index and child
    count rather than its children. This eliminates the need for
    the application to enumerate its children, improving
    performance in some places with large lists (bgo#650090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.18.1:
  + Don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="mgorse@suse.com" date="1446033600">- Disable xevie when configuring (boo#952011).</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Update to version 2.18.2:
  + Really don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + Fixed crash during removal of last application in registryd
    (bgo#756513).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.18.3:
  + get_index_in_parent: Don't crash if the parent is defunct.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.19.1:
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.19.2:
  + Disable xevie by default--it probably doesn't do anything
    anyhow.
  + get_index_in_parent: Don't crash if parent is defunct.
  + Don't crash when trying to set an invalid state (bgo#757915).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Don't display warning if unable to connect when logged in via
    ssh (bgo#761600).
  + at-spi-bus-launcher: register with session manager
    (bgo#753931).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Don't display warnings when connecting to an app that no longer
    exists.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Support a stateless configuration by default (bgo#763540).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + registryd: avoid crashing with a NULL keystring (bgo#764688).
  + Plug a memory leak in AtspiEventListener (bgo#764688).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop at-spi2-core-null-event-source.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463918400">- Update to version 2.20.2:
  + Fixed an invalid memory access when fetching an accessible.</changelog>
  <changelog author="mgorse@suse.com" date="1464004800">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Drop at-spi2-core-devel Obsolete: the devel package have not
  existed since 2009. At the same time, drop rpmlintrc, since it's
  not needed anymore.
- Pkgconfig'ify spec file BuildRequires:
  + Replace/Remove: glib2-devel, gobject-introspection-devel,
    xorg-x11-devel.
  + Add: pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gobject-introspection-1.0),
    pkgconfig(x11), pkgconfig(xtst), pkgconfig(xi).</changelog>
  <changelog author="mgorse@suse.com" date="1468497600">- Add at-spi2-core-session-management.patch: properly register
  at-spi-bus-launcher with gnome-session (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1469620800">- Update at-spi2-core-session-management.patch: fix uninitialized
  variable (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1513598400">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027 bgo#791124).</changelog>
</package>
<package pkgid="992e002a4200dcc50698b254341d4c7cd1e7137fe13420c3979bd740d317cd33" name="at-spi2-core" arch="x86_64">
  <version epoch="0" ver="2.20.2" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.17.90:
  + Modified the cache API to specify an object's index and child
    count rather than its children. This eliminates the need for
    the application to enumerate its children, improving
    performance in some places with large lists (bgo#650090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.18.1:
  + Don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="mgorse@suse.com" date="1446033600">- Disable xevie when configuring (boo#952011).</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Update to version 2.18.2:
  + Really don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + Fixed crash during removal of last application in registryd
    (bgo#756513).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.18.3:
  + get_index_in_parent: Don't crash if the parent is defunct.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.19.1:
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.19.2:
  + Disable xevie by default--it probably doesn't do anything
    anyhow.
  + get_index_in_parent: Don't crash if parent is defunct.
  + Don't crash when trying to set an invalid state (bgo#757915).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Don't display warning if unable to connect when logged in via
    ssh (bgo#761600).
  + at-spi-bus-launcher: register with session manager
    (bgo#753931).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Don't display warnings when connecting to an app that no longer
    exists.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Support a stateless configuration by default (bgo#763540).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + registryd: avoid crashing with a NULL keystring (bgo#764688).
  + Plug a memory leak in AtspiEventListener (bgo#764688).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop at-spi2-core-null-event-source.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463918400">- Update to version 2.20.2:
  + Fixed an invalid memory access when fetching an accessible.</changelog>
  <changelog author="mgorse@suse.com" date="1464004800">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Drop at-spi2-core-devel Obsolete: the devel package have not
  existed since 2009. At the same time, drop rpmlintrc, since it's
  not needed anymore.
- Pkgconfig'ify spec file BuildRequires:
  + Replace/Remove: glib2-devel, gobject-introspection-devel,
    xorg-x11-devel.
  + Add: pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gobject-introspection-1.0),
    pkgconfig(x11), pkgconfig(xtst), pkgconfig(xi).</changelog>
  <changelog author="mgorse@suse.com" date="1468497600">- Add at-spi2-core-session-management.patch: properly register
  at-spi-bus-launcher with gnome-session (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1469620800">- Update at-spi2-core-session-management.patch: fix uninitialized
  variable (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1513598400">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027 bgo#791124).</changelog>
</package>
<package pkgid="19639b4e36737ea070cb1008228595f28133d06107f7918808d6484726ea489e" name="at-spi2-core-devel" arch="x86_64">
  <version epoch="0" ver="2.20.2" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.17.90:
  + Modified the cache API to specify an object's index and child
    count rather than its children. This eliminates the need for
    the application to enumerate its children, improving
    performance in some places with large lists (bgo#650090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.18.1:
  + Don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="mgorse@suse.com" date="1446033600">- Disable xevie when configuring (boo#952011).</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Update to version 2.18.2:
  + Really don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + Fixed crash during removal of last application in registryd
    (bgo#756513).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.18.3:
  + get_index_in_parent: Don't crash if the parent is defunct.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.19.1:
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.19.2:
  + Disable xevie by default--it probably doesn't do anything
    anyhow.
  + get_index_in_parent: Don't crash if parent is defunct.
  + Don't crash when trying to set an invalid state (bgo#757915).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Don't display warning if unable to connect when logged in via
    ssh (bgo#761600).
  + at-spi-bus-launcher: register with session manager
    (bgo#753931).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Don't display warnings when connecting to an app that no longer
    exists.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Support a stateless configuration by default (bgo#763540).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + registryd: avoid crashing with a NULL keystring (bgo#764688).
  + Plug a memory leak in AtspiEventListener (bgo#764688).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop at-spi2-core-null-event-source.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463918400">- Update to version 2.20.2:
  + Fixed an invalid memory access when fetching an accessible.</changelog>
  <changelog author="mgorse@suse.com" date="1464004800">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Drop at-spi2-core-devel Obsolete: the devel package have not
  existed since 2009. At the same time, drop rpmlintrc, since it's
  not needed anymore.
- Pkgconfig'ify spec file BuildRequires:
  + Replace/Remove: glib2-devel, gobject-introspection-devel,
    xorg-x11-devel.
  + Add: pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gobject-introspection-1.0),
    pkgconfig(x11), pkgconfig(xtst), pkgconfig(xi).</changelog>
  <changelog author="mgorse@suse.com" date="1468497600">- Add at-spi2-core-session-management.patch: properly register
  at-spi-bus-launcher with gnome-session (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1469620800">- Update at-spi2-core-session-management.patch: fix uninitialized
  variable (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1513598400">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027 bgo#791124).</changelog>
</package>
<package pkgid="ae74f75d130d02373efab95b2782bb5719d6230683f7537535562cc8acac0043" name="at-spi2-core-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.2" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.17.90:
  + Modified the cache API to specify an object's index and child
    count rather than its children. This eliminates the need for
    the application to enumerate its children, improving
    performance in some places with large lists (bgo#650090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.18.1:
  + Don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="mgorse@suse.com" date="1446033600">- Disable xevie when configuring (boo#952011).</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Update to version 2.18.2:
  + Really don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + Fixed crash during removal of last application in registryd
    (bgo#756513).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.18.3:
  + get_index_in_parent: Don't crash if the parent is defunct.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.19.1:
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.19.2:
  + Disable xevie by default--it probably doesn't do anything
    anyhow.
  + get_index_in_parent: Don't crash if parent is defunct.
  + Don't crash when trying to set an invalid state (bgo#757915).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Don't display warning if unable to connect when logged in via
    ssh (bgo#761600).
  + at-spi-bus-launcher: register with session manager
    (bgo#753931).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Don't display warnings when connecting to an app that no longer
    exists.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Support a stateless configuration by default (bgo#763540).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + registryd: avoid crashing with a NULL keystring (bgo#764688).
  + Plug a memory leak in AtspiEventListener (bgo#764688).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop at-spi2-core-null-event-source.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463918400">- Update to version 2.20.2:
  + Fixed an invalid memory access when fetching an accessible.</changelog>
  <changelog author="mgorse@suse.com" date="1464004800">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Drop at-spi2-core-devel Obsolete: the devel package have not
  existed since 2009. At the same time, drop rpmlintrc, since it's
  not needed anymore.
- Pkgconfig'ify spec file BuildRequires:
  + Replace/Remove: glib2-devel, gobject-introspection-devel,
    xorg-x11-devel.
  + Add: pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gobject-introspection-1.0),
    pkgconfig(x11), pkgconfig(xtst), pkgconfig(xi).</changelog>
  <changelog author="mgorse@suse.com" date="1468497600">- Add at-spi2-core-session-management.patch: properly register
  at-spi-bus-launcher with gnome-session (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1469620800">- Update at-spi2-core-session-management.patch: fix uninitialized
  variable (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1513598400">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027 bgo#791124).</changelog>
</package>
<package pkgid="e388149322ad58b832450ab9fb697c691dbe4c44143e8ffdf9d44bb4b6fc1e9a" name="at-spi2-core-lang" arch="noarch">
  <version epoch="0" ver="2.20.2" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.17.90:
  + Modified the cache API to specify an object's index and child
    count rather than its children. This eliminates the need for
    the application to enumerate its children, improving
    performance in some places with large lists (bgo#650090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.18.1:
  + Don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="mgorse@suse.com" date="1446033600">- Disable xevie when configuring (boo#952011).</changelog>
  <changelog author="badshah400@gmail.com" date="1446984000">- Update to version 2.18.2:
  + Really don't crash if we get a children-changed event with a
    non-existent child (bgo#755951).
  + Fixed crash during removal of last application in registryd
    (bgo#756513).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.18.3:
  + get_index_in_parent: Don't crash if the parent is defunct.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.19.1:
  + atspi_hyperlink_get_index_range: don't return random values if
    the call fails (bgo#755727).
  + Fixed some atspi_text_ functions (bgo#755731).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.19.2:
  + Disable xevie by default--it probably doesn't do anything
    anyhow.
  + get_index_in_parent: Don't crash if parent is defunct.
  + Don't crash when trying to set an invalid state (bgo#757915).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Don't display warning if unable to connect when logged in via
    ssh (bgo#761600).
  + at-spi-bus-launcher: register with session manager
    (bgo#753931).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Don't display warnings when connecting to an app that no longer
    exists.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Support a stateless configuration by default (bgo#763540).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + registryd: avoid crashing with a NULL keystring (bgo#764688).
  + Plug a memory leak in AtspiEventListener (bgo#764688).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop at-spi2-core-null-event-source.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463918400">- Update to version 2.20.2:
  + Fixed an invalid memory access when fetching an accessible.</changelog>
  <changelog author="mgorse@suse.com" date="1464004800">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Drop at-spi2-core-devel Obsolete: the devel package have not
  existed since 2009. At the same time, drop rpmlintrc, since it's
  not needed anymore.
- Pkgconfig'ify spec file BuildRequires:
  + Replace/Remove: glib2-devel, gobject-introspection-devel,
    xorg-x11-devel.
  + Add: pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gobject-introspection-1.0),
    pkgconfig(x11), pkgconfig(xtst), pkgconfig(xi).</changelog>
  <changelog author="mgorse@suse.com" date="1468497600">- Add at-spi2-core-session-management.patch: properly register
  at-spi-bus-launcher with gnome-session (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1469620800">- Update at-spi2-core-session-management.patch: fix uninitialized
  variable (bsc#984109).</changelog>
  <changelog author="mgorse@suse.com" date="1513598400">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027 bgo#791124).</changelog>
</package>
<package pkgid="f122cb52f51ba55690cd47885624ed9bb3ac567879f0d70de29e76c6c2839ec0" name="atftp" arch="src">
  <version epoch="0" ver="0.7.0" rel="176.1"/>
  <changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
  <changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
  <changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
  <changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
  <changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
  <changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
  <changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
  <changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
  <changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
</package>
<package pkgid="d17ecea02a54cee1113f780b5241d6f172c02026a64a255bd4d291f2388bd40d" name="atftp" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="176.1"/>
  <changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
  <changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
  <changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
  <changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
  <changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
  <changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
  <changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
  <changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
  <changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
</package>
<package pkgid="0c05493a39ca59babf235faee83b3bd4d2b1267a297683b24eb83bc2d740811b" name="aubio" arch="src">
  <version epoch="0" ver="0.4.1" rel="9.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
</package>
<package pkgid="83652da76b4d2e7cb1d0db4aa1ade7912f564df42c0a712af32e5511d3d0d0d4" name="aubio" arch="src">
  <version epoch="0" ver="0.4.1" rel="9.6.2"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="3a92bfad6f17ef6a31919f1fadc09a62e933bc8ab0cd37aa7999150dc10cebbe" name="aubio" arch="src">
  <version epoch="0" ver="0.4.1" rel="9.9.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="9b41e4db8a678afb7e7c888cf23b417dbad2434fac742898f7a253ceafc124e9" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="9.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
</package>
<package pkgid="e1955b0e30834a4617a0ee9876a30208f7a710bf3481fd4a38b03a7ec5d886a5" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="9.6.2"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="f9497c618c466eb6b997a22540c4afe49cbecda83d3a1ba5aa7a1ff32fe4e476" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="9.9.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="5bf211c0d531e393c6577692f903dd06411e211032ff31a7d6b60598c77d593f" name="audacity" arch="src">
  <version epoch="0" ver="2.1.3" rel="3.2"/>
  <changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
  <changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
  <changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
  <changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>
</package>
<package pkgid="0b775ce96f77181cedfb4b54b0ea1eae355c5508e0375c50aab578082409f5c7" name="audacity" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="3.2"/>
  <changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
  <changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
  <changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
  <changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>
</package>
<package pkgid="17b077d756dd1d462dc3e1cae7ef46c67faad910202ee40a97c8e7474b7470a2" name="audacity-lang" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="3.2"/>
  <changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
  <changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
  <changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
  <changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>
</package>
<package pkgid="8b5dc76a064cb9c09de9ca7f8e87d8f89f919061eecf78aa776afd684cfbc201" name="audiofile" arch="src">
  <version epoch="0" ver="0.3.6" rel="13.3.1"/>
  <changelog author="mauro@suse.de" date="1232452800">- Added bnc_463220.patch to fix bnc#463220
  + Correct buffer size.</changelog>
  <changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="92f09fa2fd36fd4beca8fa4018bcd081c5a96f2fddb11baeab071254fb56dee7" name="audiofile" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="13.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="cf715dd8de3af3284665eb98fc192be21dfe117745be8e12757ea0a0c72a7c01" name="audiofile-devel" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="13.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="8265e6493dfd927443789b6ff874495fd253a9b7a6b7622d3593bab71c7317ea" name="audiofile-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="13.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="d96e70e86126d97af7ce89a292ffe851ada19b697481450575c0f4e667ee4405" name="audiofile-doc" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="13.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="9f8d2c6707d6768d7b6b4138bcfe859cab35df852be2143ee2aa2b1f945cadc4" name="audit" arch="src">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
  <changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
  <changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>
</package>
<package pkgid="8039b12f9ca7b62fb90a78f20e995ea0240e6a0bee1208a22589219b21630a57" name="audit" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
  <changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>
</package>
<package pkgid="52af5508cb567d4f279a9ec9523bb5ae121e2d58284e2549bda7cb3d5556feeb" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
  <changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>
</package>
<package pkgid="c9e258627815f50699142dd8b678e3df754263dad20d3971fe5f6d27a0c57500" name="audit-devel" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
  <changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
  <changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>
</package>
<package pkgid="cb7fce0d47fa9ea3fcab5b44432ac230a0b48a8ac39ab4c0e19902553e2a5139" name="audit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
  <changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
  <changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>
</package>
<package pkgid="f834feb2f64268de6bce40b461d2003c37321f9a1b11f1ecede1eefd32249210" name="audit-libs-python" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
  <changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>
</package>
<package pkgid="32585e7661cf46276600c7cb31af9443830a5663b7fdc7e1dbf480a87eafca11" name="audit-secondary" arch="src">
  <version epoch="0" ver="2.3.6" rel="8.1"/>
  <changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
  <changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
  <changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
  <changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>
</package>
<package pkgid="f31767164e5cab4f4b765d89783a319789c5c8c9b35202f83bce562aaf840cbf" name="augeas" arch="src">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="316458c8eab7ede905d74590f81a499dcac5801e8203e9531b974ce89943ccb0" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="1037c17925c20d3b3c9ecbfccfa0a3962e7233f3b215c567341548e39e276632" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="0aa8094243e3cb80363ba1cdd28f7b468afca5625b318653474914514037489d" name="augeas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="957819f6e8028390a69a5036ea0a7753a173151b9cbb5afe170cc14862a76692" name="augeas-lense-tests" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="88bf6c5d1fcf7dded46f70da7ea8a673922cea02baca9defa6d53f2179ca1537" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="13.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add augeas-devel to baselibs</changelog>
  <changelog author="dmacvicar@suse.de" date="1316692800">- move lenses from /usr/share/libaugeas0/augeas
  to /usr/share/augeas (bnc#719199)
- move vim lenses syntax files from -lenses to -devel package</changelog>
  <changelog author="dmacvicar@suse.de" date="1327579200">- Patch shellvars.aug to recognize SUSE specific files in
  sysconfig (bnc#729491)</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Remove rednudant tags/sections from specfile</changelog>
  <changelog author="dmacvicar@suse.de" date="1330516800">- update to 0.10.0
  - support relative paths by taking them relative to the value of
    /augeas/context in all API functions where paths are used
  - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in
    aug_srun and augtool. Introduces dependency on libxml2
  - fix regular expression escaping. Previously, /[/]/ match either a backslash
    or a slash. Now it only matches a slash
  - path expressions: add function 'int' to convert a node value (string) to an
    integer
  - path expressions: make sure the regexp produced by empty nodesets from
    regexp() and glob() matches nothing, rather than the empty word
  - fix --autosave when running single command from command line, BZ 743023
  - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv'
  - aug_srun: allow escaping of spaces, quotes and brackets with \
  - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when
    initialization fails so that caller gets some details about why
    initialization failed
  - aug_srun: tolerate trailing white space in commands
  - much improved, expanded documentation of many lenses
  - always interpret lens filter paths as absolute, bug #238
  - fix bug in libfa that would incorrectly calculate the difference of a case
    sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match
    'worD')
  - new builtin 'regexp_match' for .aug files to make testing regexp matching
    easier during development
  - fix 'span' command, bug #220
  - Lens changes/additions
  * Access: parse user@host and (group) in users field; field separator need
    not be surrounded by spaces
  * Aliases: allow spaces before colons
  * Aptconf: new lens for /etc/apt/apt.conf
  * Aptpreferences: support origin entries
  * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms)
  * Bbhosts: various fixes
  * Cgconfig: id allowed too many characters
  * Cron: variables aren't set like shellvars, semicolons are allowed in
    email addresses; fix parsing of numeric fields, previously upper case
    chars were allowed; support ranges in time specs
  * Desktop: new lens for .desktop files
  * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations
  * Exports: allow empty options
  * Fai_diskconfig: new lens for FAI disk_config files
  * Fstab: allow ',' in file names, BZ 751342
  * Host_access: new lens for /etc/hosts.{allow,deny}
  * Host_conf: new lens for /etc/host.conf
  * Hostname: new lens for /etc/hostname
  * Hosts: also load /etc/mailname by default
  * Iptables: allow digits in ipt_match keys, bug #224
  * Json: fix whitespace handling, removing some cf ambiguities
  * Kdump: new lens for /etc/kdump.conf (Roman Rakus)
  * Keepalived: support many more flags, fields and blocks
  * Krb5: support [pam] section, bug #225
  * Logrotate: be more tolerant of whitespace in odd places
  * Mdadm_conf: new lens for /etc/mdadm.conf
  * Modprobe: Parse commands in install/remove stanzas (this introduces a
    backwards incompatibility); Drop support for include as it is not documented
    in manpages and no unit tests are shipped.
  * Modules: new lens for /etc/modules
  * Multipath: add support for seveal options in defaults section, bug #207
  * Mysql: includedir statements are not part of sections; support !include;
    allow indentation of entries and flags
  * Networks: new lens for /etc/networks
  * Nrpe: allow '=' in commands, bug #218 (Marc Fournier)
  * Php: allow indented entries
  * Phpvars: allow double quotes in variable names; accept case insensitive
    PHP tags; accept 'include_once'; allow empty lines at EOF; support define()
    and bash-style and end-of-line comments
  * ostfix_master: allow a lot more chars in words/commands, including commas
  * PuppetFileserver: support same-line comments and trailing whitespace,
    bug #214
  * Reprepo_uploaders: new lens for reprepro's uploaders files
  * Resolv: permit end-of-line comments
  * Schroot: new lens for /etc/schroot/schroot.conf
  * Shellvars: greatly expand shell syntax understood; support
    various syntactic constructs like if/then/elif/else, for, while,
    until, case, and select; load /etc/blkid.conf by default
  * Spacevars: add toplevel lens 'lns' for consistency
  * Ssh: new lens for ssh_config (Jiri Suchomel)
  * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie)
  * Sudoers: support more parameter flags/options, bug #143
  * Xendconfsxp: lens for Xen configuration (Tom Limoncelli)
  * Xinetd: allow spaces after '{'
- update modprobe lens patch to apply on 0.10.0
- update shellvars lens patch to add some missing files on SUSE
  distros mentioned in bnc#729491</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Ensure libxml2 is present in .pc file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="mfilka@suse.com" date="1430913600">- bnc#925225, CVE-2014-8119
  - new API - aug_escape_name() - which can be used to escape
    untrusted inputs before using them as part of path expressions
  - aug_match() is changed to return properly escaped output</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Improved inputrc, host.conf and shellvars lenses. bsc#975729
  Add patches:
    27d8457-inputrc-mapping.patch
    2d12670-inputrc-else.patch
    49bcfbe-shellvars-exclude-SuSEfirewall2.patch
    7558c12-host_conf-spaces.patch
    2686edf4-iproute2-hex-ids.patch
    bd6c783d-iproute2-handle-slash.patch
    c59d33dc-rmt-lens.patch
    02f5bef6-sssd-semicolon.patch
    e3101393-allow-partial-quoting-mixing-multiple-styl.patch
    0001-Add-lens-to-parse-etc-default-star.patch
    0001-smbusers-add-support-for-comments.patch
- Temporarily rule out everything in if-up.d and if-down.d
  from the shellvars lens as the lens is far from ready to read the
  scripts there. shellvars-exclude.patch. bsc#933210</changelog>
  <changelog author="jreidinger@suse.com" date="1490270400">- backport new ntp.aug lense to recognize restrict entry with
  limitation to IPv4 (found during fixing bsc#1023204)</changelog>
  <changelog author="knut.anderssen@suse.com" date="1498564800">- By error instead of the new ntp augeas lens the old one was used.
  Fixed adding the correct one (bsc#1023204)</changelog>
  <changelog author="vcizek@suse.com" date="1519819200">- fix CVE-2017-7555 (bsc#1054171)
  * a memory corruption bug could have lead to arbitrary code
    execution by passing crafted strings that would be mis-handled
    by parse_name()
  * add augeas-CVE-2017-7555.patch</changelog>
</package>
<package pkgid="ef587ec9dca0c35428b0324e4595fc8c0720b8829d4c12692727dc2bb0365a3d" name="autofs" arch="src">
  <version epoch="0" ver="5.0.9" rel="19.1"/>
  <changelog author="lchiquitto@suse.de" date="1391774400">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
  <changelog author="lchiquitto@suse.de" date="1393588800">- autofs-5.0.8-upstream-patches-20140225.bz2: update 5.0.8 upstream
  patches up to 2014-02-25, fixing the following bugs:
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno (former autofs-5.0.8-eaccess.patch)
  * extend fix for crash due to thread unsafe use of libldap (bnc#853469)
  * fix deadlock in init_ldap_connection (bnc#859969)
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
- remove patches that were merged upstream:
  * autofs-5.0.8-eaccess.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-serialize-libldap-unbind.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1395662400">- autofs-5.0.8-upstream-patches-20140324.bz2: update 5.0.8 upstream
  patches up to 2014-03-24, fixing the following bugs:
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup (bnc#869377)</changelog>
  <changelog author="werner@suse.de" date="1395748800">- Avoid bad timings and timeouts if a shutdown was done by a remote
  user via su and with autofs based home directory</changelog>
  <changelog author="lchiquitto@suse.de" date="1396008000">- update to version 5.0.9:
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
- rebase, refresh and rename all patches on top of 5.0.9
- switch to .xz compressed tarball instead of bzip2
- autofs-5.0.8-upstream-patches-20140324.bz2: remove</changelog>
  <changelog author="lchiquitto@suse.de" date="1399896000">- autofs.spec: remove %with_systemd conditionals as systemd is
  required on SLE 12
- autofs.init: drop, replaced by systemd service (bnc#863970)</changelog>
  <changelog author="mszeredi@suse.cz" date="1407153600">- add autofs-debuginfo-fix.patch to fix building of debuginfo
  package (bnc#889219)</changelog>
  <changelog author="mszeredi@suse.cz" date="1421841600">- fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bnc#909472)</changelog>
  <changelog author="mszeredi@suse.cz" date="1422360000">- fix insserv warning at postinstall (bnc#913376)</changelog>
  <changelog author="mszeredi@suse.cz" date="1424088000">- dont pass sloppy option for other than nfs mounts (bnc#901448)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425038400">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425297600">- add FORCE_STANDARD_PROGRAM_MAP_ENV option to sysconfig
  (bnc#917977)</changelog>
  <changelog author="kukuk@suse.de" date="1453896000">- Don't overwrite tirpc version of auth_destroy, needed for
  [FATE#320393] (autofs-5.0.9-leave_auth_destroy.patch)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1462190400">- With modified configure.in, autoreconf must be called (bsc#955477).</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
  - autofs-5.0.6-fix-yp-map-age-not-updated-in-s-_-.-g-case.patch
  - autofs-5.0.6-properly-handle-errors-in-lookup_nss_mount.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1473076800">- Rebuild against SLE 12-SP2's libtirpc. (fate#320393)</changelog>
  <changelog author="jeffm@suse.com" date="1478174400">- Fix typo in DEFAULT_AUTH_CONFIG_FILE definition (bsc#998078).</changelog>
  <changelog author="nborisov@suse.com" date="1492603200">- Fix adding of the wildcard key to the negative cache (bsc#1031533)
  * Add autofs-5.1.0-dont-add-wildcard-to-negative-cache.patch
- Make interaction with negative cache more robust  (bsc#1031533)
  * Add autofs-5.1.0-make-negative-cache-update-consistent-for-all-lookup-modules.patch
  * Add autofs-5.1.0-ensure-negative-cache-isnt-updated-on-remount.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- Switch to using monotonic time for timeouts (bsc#1046493).
  * Added patches:
  - autofs-5-1-0-fix-gcc5-complaints.patch
  - autofs-5-1-1-define-monotonic-clock-helper-functions.patch
  - autofs-5-1-1-use-monotonic-clock-for-alarm-thread-condition-wait.patch
  - autofs-5-1-1-define-pending-condition-init-helper-function.patch
  - autofs-5-1-1-use-monotonic-clock-for-direct-mount-condition.patch
  - autofs-5-1-1-use-monotonic-clock-for-indirect-mount-condition.patch
  - autofs-5-1-1-change-remaining-gettimeofday-to-use-clock_gettime.patch
  - autofs-5-1-1-change-time-to-use-monotonic_clock.patch
  - autofs-5-1-1-remove-unused-function-elapsed.patch
  - autofs-5-1-2-build-check-for-clock_gettime-in-librt.patch</changelog>
</package>
<package pkgid="19ff2b7a4e046e018ad744de14e62ee0c0fa4d110ef3f817af89ad888672f786" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.0.9" rel="19.1"/>
  <changelog author="lchiquitto@suse.de" date="1391774400">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
  <changelog author="lchiquitto@suse.de" date="1393588800">- autofs-5.0.8-upstream-patches-20140225.bz2: update 5.0.8 upstream
  patches up to 2014-02-25, fixing the following bugs:
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno (former autofs-5.0.8-eaccess.patch)
  * extend fix for crash due to thread unsafe use of libldap (bnc#853469)
  * fix deadlock in init_ldap_connection (bnc#859969)
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
- remove patches that were merged upstream:
  * autofs-5.0.8-eaccess.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-serialize-libldap-unbind.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1395662400">- autofs-5.0.8-upstream-patches-20140324.bz2: update 5.0.8 upstream
  patches up to 2014-03-24, fixing the following bugs:
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup (bnc#869377)</changelog>
  <changelog author="werner@suse.de" date="1395748800">- Avoid bad timings and timeouts if a shutdown was done by a remote
  user via su and with autofs based home directory</changelog>
  <changelog author="lchiquitto@suse.de" date="1396008000">- update to version 5.0.9:
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
- rebase, refresh and rename all patches on top of 5.0.9
- switch to .xz compressed tarball instead of bzip2
- autofs-5.0.8-upstream-patches-20140324.bz2: remove</changelog>
  <changelog author="lchiquitto@suse.de" date="1399896000">- autofs.spec: remove %with_systemd conditionals as systemd is
  required on SLE 12
- autofs.init: drop, replaced by systemd service (bnc#863970)</changelog>
  <changelog author="mszeredi@suse.cz" date="1407153600">- add autofs-debuginfo-fix.patch to fix building of debuginfo
  package (bnc#889219)</changelog>
  <changelog author="mszeredi@suse.cz" date="1421841600">- fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bnc#909472)</changelog>
  <changelog author="mszeredi@suse.cz" date="1422360000">- fix insserv warning at postinstall (bnc#913376)</changelog>
  <changelog author="mszeredi@suse.cz" date="1424088000">- dont pass sloppy option for other than nfs mounts (bnc#901448)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425038400">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425297600">- add FORCE_STANDARD_PROGRAM_MAP_ENV option to sysconfig
  (bnc#917977)</changelog>
  <changelog author="kukuk@suse.de" date="1453896000">- Don't overwrite tirpc version of auth_destroy, needed for
  [FATE#320393] (autofs-5.0.9-leave_auth_destroy.patch)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1462190400">- With modified configure.in, autoreconf must be called (bsc#955477).</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
  - autofs-5.0.6-fix-yp-map-age-not-updated-in-s-_-.-g-case.patch
  - autofs-5.0.6-properly-handle-errors-in-lookup_nss_mount.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1473076800">- Rebuild against SLE 12-SP2's libtirpc. (fate#320393)</changelog>
  <changelog author="jeffm@suse.com" date="1478174400">- Fix typo in DEFAULT_AUTH_CONFIG_FILE definition (bsc#998078).</changelog>
  <changelog author="nborisov@suse.com" date="1492603200">- Fix adding of the wildcard key to the negative cache (bsc#1031533)
  * Add autofs-5.1.0-dont-add-wildcard-to-negative-cache.patch
- Make interaction with negative cache more robust  (bsc#1031533)
  * Add autofs-5.1.0-make-negative-cache-update-consistent-for-all-lookup-modules.patch
  * Add autofs-5.1.0-ensure-negative-cache-isnt-updated-on-remount.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- Switch to using monotonic time for timeouts (bsc#1046493).
  * Added patches:
  - autofs-5-1-0-fix-gcc5-complaints.patch
  - autofs-5-1-1-define-monotonic-clock-helper-functions.patch
  - autofs-5-1-1-use-monotonic-clock-for-alarm-thread-condition-wait.patch
  - autofs-5-1-1-define-pending-condition-init-helper-function.patch
  - autofs-5-1-1-use-monotonic-clock-for-direct-mount-condition.patch
  - autofs-5-1-1-use-monotonic-clock-for-indirect-mount-condition.patch
  - autofs-5-1-1-change-remaining-gettimeofday-to-use-clock_gettime.patch
  - autofs-5-1-1-change-time-to-use-monotonic_clock.patch
  - autofs-5-1-1-remove-unused-function-elapsed.patch
  - autofs-5-1-2-build-check-for-clock_gettime-in-librt.patch</changelog>
</package>
<package pkgid="6a632bbb729fc1063829620fdb7b2e0157654a5f241237fb2a98bcbd688c4adf" name="autoyast2" arch="noarch">
  <version epoch="0" ver="3.2.22" rel="3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
  <changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
  <changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
  <changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
  <changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
</package>
<package pkgid="90b8548518709f4db68a58074f107ddef5203333e5f89f796f898d3ed69365ba" name="autoyast2" arch="src">
  <version epoch="0" ver="3.2.22" rel="3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
  <changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
  <changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
  <changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
  <changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
</package>
<package pkgid="9ab17950a134494c31d219674baf384e4244f0f547d2d4811ce1adb20300bd52" name="autoyast2" arch="noarch">
  <version epoch="0" ver="3.2.29" rel="6.1"/>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
</package>
<package pkgid="54e52f1893aca5a9a044a5039efe24b5f43e8ea11120917781d5bf83a870575f" name="autoyast2" arch="src">
  <version epoch="0" ver="3.2.29" rel="6.1"/>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
</package>
<package pkgid="beef96ecb580c4945c913ea5fc798bed925941ded64bdc69dbafa00ffd99a203" name="autoyast2" arch="noarch">
  <version epoch="0" ver="3.2.31" rel="9.1"/>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1535457600">- Always export the partition_type for MS-DOS partition tables
  (bsc#1091415).
- 3.2.30</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1108829).
- 3.2.31</changelog>
</package>
<package pkgid="bd15ae0881a1f04a0682c42b6866d60fba34a2c5d42a9e4c5cb89f6ccb1748b7" name="autoyast2" arch="src">
  <version epoch="0" ver="3.2.31" rel="9.1"/>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1535457600">- Always export the partition_type for MS-DOS partition tables
  (bsc#1091415).
- 3.2.30</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1108829).
- 3.2.31</changelog>
</package>
<package pkgid="1d3cabb6aa96c35f18def8df6eefd48501fd4a72e59a3621230fc42fd83a2d16" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="3.2.22" rel="3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
  <changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
  <changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
  <changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
  <changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
</package>
<package pkgid="9e53e760f01c0171283431266566f6ae42e8f1a3e6768cfa928646a167a95394" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="3.2.29" rel="6.1"/>
  <changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
  <changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
</package>
<package pkgid="20035b6bc20e58f8e8bf139f3617732830d1c18afe2f9515080c24ea32406274" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="3.2.31" rel="9.1"/>
  <changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
  <changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
  <changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
  <changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
  <changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
  <changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
  <changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
  <changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>
  <changelog author="schubi@suse.de" date="1505736000">- LVM installation. Shrinking needed disks size automatically in
  order to handle rounding inaccuracies. (bnc#1057597)
- 3.2.23</changelog>
  <changelog author="schubi@suse.de" date="1505822400">- ayast_setup: Restarting autoyast-initscripts.service in order
  to run init-scripts too. (additional fix for bnc#1057597)
- 3.2.24</changelog>
  <changelog author="knut.anderssen@suse.com" date="1507118400">- AutoinstConfig: added network_before_proposal flag that will be
  enable if the network is configured during the first stage.
  (bsc#1054400)
- 3.2.25</changelog>
  <changelog author="schubi@suse.de" date="1507550400">- Adding default subvolumes to root partition only if the user
  has not defined any root partition in the AY configuration file.
  (bnc#1059617)
- 3.2.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1508328000">- When using Btrfs but without subvolumes, export an empty list
  instead of removing them from the profile (related to
  bsc#1059617)
- 3.2.27</changelog>
  <changelog author="schubi@suse.de" date="1516968000">- Reporting packages which cannot be selected for installation.
  (bnc#1077292)
- 3.2.28</changelog>
  <changelog author="schubi@suse.de" date="1517486400">- Report packages which cannot be select for installation
  (except those packages not included in the AutoYaST profile)
  (bnc#1077292)
- 3.2.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1535457600">- Always export the partition_type for MS-DOS partition tables
  (bsc#1091415).
- 3.2.30</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1108829).
- 3.2.31</changelog>
</package>
<package pkgid="ee5c6ec0cfd670fd57aa03c5d1a5bab4080c7312c01cd604a0274f3d4d724b8b" name="avahi" arch="src">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="d306212c092902ba21f371e4320a41435dbb7be7d948256fbb0536bb7127e281" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="1ce8810ee9d9fb305ee662f653b1cd65ba895f8f9acad45df9d2799aab826331" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="2e20b1b1911c7242b2ab2a5d86d4b3d4392cdd1f612dda56050296886e85a1a0" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="4df069f7cb77ead76203526ce454d018064181e524d1bbb60b39f6a89f7d1d6d" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="1150fdf5edfc71e3c79f9e3217ec3866b52f297fef8bec7fdfa6ca7a424d7602" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
</package>
<package pkgid="503ba01dd05cd78dfc65fbb12093ad9b62ae46d7d3f733c9511bd4718a42f878" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="66dfa8b36d52fef7cec850b84be99732a75e083f2f05ebcc70554c6a5277df85" name="avahi-mono" arch="src">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
</package>
<package pkgid="e433773e2098982e1077fa0faf84857ce5e1d079cb3fe61699134ae662291919" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
</package>
<package pkgid="e9d21ca66d31f10ffb57d224c07bb9234a85e940ba0ee0cabdab9f2386aa4725" name="avahi-qt4" arch="src">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
</package>
<package pkgid="d5243ff484b834a1fa62819a2cc341c82de344cc84321d35677703c6f4a2d02b" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
  <changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="d31a57a4ae2202bd0954014f987e273f3ac056cc7fda0cf0e992a7ca6bc3c099" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="4.3.1"/>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
</package>
<package pkgid="67199f93ab3f76993e54cf1acd1047a60524842e2d97a5e848b16f0959db6b51" name="avrdude" arch="src">
  <version epoch="0" ver="6.1" rel="8.1"/>
  <changelog author="jw@novell.com" date="1299499200">- Resurrected the changelog.
  /usr/lib/osc/source_validators/helpers/check_dates_in_changes
  misinterpretes timestamps 2010-01-01 within changelog entries as
  new changelog entries.</changelog>
  <changelog author="jw@novell.com" date="1299499201">- bnc#676024, support for attiny4313 added according to
  http://savannah.nongnu.org/patch/?7393</changelog>
  <changelog author="madworm_de.novell@spitzenpfeil.org" date="1308571200">- https://savannah.nongnu.org/patch/?7559
  DTR/RTS twiddling didn't match the Arduino 'auto-reset' hardware
  for the programmer type 'arduino'</changelog>
  <changelog author="madworm_de.novell@spitzenpfeil.org" date="1314532800">- Version 5.11 from savannah</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1317297600">- don't use download_files service - it breaks all the time
- remove builddate from binary to avoid unnecessary republising</changelog>
  <changelog author="max@suse.com" date="1318939200">- Version 5.11.1 from savannah
- Add libftdi1-devel to BuildRequires to support additional
  programmers.</changelog>
  <changelog author="jw@suse.com" date="1332331200">- Reverted to version 5.11 -- the 5.11.1 tarball was missing.</changelog>
  <changelog author="jw@suse.com" date="1353499200">- retrying sr#110452, sr#141518, so that we can finally close bnc#736064
- merged a commit that was only made to o:F</changelog>
  <changelog author="jw@suse.com" date="1353499201">- All this should have been part of my earlier submit sr#142228:
  * obsoleted upstreamed patches: tn4313.diff, avrdude_butterfly_mk.patch
  * pulled patch from o:F: avrdude-use-serial-device-for-serbb.patch
  * dropped dubious patch: avrdude-5.5.usbtiny.64bit.patch</changelog>
  <changelog author="jw@suse.com" date="1354968000">- Did not build.
- 5.11 tar balls are now missing again. retrying with 5.11.1
- typo in spec file fixed.</changelog>
  <changelog author="max@suse.com" date="1360238400">- Build from svn snapshot (last official release is too old).
- avrdude-use-serial-device-for-serbb.patch is no longer needed.
- Add UDB IDs for Arduino Leonardo and LUFA ACM bootloaders.
- Give access to programmer devices only to local users.
- Build documentation from source instead of importing pre-built
  html and pdf documentation.
- Disable documentation building on releases older than 12.3 due
  to texinfo problems.</changelog>
  <changelog author="max@suse.com" date="1360929600">- Build the info file only, no PS/PDF documentation.
- Don't require libftdi for older SUSE versions.</changelog>
  <changelog author="bugs@vdm-design.de" date="1389960000">- work around systemd-udev warnings, by moving comments in the
  udev rules file to the beginning of a line.</changelog>
  <changelog author="coolo@suse.com" date="1391860800">- set the _service to localonly</changelog>
  <changelog author="sndirsch@suse.com" date="1391860801">- no longer use an URL for the source, since the tarball is generated</changelog>
  <changelog author="max@suse.com" date="1392033600">- Bump version number to 6.1 in _service to reflect upstream.
- Generate udev rules from avrdude-usbdevices, which has a simpler
  and easier to maintain format. This also simplifies following
  further upstream changes in udev rules syntax.
- IPv6-enable the "-P net:host:port" option (avrdude-ipv6.patch).</changelog>
  <changelog author="peter.trommler@ohm-hochschule.de" date="1396526400">- include released tarball from upstream
- disable source service
- refresh patch avrdude-5.11-no-builddate.diff</changelog>
  <changelog author="kkaempf@suse.com" date="1481544000">- drop parport from 50-avrdude.rules for udev (bsc#994883)
  limit to USB</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1504008000">- cherry-pick previos change to fix in Leap (boo#1049593)</changelog>
</package>
<package pkgid="1bcd3e077101bf9d6e4d9bb2f9169defa77d04b44c313534191c84132891e6eb" name="avrdude" arch="x86_64">
  <version epoch="0" ver="6.1" rel="8.1"/>
  <changelog author="jw@novell.com" date="1299499200">- Resurrected the changelog.
  /usr/lib/osc/source_validators/helpers/check_dates_in_changes
  misinterpretes timestamps 2010-01-01 within changelog entries as
  new changelog entries.</changelog>
  <changelog author="jw@novell.com" date="1299499201">- bnc#676024, support for attiny4313 added according to
  http://savannah.nongnu.org/patch/?7393</changelog>
  <changelog author="madworm_de.novell@spitzenpfeil.org" date="1308571200">- https://savannah.nongnu.org/patch/?7559
  DTR/RTS twiddling didn't match the Arduino 'auto-reset' hardware
  for the programmer type 'arduino'</changelog>
  <changelog author="madworm_de.novell@spitzenpfeil.org" date="1314532800">- Version 5.11 from savannah</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1317297600">- don't use download_files service - it breaks all the time
- remove builddate from binary to avoid unnecessary republising</changelog>
  <changelog author="max@suse.com" date="1318939200">- Version 5.11.1 from savannah
- Add libftdi1-devel to BuildRequires to support additional
  programmers.</changelog>
  <changelog author="jw@suse.com" date="1332331200">- Reverted to version 5.11 -- the 5.11.1 tarball was missing.</changelog>
  <changelog author="jw@suse.com" date="1353499200">- retrying sr#110452, sr#141518, so that we can finally close bnc#736064
- merged a commit that was only made to o:F</changelog>
  <changelog author="jw@suse.com" date="1353499201">- All this should have been part of my earlier submit sr#142228:
  * obsoleted upstreamed patches: tn4313.diff, avrdude_butterfly_mk.patch
  * pulled patch from o:F: avrdude-use-serial-device-for-serbb.patch
  * dropped dubious patch: avrdude-5.5.usbtiny.64bit.patch</changelog>
  <changelog author="jw@suse.com" date="1354968000">- Did not build.
- 5.11 tar balls are now missing again. retrying with 5.11.1
- typo in spec file fixed.</changelog>
  <changelog author="max@suse.com" date="1360238400">- Build from svn snapshot (last official release is too old).
- avrdude-use-serial-device-for-serbb.patch is no longer needed.
- Add UDB IDs for Arduino Leonardo and LUFA ACM bootloaders.
- Give access to programmer devices only to local users.
- Build documentation from source instead of importing pre-built
  html and pdf documentation.
- Disable documentation building on releases older than 12.3 due
  to texinfo problems.</changelog>
  <changelog author="max@suse.com" date="1360929600">- Build the info file only, no PS/PDF documentation.
- Don't require libftdi for older SUSE versions.</changelog>
  <changelog author="bugs@vdm-design.de" date="1389960000">- work around systemd-udev warnings, by moving comments in the
  udev rules file to the beginning of a line.</changelog>
  <changelog author="coolo@suse.com" date="1391860800">- set the _service to localonly</changelog>
  <changelog author="sndirsch@suse.com" date="1391860801">- no longer use an URL for the source, since the tarball is generated</changelog>
  <changelog author="max@suse.com" date="1392033600">- Bump version number to 6.1 in _service to reflect upstream.
- Generate udev rules from avrdude-usbdevices, which has a simpler
  and easier to maintain format. This also simplifies following
  further upstream changes in udev rules syntax.
- IPv6-enable the "-P net:host:port" option (avrdude-ipv6.patch).</changelog>
  <changelog author="peter.trommler@ohm-hochschule.de" date="1396526400">- include released tarball from upstream
- disable source service
- refresh patch avrdude-5.11-no-builddate.diff</changelog>
  <changelog author="kkaempf@suse.com" date="1481544000">- drop parport from 50-avrdude.rules for udev (bsc#994883)
  limit to USB</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1504008000">- cherry-pick previos change to fix in Leap (boo#1049593)</changelog>
</package>
<package pkgid="f6ad7cfc51de7e6f864b6eab355077da9845381faf4fd95dbc2edfe932157e84" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.11.104" rel="20.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
  <changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
  <changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
  <changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
  <changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
  <changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
  <changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
  <changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
</package>
<package pkgid="636e03b23984008f5a87b372498cf153e61f170a79df27d018cf9fc3ed11c10e" name="aws-cli" arch="src">
  <version epoch="0" ver="1.11.104" rel="20.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
  <changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
  <changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
  <changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
  <changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
  <changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
  <changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
  <changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
</package>
<package pkgid="d33bf4784ee897939bdbccf1fe1316ba54a2c63c1dcaed51fa18646471a17d7c" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.15.40" rel="23.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
  <changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
  <changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
  <changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
  <changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
  <changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
  <changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
  <changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="c342359fc5de538cc5b3ac5d172563cd1ac384e9b691e10a2cf74443404e786b" name="aws-cli" arch="src">
  <version epoch="0" ver="1.15.40" rel="23.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
  <changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
  <changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
  <changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
  <changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
  <changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
  <changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
  <changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="2ea902fcdebd5ef0c6e6a2d54ddf66ef2f1b8e99538ee3a9f80cdfd676c35199" name="axis" arch="noarch">
  <version epoch="0" ver="1.4" rel="295.3.1"/>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="7b89d59baeb4ee50f2c64ae4f58a9bec53be912fb987efd8b781f77db040dfb4" name="axis" arch="src">
  <version epoch="0" ver="1.4" rel="295.3.1"/>
  <changelog author="dbornkessel@suse.de" date="1136462400">- Current version 1.2.3 from JPackage.org</changelog>
  <changelog author="dbornkessel@suse.de" date="1178107200">- added unzip to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="1f029a3ba6e9fd95c3488787289773803fff14a9d3fdfdff8a1e65230dc02b36" name="axis-javadoc" arch="noarch">
  <version epoch="0" ver="1.4" rel="295.3.1"/>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="6339f8ca3c44add20efabca123dbf27ad19f635d485d6e911d7dc8df01b9cd9c" name="axis-manual" arch="noarch">
  <version epoch="0" ver="1.4" rel="295.3.1"/>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="2ee8943bea0766411046cacf863a33fd4e727d630fda4cc1d8598871aec743a7" name="backintime" arch="noarch">
  <version epoch="0" ver="1.1.20" rel="6.1"/>
  <changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
  <changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
  <changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
  <changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
  <changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
  <changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
  <changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
  <changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
  <changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
  <changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>
</package>
<package pkgid="a19ef7f40134b7ee7c2a003aada7537235d88cc783f1da9e73d3a49c7ccabb07" name="backintime" arch="src">
  <version epoch="0" ver="1.1.20" rel="6.1"/>
  <changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
  <changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
  <changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
  <changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
  <changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
  <changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
  <changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
  <changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
  <changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
  <changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>
</package>
<package pkgid="0380cb1c20146f30fec5f659793d333963e8575560eadff88e631afccab8db1c" name="backintime-lang" arch="noarch">
  <version epoch="0" ver="1.1.20" rel="6.1"/>
  <changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
  <changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
  <changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
  <changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
  <changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
  <changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
  <changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
  <changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
  <changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
  <changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>
</package>
<package pkgid="2b78b0359b1e56df2c3fc068e2cdd8ef862c7dae9373adb3a973d65dbd974c80" name="backintime-qt4" arch="noarch">
  <version epoch="0" ver="1.1.20" rel="6.1"/>
  <changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
  <changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
  <changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
  <changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
  <changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
  <changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
  <changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
  <changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
  <changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
  <changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
  <changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>
</package>
<package pkgid="47997c8de258cc6ed8fd49ec65b8790ff001020fce29c31acf05d8c188353182" name="bash" arch="src">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="627a9398ad02aa4484dd4b30d77be1349113370f06e632496c8205803f46d262" name="bash" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="85d0a3d1ad5b73efb608338609c0edc48f7b229ec7ae81509d00da1a2e7bc395" name="bash" arch="src">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="ea9acddcc0475dcdca3edb435ef792fd688053db673d4eda3ffeebbcee76eec4" name="bash" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="301cf02494a8dc563cd67b4cad3963238ddda4b146cf0582cc6b2108a1d17f88" name="bash" arch="src">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="a510b311251580466826bc9dfb0dc01b77ba7ef41a2b496ff982c530b549dbba" name="bash" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="283cfec6c3f330c7aa1581b3709b825a505b4065cbe150fd8a3f5d6b8d8447d5" name="bash" arch="src">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="415621e6597da303f431208d81209a37da6388129d4ff0b362fc9c470f6e99c9" name="bash" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="ecb2483b4be187cde824f4682ce84f31221aa304858a302b2462398d70b4bacd" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="6be4c44ace6dd99a979be703c5b40bbae06fb785a322cdbe2af8821e03e8dce3" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="0c23c4bcb7cda5640b59588623104cf0fae462b5ad34f67ca1f2387812723022" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="d453bf9704e3448f5cf4a5165609e9dc5175ddc511bd35dd5c86c295e8d2a516" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="64cdd0b19784bedabf1de6ac3e2ae65f1ae0caa363c71a9e1165e081759683e2" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="c999b5c5d45a1553742ff5942d204bea36f7494489551abed819affff0535b94" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="775f6e5f674972a94bdc91c8e0bf0f89bef799def7ee210ff99e776f65fed1c7" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="3b9f20fb24181f051129feafaac4b406291149a63a362c9fe08c17f27093d5ac" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="0af5ca40c9966f6f6d10fe67e57d1c1a1ab5afd1e9e17d6edfb204b0e3aff895" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="a5676fd4ec6fb533695807ed508cd059345d443de357a755f8b64972b5804ae7" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="bb0e0931e008f6e5063940ddc7579462d91b2ddca99c7c8ab724e70cf08ebc6a" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="49a3febc9d55065a0b01f44c4bb0b288fe7d656c622c5588617b324d339e9910" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="f82f63328bedfc6d483ac34a0f832cfc105bdfbb7eabaceef855f2e73f8d5288" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.12.1"/>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540555200">- Disable for patch bash-4.3-redir.patch due bsc#1113117 as it
  breaks bug compatiblity</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540641600">- Really disable patch bash-4.3-redir.patch</changelog>
</package>
<package pkgid="3829298c80dd084e5cac99fc1b80b9b14a09e4aa9a9155d7754427dc7a0b2da9" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.3.1"/>
  <changelog author="jdelvare@suse.de" date="1417608000">- Fix the sed command that fixes up the patch headers. It was
  printing a duplicate header line, which suprisingly did not
  confuse patch, but could in the future.
- Fix all patches that had the duplicate header line issue.</changelog>
  <changelog author="werner@suse.de" date="1420804800">- Add upstream patch bash43-031
  The new nameref assignment functionality introduced in bash-4.3 did not perform
  enough validation on the variable value and would create variables with
  invalid names.
- Add upstream patch bash43-032
  When bash is running in Posix mode, it allows signals -- including SIGCHLD --
  to interrupt the `wait' builtin, as Posix requires.  However, the interrupt
  causes bash to not run a SIGCHLD trap for all exited children.  This patch
  fixes the issue and restores the documented behavior in Posix mode.
- Add upstream patch bash43-033
  Bash does not clean up the terminal state in all cases where bash or
  readline  modifies it and bash is subsequently terminated by a fatal signal.
  This happens when the `read' builtin modifies the terminal settings, both
  when readline is active and when it is not.  It occurs most often when a script
  installs a trap that exits on a signal without re-sending the signal to itself.</changelog>
  <changelog author="werner@suse.de" date="1421409600">- Remove -DMUST_UNBLOCK_CHLD(=1) as this breaks waitchild(2) on linux</changelog>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
</package>
<package pkgid="629236da622cba9bedf66490dd6d6cab048c2490408bfc917c8bc7f91f021e10" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.6.1"/>
  <changelog author="werner@suse.de" date="1424260800">- Do not restart all signal handlers for bash 4.3 as this breaks
  trap handler in subshells waotiug for a process</changelog>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: Split changes to shell.h to a separate
  patch "bash-4.3-include-unistd.dif", as the loadables build just
  fine without these changes.
- bash-4.3-loadables.dif: Drop all header file inclusion fixups,
  upstream fixed the problem differently 5 years ago.</changelog>
  <changelog author="jdelvare@suse.de" date="1425470401">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
</package>
<package pkgid="5b3b64dfc8752603ee2d0f3f71a1c849eeec3de62754f48f7d7d87f6fe71e86a" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.3" rel="83.9.1"/>
  <changelog author="jdelvare@suse.de" date="1425470400">- bash-4.3-loadables.dif: One more warning fixed, in
  examples/loadables/logname.c.
- bash-4.3-loadables.dif: Reverted one warning fix, which was
  introducing another warning and possibly a bug.</changelog>
  <changelog author="meissner@suse.com" date="1431950400">- move info deletion to %preun sections</changelog>
  <changelog author="werner@suse.de" date="1432814400">- Add upstream patch bash43-034
  If neither the -f nor -v options is supplied to unset, and a name argument is
  found to be a function and unset, subsequent name arguments are not treated as
  variables before attempting to unset a function by that name.
- Add upstream patch bash43-035
  A locale with a long name can trigger a buffer overflow and core dump.  This
  applies on systems that do not have locale_charset in libc, are not using
  GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
- Add upstream patch bash43-036
  When evaluating and setting integer variables, and the assignment fails to
  create a variable (for example, when performing an operation on an array
  variable with an invalid subscript), bash attempts to dereference a null
  pointer, causing a segmentation violation.
- Add upstream patch bash43-037
  If an associative array uses `@' or `*' as a subscript, `declare -p' produces
  output that cannot be reused as input.
- Add upstream patch bash43-038
  There are a number of instances where `time' is not recognized as a reserved
  word when the shell grammar says it should be.</changelog>
  <changelog author="coolo@suse.com" date="1435752000">- add bash-4.3-perl522.patch to fix texi2html for perl 5.22
  (defined(@array) has been deprecated since at least 2012)</changelog>
  <changelog author="werner@suse.de" date="1441022400">- Add upstream patch bash43-039
  Using the output of `declare -p' when run in a function can result in variables
  that are invisible to `declare -p'.  This problem occurs when an assignment
  builtin such as `declare' receives a quoted compound array assignment as one of
  its arguments.
- Add upstream patch bash43-040
  There is a memory leak that occurs when bash expands an array reference on
  the rhs of an assignment statement.
- Add upstream patch bash43-041
  There are several out-of-bounds read errors that occur when completing command
  lines where assignment statements appear before the command name.  The first
  two appear only when programmable completion is enabled; the last one only
  happens when listing possible completions.
- Add upstream patch bash43-042
  There is a problem when parsing command substitutions containing `case'
  commands within pipelines that causes the parser to not correctly identify
  the end of the command substitution.</changelog>
  <changelog author="werner@suse.de" date="1444996800">- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1445256000">- Define the USE_MKTEMP and USE_MKSTEMP cpp macros as the
  implementation is already there.
- Add patch bash-4.3-pathtemp.patch to allow root to clear the
  file systems.  Otherwise the completion does not work if /tmp
  if full (ENOSPC for here documents)</changelog>
  <changelog author="werner@suse.de" date="1459512000">- Add patch bash-4.3-async-bnc971410.dif
  this is a backport from bash-4.4-rc1 and might help to avoid to
  run onto a not existing child pointer, bnc#971410.
- Skip patch bash-4.2-boo976776.dif which is a backport from current
  bash-4.3 to fix a crash if ~/.bash_history is empty (boo#976776)</changelog>
  <changelog author="werner@suse.de" date="1474545600">- Add upstream patch bash-4.3-prompt-string-comsub.patch to
  fix minor VUL-1: CVE-2016-0634 bash: Arbitrary code execution via
  malicious hostname (bsc#1000396)</changelog>
  <changelog author="werner@suse.de" date="1475582400">- Add upstream patch bash-4.3-PS4-fix.patch based on a0c0a00f to
  fix minor VUL-1: CVE-2016-7543: bash SHELLOPTS+PS4 (bsc#1001299)</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch bash-3.2-CVE20169401-simple-segv.patch even if
  upstream says it is not a security issue (bsc#1010845)</changelog>
  <changelog author="werner@suse.de" date="1493985600">- Add upstream patch bash-4.3-newline-in-arithmetics.patch
  to fix bsc#1035371 .. syntax error with expr in loops</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Add patch bash-4.3-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Add a patch bash-4.3-SJIS.patch which is by default disabled
  for bsc#1065158</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1512734401">- Modify bash-4.3-SJIS.patch to get it final work</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.3-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add upstream commits to add all bug fixes
  bash43-043 -- Avoid sigsegv when lastpipe option is enabled
  bash43-044 -- A typo prevents the `compat42' shopt option from working as intended.
  bash43-045 -- Help the shell to process any pending traps at redirection
  bash43-046 -- Avoid sigsegv due incorrect conversion from an indexed to associative array
  bash43-047 -- Avoid expansion of escape sequences in HOSTNAME in prompt
  bash43-048 -- Avoid `xtrace' attack over $PS4
- Remove obsolate patches
  bash-4.3-prompt-string-comsub.patch for bash43-047
  bash-4.3-PS4-fix.patch for bash43-048
- Add patch bash-4.3-redir.patch to resolve inconsistent behaviour
  regarding expansion of here strings  (bsc#1094121)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537790400">- Add patch bash-4.3-boo1107430.dif to make a null string with a
  matching pattern to append replacement to null string (boo#1107430)</changelog>
</package>
<package pkgid="34c75b0f65c5ee787bacf9e8086dc0b0a8b1f8f9a5a9b53e33a14bc042c55dc7" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="12.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="961d837f1652a99dd7f94013259b77d08bb7a76a23e6e04a70078353034c5403" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="12.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="a0cf8d2cb800b5604b5ceec1b4abe8dd1ffd2354d6a360fe13d4959f1fd19e81" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="12.4.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="af019b63e42993be4d0a5558d3fc23cf3eb8e15f8da0471843f838488f166272" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="12.4.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="40e0ee3516960759e298511daf548957d61f383a31b4a1936513a7441751b963" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k4.4.114_42" rel="12.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="8ee06f08c8927c5285865c7efc192ebf3c0f5ff760fa72db075f34cd1be37954" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k4.4.132_53" rel="12.4.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
</package>
<package pkgid="8423ff8d1912682b5cdb0fe6bc863bf83834ccf7acab10990ecd27377fd0fe17" name="bind" arch="src">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="ffaa30faa0d67e1eed49d180a0e8e0e83180d67223ebcb58d33fbdd74f80b0ad" name="bind" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="4f0cc2532d6537792aed6d1cfb44e07d279348d92afba4afbcc04945359f71e4" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="fb268d88a1ebb563b5c1f2862c352099af9ed4df9b7100a9550a0a86f18d95fb" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="0ef7c39710e6e24e041505c68a8406490847575dda4e1c84bbe575318a111543" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="51784b36d0341c09b1d0642ecbea7f1fd02fd27967af320990d4e9b530b19425" name="bind-libs-32bit" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="e7db60eafb3da4dc2eefe0b357d0e0c14dfc119f16dc78abf81ca5fceb2e237d" name="bind-libs" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="9a7f435e6c9085f62f7b8e220bde9bbcf3edf8a1fab4bad27789be5d5b4a7702" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="c963a6f2ecc3a89d813cb2e08a32db7e109553603d1b463935ffdea20d1b0ff8" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.9.9P1" rel="53.1"/>
  <changelog author="max@suse.com" date="1421064000">- Security update 9.9.6P1:
  * A flaw in delegation handling could be exploited to put named
    into an infinite loop.  This has been addressed by placing
    limits on the number of levels of recursion named will allow
    (default 7), and the number of iterative queries that it will
    send (default 50) before terminating a recursive query
    (CVE-2014-8500, bnc#908994).
  * The recursion depth limit is configured via the
    "max-recursion-depth" option, and the query limit via the
    "max-recursion-queries" option.
- Remove rpz2+rl-9.9.5.patch, because no rpz2 patch for 9.9.6 is
  available from the author and rl support already went upstream
  in 9.9.3.</changelog>
  <changelog author="max@suse.com" date="1435838400">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).</changelog>
  <changelog author="max@suse.com" date="1435924800">- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
  <changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
  <changelog author="max@suse.com" date="1438084800">- Fix bind-CVE-2015-5477.patch.</changelog>
  <changelog author="max@suse.com" date="1441195200">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
  <changelog author="max@suse.com" date="1443441600">- Remove the start/stop dependency of named and lwresd on remote-fs
  to break a service dependency cycle (bsc#947483).</changelog>
  <changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
  <changelog author="max@suse.com" date="1453118400">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
  <changelog author="max@suse.com" date="1457524800">- Fix two assertion failures that can lead to remote DoS:
  * CVE-2016-1285, bsc#970072
  * CVE-2016-1286, bsc#970073
  * bind-CVE-2016-1285.patch contains both fixes.</changelog>
  <changelog author="max@suse.com" date="1464782400">- Update to 9.9.9-P1:
  * Adds quotas to be used in recursive resolvers that are under
    high query load for names in zones whose authoritative
    servers are nonresponsive or are experiencing a denial of
    service attack (fate#320694).
  * Obsoletes all CVE patches that were added to 9.9.6 over time.
- Make /var/lib/named owned by the named user (bsc#908850).
- Fetch the latest source signing key from upstream.
- Add systemd service macros (bsc#977657).
- --enable-fetchlimit (fate#320694 bsc#983505)</changelog>
  <changelog author="sflees@suse.de" date="1474632000">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-2776, bsc#1000362
  * bind-CVE-2016-2776.patch</changelog>
  <changelog author="sflees@suse.de" date="1477915200">- Fix an assertion failure that can lead to remote DoS:
  * CVE-2016-8864, bsc#1007829
  * bind-CVE-2016-8864.patch
- Fix the hostname in ldapdump to be valid. bsc#965748
  * bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="psimons@suse.com" date="1483790400">- Apply "bind-CVE-2016-9131.patch" to fix a potential assertion
  failure that could have been triggered by a malformed response to
  an ANY query. [CVE-2016-9131, bsc#1018700, bsc#1018699]
- Apply "bind-CVE-2016-9147.patch" to fix a potential assertion
  failure that could have been triggered by responding to a query
  with inconsistent DNSSEC information. [CVE-2016-9147,
  bsc#1018701, bsc#1018699]
- Apply "bind-CVE-2016-9444.patch" to fix potential assertion
  failure that could have been triggered by DNS responses that
  contain unusually-formed DS resource records. [CVE-2016-9444,
  bsc#1018702, bsc#1018699]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1487160000">- Fix assertion failure or a NULL pointer read for configurations using both DNS64 and RPZ
  * CVE-2017-3135, bsc#1024130
  * bind-CVE-2017-3135.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1491912000">- Fix for Bug 1020983 - root umask 077 screws up the /etc/init.d/named init script
- Fix a segmentation fault for long query name
  * CVE-2016-2775, bsc#989528
  * bind-CVE-2016-2775.patch
- Fix a crash of secondaries from a malicious primary DNS servers
  * CVE-2016-6170, bsc#987866
  * bind-CVE-2016-6170.patch
- Fix multiple assertion failures
  * CVE-2017-3136, bsc#1033466
  * CVE-2017-3137, bsc#1033467
  * CVE-2017-3138, bsc#1033468
  * bind-CVE-2017-3136.patch
  * bind-CVE-2017-3137.patch
  * bind-CVE-2017-3138.patch</changelog>
  <changelog author="psimons@suse.com" date="1498737600">- Added bind-CVE-2017-3142-and-3143.patch to fix a security issue
  where an attacker with the ability to send and receive messages
  to an authoritative DNS server was able to circumvent TSIG
  authentication of AXFR requests. A server that relies solely on
  TSIG keys for protection with no other ACL protection could be
  manipulated into (1) providing an AXFR of a zone to an
  unauthorized recipient and (2) accepting bogus Notify packets.
  [bsc#1046554, CVE-2017-3142, bsc#1046555, CVE-2017-3143]</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516795200">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968000">- Update named.root file (bsc#1040039)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516968001">- Update bind.keys for DNSSEC root KSK rollover (bsc#1047184)</changelog>
</package>
<package pkgid="f342673957c2519fd74dba7465a9b3af89b7cf324182ef4e6ecd4aeab63d1915" name="binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="de76ebe9eee8ba410c5f27a5f45eadc9d9f96ea4555d487c34c154382a980852" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="958837a2a19cea8601e4003018703c92d6f99c6e09c1c03d92a9035a69a1c00c" name="binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="e15bb04a0a7f7bb3fca60a2fc3a7ce487d723572f24c51fb4650878f288ff07f" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="1e9398b2dc34d0045005f240ff3b409d269c4b9fd79f688c8724a900ebaf4c7d" name="binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="191be3e86863a1229339820133acee1cb3c2753834722161897d1a0d5cfd17dc" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="744761b5c8f598946525da46073c63f712b588b9ec9cf2d8608ae92ec93779dd" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="caf477323b0b3c04602153d5e10fb140dc70cbf46a7dfa1b4a9f670e25a12735" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="9c681c9a7242acc60375360b83aec10493558b537b51f0c726bfd5558e8bf225" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="27004ceb513d8bc5f8bfeb872cd5cf822be4280867af5b861e74e92f9478d541" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="761d933bab12237808756bb9625f79c609aca438de2449ff85fef97b400b32e7" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="37e5d213901c9c0cc7e151ab05a8a32b16578ecf1a4cdd3ec8edd5a228d9429d" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="7db898ab8690e854b1b4978f720469c463be5fe6005db1157cb07bd5e3a24d6c" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="6fe33ddd8a8e319be2a3b8cc3b40128741c310c2076f85d086f2e35d61855f4c" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="6ac1764c902e096773cf7266a42612bbb8e6e72b78dac0c1e84aa382dedb5bd3" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="9f947b23d5e368d15e1e6841cfbe66f8fe89ebdd1c47f1367450d21a4a96949e" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.2" rel="7.3.1"/>
  <changelog author="trenn@suse.de" date="1397131200">- Remove eth* check, devices might have been renamed already bnc#869614
  Add biosdevname_udevrule_rename_all_network_devices.patch
- Remove old mkinitrd stuff and replace it with dracut rpm macros to ensure
  the initrd is rebuild if biosdevname got installed or updated.</changelog>
  <changelog author="trenn@suse.de" date="1398168000">- Take mainline patch to fix (bnc#869614)
  Modified: biosdevname_udevrule_rename_all_network_devices.patch
- Remove %config from etc rule to please obs checker
- Remove mkinitrd setup script</changelog>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="trenn@suse.de" date="1497009600">- Do not rename non-Ethernet network interfaces (bsc#1042187)
  * Add: biosdevname_only_ethernet.patch</changelog>
  <changelog author="trenn@suse.de" date="1498046400">- Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM
  Strings are present in VFs (bsc#1042185)
  * Add: biosdevname_avoid_duplicates.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="cfea83e9353ea7b2285ac54cac936eb8bf85ce990782dd417cc9ea6a5b33a70d" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="7.3.1"/>
  <changelog author="trenn@suse.de" date="1397131200">- Remove eth* check, devices might have been renamed already bnc#869614
  Add biosdevname_udevrule_rename_all_network_devices.patch
- Remove old mkinitrd stuff and replace it with dracut rpm macros to ensure
  the initrd is rebuild if biosdevname got installed or updated.</changelog>
  <changelog author="trenn@suse.de" date="1398168000">- Take mainline patch to fix (bnc#869614)
  Modified: biosdevname_udevrule_rename_all_network_devices.patch
- Remove %config from etc rule to please obs checker
- Remove mkinitrd setup script</changelog>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="trenn@suse.de" date="1497009600">- Do not rename non-Ethernet network interfaces (bsc#1042187)
  * Add: biosdevname_only_ethernet.patch</changelog>
  <changelog author="trenn@suse.de" date="1498046400">- Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM
  Strings are present in VFs (bsc#1042185)
  * Add: biosdevname_avoid_duplicates.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="6b58bc153b6e88e4586c95b4ee078e8f8f0032425aabf355e5fc40c0c0070393" name="bitcoin" arch="src">
  <version epoch="0" ver="0.16.3" rel="7.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="807f24f38a3128f2dec3c9ca3d3b239f804b11c4aac21f0f01dbfbfd13ece780" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="7.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="124ecfcf738cd36151b520c397c8445aa3cf718681775b155eb6c34c85337a5f" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="7.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="7d1c4339ee2cd04c1fb44ca152066884cee4d9e336b3f1f3a60397ef35ad3ad9" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="7.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="d33c293136241e2df7a52cb1d346d19cee745c0f3507520f413c9537d56b2a1c" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="7.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="f1701e88e67de214bb10f2be51593ad9c985d203fe95fc4bd44516a9961aecd5" name="bitlbee-facebook" arch="src">
  <version epoch="0" ver="1.1.2" rel="5.1"/>
  <changelog author="tampakrap@opensuse.org" date="1471003200">- Initial commit</changelog>
  <changelog author="tampakrap@opensuse.org" date="1492689600">- Version bump 1.1.1
  Fixes one last issue to the server side changes from last week.
  - Send orca-formatted user agent for all HTTP requests too. Fixes "Failed
    to parse thread information" errors when joining channels.
  This is in addition to the connection error fixes mentioned in the previous
  release. Quoting from the previous release: "Fix connection errors after
  facebook discontinued support for old versions of facebook messenger for
  android. While most of the protocol implementation was already above that
  version, there was a subtle change that broke fetching of sync_sequence_id,
  and the previously empty MQTT user agent string is now considered an old
  version too (#138)"
  I waited a few days before releasing this to ensure things calm down,
  hopefully it continues like this.
- Version 1.1.0
  Long overdue release, with a year worth of changes. This is now the minimum
  required version.
  - Fix connection errors after facebook discontinued support for old versions
    of facebook messenger for android. While most of the protocol
    implementation was already above that version, there was a subtle change
    that broke fetching of sync_sequence_id, and the previously empty MQTT user
    agent string is now considered an old version too (#138)
  - Fix receiving topic/groupchat membership events (#119)
  - Fix creating channels, inviting, kicking members (#120)
  - Fix setting channel topics (#121)
  - Fix contacts pagination for accounts with more than 500 friends (#74)
  - Fix chats with only two members including self, like the Marketplace ones
  - Fix crash on some kinds of SSL connection failure (#82)
  - Fix crash when glib is compiled with G_ENABLE_DEBUG
  - Deduplicate echoes of sent messages (#76)
  - Set a non-empty HTTP user agent for api/graphql queries, since the empty
    user agent often gets flagged for suspicious activity (#108)
  - Prevent disconnections due to contacts with incomplete profiles (#89)
  - Prevent disconnections on invalid attachment errors (#73)
  - Prevent disconnections when trying to join a chat after being kicked (#244)
  - Use FetchContactsDeltaQuery to incrementally sync contacts. Uses less
    traffic, can be done more often and fixes issues with non-friends (#116)
  - Parse URL attachments generated by the android share feature (#97)
  - Add mark_read_reply setting to only mark messages as read on reply (#69)
  - Add support for the bitlbee 3.5 plugin information API (bitlbee 3.4 is
    still supported by this version, but will be dropped in the next one)
  - Improve url comparison to avoid showing urls twice on attachments</changelog>
  <changelog author="tampakrap@opensuse.org" date="1505563200">- Version bump 1.1.2
  - Fix "Failed to read thrift" with unknown fields in /t_p payload
  - Fix rare login hang/timeout when the last page of contacts is empty</changelog>
</package>
<package pkgid="d908e012722041a7ac0787464c1b69da06060731c60008aa44349856b3a9ee10" name="bitlbee-facebook" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="5.1"/>
  <changelog author="tampakrap@opensuse.org" date="1471003200">- Initial commit</changelog>
  <changelog author="tampakrap@opensuse.org" date="1492689600">- Version bump 1.1.1
  Fixes one last issue to the server side changes from last week.
  - Send orca-formatted user agent for all HTTP requests too. Fixes "Failed
    to parse thread information" errors when joining channels.
  This is in addition to the connection error fixes mentioned in the previous
  release. Quoting from the previous release: "Fix connection errors after
  facebook discontinued support for old versions of facebook messenger for
  android. While most of the protocol implementation was already above that
  version, there was a subtle change that broke fetching of sync_sequence_id,
  and the previously empty MQTT user agent string is now considered an old
  version too (#138)"
  I waited a few days before releasing this to ensure things calm down,
  hopefully it continues like this.
- Version 1.1.0
  Long overdue release, with a year worth of changes. This is now the minimum
  required version.
  - Fix connection errors after facebook discontinued support for old versions
    of facebook messenger for android. While most of the protocol
    implementation was already above that version, there was a subtle change
    that broke fetching of sync_sequence_id, and the previously empty MQTT user
    agent string is now considered an old version too (#138)
  - Fix receiving topic/groupchat membership events (#119)
  - Fix creating channels, inviting, kicking members (#120)
  - Fix setting channel topics (#121)
  - Fix contacts pagination for accounts with more than 500 friends (#74)
  - Fix chats with only two members including self, like the Marketplace ones
  - Fix crash on some kinds of SSL connection failure (#82)
  - Fix crash when glib is compiled with G_ENABLE_DEBUG
  - Deduplicate echoes of sent messages (#76)
  - Set a non-empty HTTP user agent for api/graphql queries, since the empty
    user agent often gets flagged for suspicious activity (#108)
  - Prevent disconnections due to contacts with incomplete profiles (#89)
  - Prevent disconnections on invalid attachment errors (#73)
  - Prevent disconnections when trying to join a chat after being kicked (#244)
  - Use FetchContactsDeltaQuery to incrementally sync contacts. Uses less
    traffic, can be done more often and fixes issues with non-friends (#116)
  - Parse URL attachments generated by the android share feature (#97)
  - Add mark_read_reply setting to only mark messages as read on reply (#69)
  - Add support for the bitlbee 3.5 plugin information API (bitlbee 3.4 is
    still supported by this version, but will be dropped in the next one)
  - Improve url comparison to avoid showing urls twice on attachments</changelog>
  <changelog author="tampakrap@opensuse.org" date="1505563200">- Version bump 1.1.2
  - Fix "Failed to read thrift" with unknown fields in /t_p payload
  - Fix rare login hang/timeout when the last page of contacts is empty</changelog>
</package>
<package pkgid="a747a98fecab230ad15cda28c7111953debd67f28e4bdfafc61939c829cd091f" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="12.3.1"/>
  <changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="aeszter@gwdg.de" date="1550145600">- Add 2-lapack-spurious-refs.patch
  * Remove test matrix generators
  * This fixes boo#1033770</changelog>
</package>
<package pkgid="87a996959204e81e20a50b6585e530becc99ee7fbbe834abdec4120603f23445" name="blas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="12.3.1"/>
  <changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="aeszter@gwdg.de" date="1550145600">- Add 2-lapack-spurious-refs.patch
  * Remove test matrix generators
  * This fixes boo#1033770</changelog>
</package>
<package pkgid="2a564aad46b629864e0b3371e1a9b98ee21a2d8e9aad39dd081f47b8c70a5593" name="blas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="12.3.1"/>
  <changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="aeszter@gwdg.de" date="1550145600">- Add 2-lapack-spurious-refs.patch
  * Remove test matrix generators
  * This fixes boo#1033770</changelog>
</package>
<package pkgid="32c75c01b3816ae4de2da2a8023edf3c37e1b62a2e4fdfe729f3299c8c8f3c09" name="blas-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="12.3.1"/>
  <changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="aeszter@gwdg.de" date="1550145600">- Add 2-lapack-spurious-refs.patch
  * Remove test matrix generators
  * This fixes boo#1033770</changelog>
</package>
<package pkgid="4da02e5c93d85977588a13e212da22547eabcaef7499ddd7b9124ef73e03522d" name="blog" arch="src">
  <version epoch="0" ver="2.19" rel="3.3.1"/>
  <changelog author="werner@suse.de" date="1452859200">- First initial package after splitting apart from sysvinit
  * Now blogd can replace plymouth(9) even from initrd
  * Also blogd is able to handle password requests from
    from systemd API
  * The blogd daemon writes out console messages even on reboot
    or halt up to the file systems become unavailable.
  * No locking of the console devices, no frame buffer switching.</changelog>
  <changelog author="werner@suse.de" date="1453464000">- Clean up service uits for close and umount</changelog>
  <changelog author="werner@suse.de" date="1454587200">- Let libblogger become a shared library</changelog>
  <changelog author="meissner@suse.com" date="1455105600">- add blog-rpmlintrc. The all-manual handling of systemd services
  is required according to Werner.</changelog>
  <changelog author="werner@suse.de" date="1455883200">- Bug fix version: Handle chached password request gracefully</changelog>
  <changelog author="werner@suse.de" date="1455883201">- Make clear that blog is split off from sysvinit-tools
- Avoid to be tagged with GLIBC_PRIVATE
- Use libblogger.so with version, that is major and minor</changelog>
  <changelog author="schwab@suse.de" date="1456142400">- remove-bad-symbol-use.patch: Remove bad use of internal glibc interface
  (bnc#967437)</changelog>
  <changelog author="werner@suse.de" date="1456142401">- Do not use privata glibc API (boo#967437) but implement
  missing shared memory mkstemp()
- Remove patch remove-bad-symbol-use.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1485518400">- This was an initial submit from Factory to SLES12-SP3 due to
  FATE #320593</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
</package>
<package pkgid="ccde631c11030bd52d548bb604c59b83e35b239f9fd7474821374d3b4b7bb3a4" name="blog" arch="x86_64">
  <version epoch="0" ver="2.19" rel="3.3.1"/>
  <changelog author="werner@suse.de" date="1452859200">- First initial package after splitting apart from sysvinit
  * Now blogd can replace plymouth(9) even from initrd
  * Also blogd is able to handle password requests from
    from systemd API
  * The blogd daemon writes out console messages even on reboot
    or halt up to the file systems become unavailable.
  * No locking of the console devices, no frame buffer switching.</changelog>
  <changelog author="werner@suse.de" date="1453464000">- Clean up service uits for close and umount</changelog>
  <changelog author="werner@suse.de" date="1454587200">- Let libblogger become a shared library</changelog>
  <changelog author="meissner@suse.com" date="1455105600">- add blog-rpmlintrc. The all-manual handling of systemd services
  is required according to Werner.</changelog>
  <changelog author="werner@suse.de" date="1455883200">- Bug fix version: Handle chached password request gracefully</changelog>
  <changelog author="werner@suse.de" date="1455883201">- Make clear that blog is split off from sysvinit-tools
- Avoid to be tagged with GLIBC_PRIVATE
- Use libblogger.so with version, that is major and minor</changelog>
  <changelog author="schwab@suse.de" date="1456142400">- remove-bad-symbol-use.patch: Remove bad use of internal glibc interface
  (bnc#967437)</changelog>
  <changelog author="werner@suse.de" date="1456142401">- Do not use privata glibc API (boo#967437) but implement
  missing shared memory mkstemp()
- Remove patch remove-bad-symbol-use.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1485518400">- This was an initial submit from Factory to SLES12-SP3 due to
  FATE #320593</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
</package>
<package pkgid="a693060ebd1406bc9da2cd55be5402425a54c341e55192ce7131a81ae71436a6" name="blog-devel" arch="x86_64">
  <version epoch="0" ver="2.19" rel="3.3.1"/>
  <changelog author="werner@suse.de" date="1452859200">- First initial package after splitting apart from sysvinit
  * Now blogd can replace plymouth(9) even from initrd
  * Also blogd is able to handle password requests from
    from systemd API
  * The blogd daemon writes out console messages even on reboot
    or halt up to the file systems become unavailable.
  * No locking of the console devices, no frame buffer switching.</changelog>
  <changelog author="werner@suse.de" date="1453464000">- Clean up service uits for close and umount</changelog>
  <changelog author="werner@suse.de" date="1454587200">- Let libblogger become a shared library</changelog>
  <changelog author="meissner@suse.com" date="1455105600">- add blog-rpmlintrc. The all-manual handling of systemd services
  is required according to Werner.</changelog>
  <changelog author="werner@suse.de" date="1455883200">- Bug fix version: Handle chached password request gracefully</changelog>
  <changelog author="werner@suse.de" date="1455883201">- Make clear that blog is split off from sysvinit-tools
- Avoid to be tagged with GLIBC_PRIVATE
- Use libblogger.so with version, that is major and minor</changelog>
  <changelog author="schwab@suse.de" date="1456142400">- remove-bad-symbol-use.patch: Remove bad use of internal glibc interface
  (bnc#967437)</changelog>
  <changelog author="werner@suse.de" date="1456142401">- Do not use privata glibc API (boo#967437) but implement
  missing shared memory mkstemp()
- Remove patch remove-bad-symbol-use.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1485518400">- This was an initial submit from Factory to SLES12-SP3 due to
  FATE #320593</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
</package>
<package pkgid="8710353ba4d07a505ec788a4f9a402061f7128506c05e3a05169025863b2cb1c" name="blog-plymouth" arch="x86_64">
  <version epoch="0" ver="2.19" rel="3.3.1"/>
  <changelog author="werner@suse.de" date="1452859200">- First initial package after splitting apart from sysvinit
  * Now blogd can replace plymouth(9) even from initrd
  * Also blogd is able to handle password requests from
    from systemd API
  * The blogd daemon writes out console messages even on reboot
    or halt up to the file systems become unavailable.
  * No locking of the console devices, no frame buffer switching.</changelog>
  <changelog author="werner@suse.de" date="1453464000">- Clean up service uits for close and umount</changelog>
  <changelog author="werner@suse.de" date="1454587200">- Let libblogger become a shared library</changelog>
  <changelog author="meissner@suse.com" date="1455105600">- add blog-rpmlintrc. The all-manual handling of systemd services
  is required according to Werner.</changelog>
  <changelog author="werner@suse.de" date="1455883200">- Bug fix version: Handle chached password request gracefully</changelog>
  <changelog author="werner@suse.de" date="1455883201">- Make clear that blog is split off from sysvinit-tools
- Avoid to be tagged with GLIBC_PRIVATE
- Use libblogger.so with version, that is major and minor</changelog>
  <changelog author="schwab@suse.de" date="1456142400">- remove-bad-symbol-use.patch: Remove bad use of internal glibc interface
  (bnc#967437)</changelog>
  <changelog author="werner@suse.de" date="1456142401">- Do not use privata glibc API (boo#967437) but implement
  missing shared memory mkstemp()
- Remove patch remove-bad-symbol-use.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1485518400">- This was an initial submit from Factory to SLES12-SP3 due to
  FATE #320593</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
</package>
<package pkgid="b6cd2ef1e0726bdbeb84b16ab5b287ad6924e768de7e325f7f74125ed47aa5e9" name="bluefish" arch="src">
  <version epoch="0" ver="2.2.10" rel="7.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="sbrabec@suse.cz" date="1140782400">- Improved Categories.</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
  <changelog author="aj@suse.de" date="1157457600">- Cleanup BuildRequires.</changelog>
  <changelog author="lrupp@suse.de" date="1184673600">- use /usr for builds &gt; openSUSE 10.2
- Update to 1.0.7:
  + Updated translations: Finnish, French, German, Japanese,
    Norwegian, Polish, Swedish
  + Fixes Tcl highlighting
  + Fixes a bug when trying to save a file with a new install and
    a file has never been opened or a project is not open.
    Closes Bluefish bug #360401.
  + Fix a bug where Bluefish would crash when deleting
    multiple bookmarks.
  + Fix a bookmark memory leak
  + README: more complete README
  + Data filetypes: adds the .pm extension for Perl files.
    Closes Bluefish bug #343569.
  + Highlighting: small fix to XML highlighting (adding general
    support for namespaces). Highlight numbers in Java.
  + Adds XTHTM 1.1 DOCTYPE in creators. Closes Bluefish bug #338586
  + Fixes a bug in smart cursor positioning.
  + Fixes a bug where the old file was deleted before the new file
    was saved successfully.
  + Removes redundant show hidden checkbox from file chooser dialog.
    Closes Bluefish bug #316298
  + Fixes Definition list formatting
  + Fixes a bug where the backup file was not deleted after
    renaming it. Closes Bluefish bug #324788.
  + Fixes a critical bug where Bluefish crashed when closing and
    saving a project. Closes Bluefish bug #330544.
  + Fixes a critical bug where Bluefish crashed when pressing the
    Esc key in the Search:no match found dialog.
    Closes Bluefish bug #337739
  + Fixes a bug where undoing did not behave correctly for text
    pasted from the clipboard over other text.
    Closes Bluefish bug #340262.
  + Fixes a bug in python syntax highlighting.
    Closes Bluefish bug #349662.
  + Fixes a critical bug where Bluefish crashed when pressing the
    green info dialog button. Closes Bluefish bug #349743
  + ... (see NEWS file for more Changes)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1222084800">- moved to Education base repository</changelog>
  <changelog author="lars@linux-schulserver.de" date="1273406400">- update to 2.0
- fix BuildRequires
- enable python and libgnomeui
- remove macros for old openSUSE versions</changelog>
  <changelog author="lars@linux-schulserver.de" date="1273838400">- provide/obsolete older bluefish-unstable versions</changelog>
  <changelog author="lars@linux-schulserver.de" date="1280577600">- update to 2.0.1:
  + minor bugfix and minor feature enhancement release
  + Enhancements include improved spell checking,
  + right margin display,
  + improved indenting functionality,
  + and CFML (cold fusion) support.
  + Bugfixes include fixes in a couple of HTML tag dialogs and
    two exotic segfault fixes.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1316347200">- update to 2.0.3:
  + improves syntax highlighting performance
  + improves performance when scrolling in large files
  + It adds a couple of features such as:
    a split view feature, Clojure syntax, Wordpress syntax,
    Pascal syntax, jQuery syntax, Processing syntax and R syntax
  + Various features have improved
  + a "jump to reference" feature has been added to quickly open
    a referenced filename
  + Finally, two new translations are added: Nynorsk and Hungarian</changelog>
  <changelog author="lars@linux-schulserver.de" date="1349611200">- update to 2.2.3:
  + new feature: Zencoding support
  + works with gtk-3
  + faster syntax scanner
  + new search and replace function
  + support for new languages added: Google Go, Vala and Ada
  + some shortcut key combinations were added.
- small specfile cleanup</changelog>
  <changelog author="cfarrell@suse.com" date="1358424000">- license update: GPL-3.0+
  See the COPYING file and the majority of the source code file headers</changelog>
  <changelog author="lars@linux-schulserver.de" date="1360670400">- update to 2.2.4:
  + minor bugfix release
  + various fixes for the tab-width on gtk 3.6
  + improved auto-completion popup speed
  + more simple search options
  + paste improvements (to paste for example images from Libreoffice)
  + pylint, cssmin, jsmin, csstidy and php_beautifier integration
  + various language syntax definition files have also been improved</changelog>
  <changelog author="lars@linux-schulserver.de" date="1392120000">- update to 2.2.5:
  + The syntax scanning engine is faster after small changes to the text.
  + The filebrowser is also much faster with less memory usage, with
    various fixes and new features.
  + Projects now store the active document and active line numbers.
  + Indenting is improved in auto-completion and the smart indenting.
  + Bookmarks and paste special also have been improved.
  + Furthermore almost all syntax highlighting has been improved, most
    notable jquery in javascript, HTML5, and HTML5 in PHP files.
  + There are also many bug fixes, such as in wrap text on right margin,
    in the replace engine, the jsmin licence, the split lines feature,
    the auto-recovery and many obscure bugs.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403697600">- update to 2.2.6:
  + mostly a bug fix release. This release fixes a critical bug
    (segfault) in filebrowser that could be triggered if the root
    directory was set as basedir.
  + It also has a fix for a specific CSS-in-HTML-tag highlighting issue.
  + The filter code furthermore caused a segfault if the command did not exist. T
  + Next to these bugs many small issues have been resolved.
  + Various language files have small improvements, most notably C,
    Javascript and CSS.
  + Several translations have been updated.
  + A corner case for a new document from a template that does not exist
    was fixed.
  + The "open" submenu now opens SVG files from the filebrowser instead
    of inserting an image tag.
  +  The included cssmin and jsbeatify have been updated.
  + A syntax scanning issue when replacing large chunks of text was
    fixed.
  + the "Report bug" link was broken,
  + a new "conditional" option to the language file that makes re-using
    certain blocks of language files easier was added,
  +  and error reporting in outputbox was improved.
- recommend make and libxml2-tools (xmllint) for easier programming</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431691200">- update to version 2.2.7:
    Bluefish 2.2.7 is mostly a bug fix release. It fixes rare
    crashes in the autocompletion, the filebrowser, the htmlbar
    plugin preferences, and in file-load-cancel, fixes a rare case
    of broken syntax highlighting after multiple search/replace
    actions.
  * It furthermore displays better error/warning output when
    parsing language files.
  * It also finally fixes javascript regex syntax highlighting.
  * The loading of files with corrupt encoding has been improved,
    and project loading over sftp has been improved.
  * Various HTML5 tags have been added, and HTML5 is the default
    now for php, cfml and other languages that can include html
    syntax.
  * Saving and loading of UTF-16 encoded files was broken and has
    been fixes.
  * Various languages have better support, such as javascript, css,
    html, pascal/deplhi, and html has improved autocompletion.
  * On OSX the keys for tab switching no longer confict with some
    keyboard layouts, and behavior at shutdown was improved.
  * The upload/download feature has a new option to ignore backup
    files.
  * The home/end keys now work better on wrapped tekst.
  * And finally the search and replace dialog correctly shows the
    number of results when searching in files on disk.
- point the source URL to the master download server
- add fix_ptr_from_int.patch: fix pointer from integer assignment,
  already upstream
- avoid aliasing warnings: add -fno-strict-aliasing to CFLAGS</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror
  in openSUSE:Factory</changelog>
  <changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 2.2.10
  * Various language files have been improved
  * Various fixes for newer gtk versions and for gtk on wayland
  * New feature: Possibility to import/export syntax color styles,
    included are styles for a light and a dark theme.
  * Fixes for a few rare crashes.
  * Fixes incompatibility with Gtk 3.20.
  * Some small dialogs have been improved.
  * Some user interface parts have been polished.
  * Fixes a few serious but rarely occurring bugs.
  * Options defined in the language definition files
    are now translated.
  * Various default settings have been improved, most notably the
    command to launch Firefox for preview.
  * The looks on newer gtk versions have been restored.
  * CSS can now be compressed and decompressed.
  * Character encoding detection has been improved.
  * Auto-completion for HTML attributes has been improved.
  * The SASS style language has been added.
- Removed upstream merged fix_ptr_from_int.patch
- Added keyring / signature file for verification
- Added remove-python-class-shebang.patch to remove shebang from
  python class files (this ones get never executed as scripts).</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Remove aspell and rely on enchant for spellcheck
  * This means the bluefish will use hunspell now</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512216000">- submit to 42.2 and 42.3 as maintenance update for boo#1021312</changelog>
</package>
<package pkgid="6cda3589aa51261ab5bdb585d8713f16ba7e04fc58bde7722ac86d4a853a5aa4" name="bluefish" arch="x86_64">
  <version epoch="0" ver="2.2.10" rel="7.1"/>
  <changelog author="lars@linux-schulserver.de" date="1273406400">- update to 2.0
- fix BuildRequires
- enable python and libgnomeui
- remove macros for old openSUSE versions</changelog>
  <changelog author="lars@linux-schulserver.de" date="1273838400">- provide/obsolete older bluefish-unstable versions</changelog>
  <changelog author="lars@linux-schulserver.de" date="1280577600">- update to 2.0.1:
  + minor bugfix and minor feature enhancement release
  + Enhancements include improved spell checking,
  + right margin display,
  + improved indenting functionality,
  + and CFML (cold fusion) support.
  + Bugfixes include fixes in a couple of HTML tag dialogs and
    two exotic segfault fixes.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1316347200">- update to 2.0.3:
  + improves syntax highlighting performance
  + improves performance when scrolling in large files
  + It adds a couple of features such as:
    a split view feature, Clojure syntax, Wordpress syntax,
    Pascal syntax, jQuery syntax, Processing syntax and R syntax
  + Various features have improved
  + a "jump to reference" feature has been added to quickly open
    a referenced filename
  + Finally, two new translations are added: Nynorsk and Hungarian</changelog>
  <changelog author="lars@linux-schulserver.de" date="1349611200">- update to 2.2.3:
  + new feature: Zencoding support
  + works with gtk-3
  + faster syntax scanner
  + new search and replace function
  + support for new languages added: Google Go, Vala and Ada
  + some shortcut key combinations were added.
- small specfile cleanup</changelog>
  <changelog author="cfarrell@suse.com" date="1358424000">- license update: GPL-3.0+
  See the COPYING file and the majority of the source code file headers</changelog>
  <changelog author="lars@linux-schulserver.de" date="1360670400">- update to 2.2.4:
  + minor bugfix release
  + various fixes for the tab-width on gtk 3.6
  + improved auto-completion popup speed
  + more simple search options
  + paste improvements (to paste for example images from Libreoffice)
  + pylint, cssmin, jsmin, csstidy and php_beautifier integration
  + various language syntax definition files have also been improved</changelog>
  <changelog author="lars@linux-schulserver.de" date="1392120000">- update to 2.2.5:
  + The syntax scanning engine is faster after small changes to the text.
  + The filebrowser is also much faster with less memory usage, with
    various fixes and new features.
  + Projects now store the active document and active line numbers.
  + Indenting is improved in auto-completion and the smart indenting.
  + Bookmarks and paste special also have been improved.
  + Furthermore almost all syntax highlighting has been improved, most
    notable jquery in javascript, HTML5, and HTML5 in PHP files.
  + There are also many bug fixes, such as in wrap text on right margin,
    in the replace engine, the jsmin licence, the split lines feature,
    the auto-recovery and many obscure bugs.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403697600">- update to 2.2.6:
  + mostly a bug fix release. This release fixes a critical bug
    (segfault) in filebrowser that could be triggered if the root
    directory was set as basedir.
  + It also has a fix for a specific CSS-in-HTML-tag highlighting issue.
  + The filter code furthermore caused a segfault if the command did not exist. T
  + Next to these bugs many small issues have been resolved.
  + Various language files have small improvements, most notably C,
    Javascript and CSS.
  + Several translations have been updated.
  + A corner case for a new document from a template that does not exist
    was fixed.
  + The "open" submenu now opens SVG files from the filebrowser instead
    of inserting an image tag.
  +  The included cssmin and jsbeatify have been updated.
  + A syntax scanning issue when replacing large chunks of text was
    fixed.
  + the "Report bug" link was broken,
  + a new "conditional" option to the language file that makes re-using
    certain blocks of language files easier was added,
  +  and error reporting in outputbox was improved.
- recommend make and libxml2-tools (xmllint) for easier programming</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431691200">- update to version 2.2.7:
    Bluefish 2.2.7 is mostly a bug fix release. It fixes rare
    crashes in the autocompletion, the filebrowser, the htmlbar
    plugin preferences, and in file-load-cancel, fixes a rare case
    of broken syntax highlighting after multiple search/replace
    actions.
  * It furthermore displays better error/warning output when
    parsing language files.
  * It also finally fixes javascript regex syntax highlighting.
  * The loading of files with corrupt encoding has been improved,
    and project loading over sftp has been improved.
  * Various HTML5 tags have been added, and HTML5 is the default
    now for php, cfml and other languages that can include html
    syntax.
  * Saving and loading of UTF-16 encoded files was broken and has
    been fixes.
  * Various languages have better support, such as javascript, css,
    html, pascal/deplhi, and html has improved autocompletion.
  * On OSX the keys for tab switching no longer confict with some
    keyboard layouts, and behavior at shutdown was improved.
  * The upload/download feature has a new option to ignore backup
    files.
  * The home/end keys now work better on wrapped tekst.
  * And finally the search and replace dialog correctly shows the
    number of results when searching in files on disk.
- point the source URL to the master download server
- add fix_ptr_from_int.patch: fix pointer from integer assignment,
  already upstream
- avoid aliasing warnings: add -fno-strict-aliasing to CFLAGS</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror
  in openSUSE:Factory</changelog>
  <changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 2.2.10
  * Various language files have been improved
  * Various fixes for newer gtk versions and for gtk on wayland
  * New feature: Possibility to import/export syntax color styles,
    included are styles for a light and a dark theme.
  * Fixes for a few rare crashes.
  * Fixes incompatibility with Gtk 3.20.
  * Some small dialogs have been improved.
  * Some user interface parts have been polished.
  * Fixes a few serious but rarely occurring bugs.
  * Options defined in the language definition files
    are now translated.
  * Various default settings have been improved, most notably the
    command to launch Firefox for preview.
  * The looks on newer gtk versions have been restored.
  * CSS can now be compressed and decompressed.
  * Character encoding detection has been improved.
  * Auto-completion for HTML attributes has been improved.
  * The SASS style language has been added.
- Removed upstream merged fix_ptr_from_int.patch
- Added keyring / signature file for verification
- Added remove-python-class-shebang.patch to remove shebang from
  python class files (this ones get never executed as scripts).</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Remove aspell and rely on enchant for spellcheck
  * This means the bluefish will use hunspell now</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512216000">- submit to 42.2 and 42.3 as maintenance update for boo#1021312</changelog>
</package>
<package pkgid="4c4bf6fbd76f9903adb4f8f5054c4edc4dbef246bc9e3d8787364fa39a1e7f10" name="blueman" arch="src">
  <version epoch="0" ver="2.0.6" rel="2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="d0d1bb9a6109bd657fae515240525d2ac606c51d794d9796af32da3cfc18ea4e" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="a248d1ee1e88f19a5d6ad3203539af8ad05f2fdfac701445ec36fb85f35710a8" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="c8f363b7ae8fb18f69903a927c9e7308595b9b7f0b71e5f4e782d1fd38b5b3d2" name="bluez" arch="src">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="b292d9d7f8d109a9f73a263de64cd425d7e1a47e3b9d7f346ddf14d3848f8f92" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="a318cedf008ccb743953263969a24f614fc183a340635add4209e33160e4f176" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="8f4cac2fb88038237cbb3bf69371bc0579181ede4a6621b3ca3ea937fc4a3ce0" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="fde729edc6aa3b2c64bbfec28924e9ec242fc3b96d88bcb21da757d78307f1e3" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="e05d5fc76fa91748e30a853d56bc499abc130ee04cfa112733ba610e35c607af" name="bluez-qt" arch="src">
  <version epoch="0" ver="5.32.0" rel="2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1446984000">- Update to 5.16.0 (boo#955067)
  * isBluetoothOperational now also depends on unblocked rfkill
  * Fix determining global state of rfkill switch
  * QML API: Mark properties without notify signal as constants
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.16.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * ObexManager: Split error messages for missing objects
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Fix include dir in pri file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * Fix crash when trying to add device to unknown adapter (kde#364416)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="f269e65a8c3905b57e6425fcbcb794208202e92b22be7261e41d9a5722cf5aa4" name="bluez-qt-devel" arch="x86_64">
  <version epoch="0" ver="5.32.0" rel="2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1446984000">- Update to 5.16.0 (boo#955067)
  * isBluetoothOperational now also depends on unblocked rfkill
  * Fix determining global state of rfkill switch
  * QML API: Mark properties without notify signal as constants
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.16.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * ObexManager: Split error messages for missing objects
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Fix include dir in pri file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * Fix crash when trying to add device to unknown adapter (kde#364416)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="e21fd5bbb9fd3ef6b80b38830a53a2237b30897c425515885fc99e7c407a058d" name="bluez-qt-imports" arch="x86_64">
  <version epoch="0" ver="5.32.0" rel="2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1446984000">- Update to 5.16.0 (boo#955067)
  * isBluetoothOperational now also depends on unblocked rfkill
  * Fix determining global state of rfkill switch
  * QML API: Mark properties without notify signal as constants
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.16.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * ObexManager: Split error messages for missing objects
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Fix include dir in pri file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * Fix crash when trying to add device to unknown adapter (kde#364416)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="6947dfe82ebf1cf75ba3e11cfc2efefa850a83d46db40091387b7e7e27b7aef6" name="bluez-qt-udev" arch="x86_64">
  <version epoch="0" ver="5.32.0" rel="2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1446984000">- Update to 5.16.0 (boo#955067)
  * isBluetoothOperational now also depends on unblocked rfkill
  * Fix determining global state of rfkill switch
  * QML API: Mark properties without notify signal as constants
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.16.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * ObexManager: Split error messages for missing objects
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Fix include dir in pri file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * Fix crash when trying to add device to unknown adapter (kde#364416)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="04f3761ff92506ce92f35f6c2d9a1cbb1be18d0d1e61266ec21b270400f60986" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.41" rel="6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
  <changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
  <changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>
</package>
<package pkgid="91fcd7cabeb3ed315efed177273120d3afb9f3b0839ab67ff4acbbf0bb86d1f9" name="boost" arch="src">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="bf766b39f696c8bd77a2125f8471130f996d9148fce06e3666e8d45fe465fdda" name="boost-devel" arch="x86_64">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="e81579d555124f1efcf390566e1c4258d8cf34d90fa76abcf943e2e93695eb25" name="boost-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="3cb02ea61ff92f412b84d9016d7e17e464e19e63cb4d5e3530c1de52d496ac78" name="boost-doc-html" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="e7b87ef52aa677b98d514e9f1b6f20a255faf39b636d8df5f9023c72c4a22c8c" name="boost-doc-man" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="f5b312fd0ff62896e9fb66593556fd7eea24f5d765204dee68117b14721ba133" name="boost-doc-pdf" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="71bf74f62c2a5bde15c595719348c15a0c212b1f9244e4967b44cc52a2ca3393" name="boost-license1_54_0" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="16.4.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Split libboost_graph so that the MPI components are not forced</changelog>
  <changelog author="tbehrens@suse.com" date="1385467200">- Add boost-pool_check_overflow.patch: Prevent possible overflow when
  calculating the amount to malloc (bnc#765443).
  Fix from https://svn.boost.org/trac/boost/ticket/6701</changelog>
  <changelog author="coolo@suse.com" date="1388836800">- fix build of libzypp - patch from boost's track
- added patches:
  * boost-1.54-change85160.patch</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Disable coroutine library together with context</changelog>
  <changelog author="ro@suse.de" date="1391601600">- enable build_mpi on s390/s390x</changelog>
  <changelog author="ro@suse.de" date="1391774400">- add boost-1.54.0-thread-link_atomic.patch fixing upstream issue
  https://svn.boost.org/trac/boost/ticket/9041
  (fixes compilation failure of snapper on various platforms)</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Add post and postun sections for libboost_graph_parallel.</changelog>
  <changelog author="coolo@suse.com" date="1393502400">- remove broken python module mpi.so
- trying to make the build more reliable:
  * use -fno-var-tracking in cxxflags as recommended by richi
  * disable parallel build on low memory</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394452800">- fix problem with executable .pdf in doc by correcting
  permissions after install (%attr with a dir failed on
  sled/sles)
- add dependency on zlib-devel and libbz2-devel and use the
  supplied bootstrap.sh script in building. This adds
  on-the-fly compression to boost-iostreams</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1394539200">- further improved the use of supplied b2 / bootstrap.sh,
  include user-config.jam, and remove superfluous python
  and gcc instructions from user-config.jam</changelog>
  <changelog author="coolo@suse.com" date="1396353600">- buildignore python, python-base is enough</changelog>
  <changelog author="schwab@suse.de" date="1397908800">- Fix quoting while creating shared build instructions
- Properly configure library list
- bjam-alignment.patch: fix alignment check in bjam</changelog>
  <changelog author="dvaleev@suse.com" date="1398772800">- ppc64 ABIv2 support
- enable build_context for ppc64le
- added patches:
  * boost-ppc64-abiv2-context.patch
  * boost-ppc64-abiv2-coroutine.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1406030400">- use only JOBS=2 to avoid gcc being killed with OOM when memory is
  between 4G and 7G.</changelog>
  <changelog author="fcrozat@suse.com" date="1406030401">- Ensure there is enough disk space available for build.</changelog>
  <changelog author="tbehrens@suse.com" date="1407240000">- Fix bnc#890184 - obsolete boost-license packages</changelog>
  <changelog author="adam.majer@suse.de" date="1473681600">- gcc_path.patch - fix GCC search paths (bnc#996917)
  Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x
  onward while our version of GCC only has /usr/include/c++/x.y
  for 4.x GCC and /usr/include/c++/x/ for 5.x onward.</changelog>
  <changelog author="adam.majer@suse.de" date="1474977600">- 85738.patch - fix regression in asio library (bnc#925309)
- Add libboost_context to the -devel dependencies, at least when
  we actually build it (bnc#970706)</changelog>
  <changelog author="adam.majer@suse.de" date="1483963200">- baselibs.conf: add libboost_locale (bnc#1017048)</changelog>
  <changelog author="adam.majer@suse.de" date="1547726400">- fix Boost.Context library (bsc#1089363)
  * restore original Boost.Context 1.54 API, fixing it on all
    supported architectures.
  * update boost-ppc64-abiv2-context.patch with a minimal patch
    enabling ppc64le support without breaking Boost.Context API
  * drop boost-ppc64-abiv2-coroutine.patch, not needed</changelog>
</package>
<package pkgid="0358882cc16ab7ce867d5c9e10f94ff4196acdf27abb965d71c5753f45436bbd" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.59" rel="23.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="abergmann@suse.com" date="1528286400">- Security fixes until 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="6d94bb914ede631a9b8b888edf2888243cd1598d220e18a78844b8bdf08ea9bc" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.59" rel="23.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="abergmann@suse.com" date="1528286400">- Security fixes until 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="7699475222fd1b86524c7a3699dad80cd75503b309bdaed42a82f699114f292c" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="23.10.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="169200bcc9dfa4f4aba6c877a00854837b2cdf5abcf199508f693655023a3f75" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.60" rel="23.10.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="2bcf5935f6d15e49a6d4a193b29b8ec9d476a75664e3b75b2c5cf48c6a21db6a" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="23.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="68a2f6b725034c9fd4bab4d54fefe8f519f7d655e13e3fede06074400b148b66" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.60" rel="23.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="0edff4604fb9db2e06ed45b787c6a644502edec8af973b01eb89999e97bf3f1c" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.59" rel="23.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="abergmann@suse.com" date="1528286400">- Security fixes until 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="05af2a30fe41b36cdf0f57741e6cffbb9bdfa73328f4f83836fff4f6fe07cfe6" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="23.10.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="ebb1116a89e568425877e0fe5264ef0465d961c9aa598886699f6e68a872d39c" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="23.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="eea06f71c3cbf7cbca577e31bdb23a269357bee435b03400c9d20c23bf115349" name="brotli" arch="src">
  <version epoch="0" ver="1.0.2" rel="2.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
</package>
<package pkgid="7444bf972c012ec1b03dce88f542e596c94ab090c1d7ca8a808e3da7df96c1bb" name="brotli" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="2.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
</package>
<package pkgid="3d72bc2ae01ee3b4301dfa0f368aa35239df4eab358d8ae6dca1d434dd504f18" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="20.3.1"/>
  <changelog author="idonmez@suse.com" date="1328702400">- Use %makeinstall to be SLES compatible</changelog>
  <changelog author="dvaleev@suse.com" date="1329134400">- fix failed tests on ppc</changelog>
  <changelog author="werner@suse.de" date="1336392000">- Enforce usage of reentrant versions of libc functions</changelog>
  <changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.0.4:
  + libarchive development moved to http://libarchive.github.com/
- Changes from version 3.0.2:
  + Various fixes merged from FreeBSD
  + Symlink support in Zip reader and writer
  + Robustness fixes to 7Zip reader
- Changes from version 3.0.1b:
  + 7Zip reader
  + Small fixes to ISO and Zip to improve robustness with corrupted
    input
  + Improve streaming Zip reader's support for uncompressed entries
  + New seeking Zip reader supports SFX Zip archives
  + Build fixes on Windows
- For more changes since 2.8.5, please see NEWS file
- Update URL Tag to represent new home of the project.
- Rename libarchive2 to libarchive12, following upstreams soname
  bumps.
- Add libarchive-fix-checks.patch: Fix gcc 4.7 side effects.
- Drop libarchive-test-fuzz.patch: fixed upstream.
- Drop libarchive-ignore-sigpipe-in-test-suite.patch: fixed
  upstream.
- Drop libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch: upstream
  rejected the patch. Seems to be too theoretical problem.</changelog>
  <changelog author="cfarrell@suse.com" date="1344513600">- license update: BSD-2-Clause
  The COPYING file shows that the package is predominantly BSD-2-Clause
  licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1345723200">- libarchive-ppc64.patch:
  fix http://code.google.com/p/libarchive/issues/detail?id=277
  test_option_b and test_option_nodump are failing on ppc64</changelog>
  <changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 3.1.1:
  + Fix an issue with the soname versioning in builds of libarchive
    using cmake
- Removed patchs; fixed and merged on upstream release:
  * libarchive-fix-checks.patch
  * libarchive-ppc64.patch
- The soname has changed and pass to 13.</changelog>
  <changelog author="werner@suse.de" date="1360756800">- Use %libname macro to be consistent throughout the spec file</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires (and sort those)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870) CVE-2015-2304</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- Fix CVE-2016-1541 (bsc#979005)</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, bsc#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466510400">- Adding more security fixes:
  CVE-2015-8924.patch: bsc#985609, upstream issue 515
  CVE-2015-8932.patch: bsc#985665, upstream issue 547
  CVE-2015-8929.patch: bsc#985669, upstream issue 517
  CVE-2015-8934.patch: bsc#985673, upstream issue 521
  CVE-2015-8920.patch: bsc#985675, upstream issue 511
  CVE-2015-8928.patch: bsc#985679, upstream issue 550
  CVE-2015-8921.patch: bsc#985682, upstream issue 512
  CVE-2015-8922.patch: bsc#985685, upstream issue 513
  CVE-2015-8933.patch: bsc#985688, upstream issue 548 &amp; 582
  - lacks test cases since they need new support functions
  CVE-2015-8931.patch: bsc#985689, upstream issue 539
  CVE-2015-8916.patch: bsc#985694, upstream issue 504
  CVE-2015-8918.patch. bsc#985698, upstream issue 506
  CVE-2015-8919.patch: bsc#985697, upstream issue 510
  CVE-2015-8930.patch: bsc#985700, upstream issue 522
  CVE-2015-8923.patch: bsc#985703, upstream issue 514
  CVE-2015-8926.patch: bsc#985704, upstream issue 518
  CVE-2015-8925.patch: bsc#985706, upstream issue 516
  CVE-2016-4300.patch: bsc#985832
  CVE-2016-4301.patch, CVE-2016-4301-base.patch: bsc#985826, upstream issue 523
  CVE-2016-4302.patch: bsc#985835, upstream issue 718</changelog>
  <changelog author="adrian@suse.com" date="1476792000">- CVE-2016-8687.patch: bsc#1005070
  CVE-2016-8689.patch: bsc#1005072
  CVE-2016-8688.patch: bsc#1005076
  CVE-2016-5844.patch: bsc#986566, upstream issue 717
  CVE-2015-8915.patch: bsc#985691, upstream issue 502
  CVE-2016-6250.patch: bsc#989980, upstream issue 711
  CVE-2016-5418.patch: bsc#998677, upstream issues 744, 745 and 746
  rename directory-traversal-fix.patch to CVE-2015-2304.patch</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14503.patch: CVE-2017-14501 bsc#1057514 bsc#1059139
  CVE-2016-10209.patch: bsc#1032089
  CVE-2016-10349.patch: bsc#1037008
  - is also fixing CVE-2016-10350 and bsc#1037009
  CVE-2017-14166.patch: bsc#1057514
  CVE-2017-14502.patch: bsc#1059134</changelog>
</package>
<package pkgid="753bc66acded9bce872d5207cb33e990db2bd19124add20f7887f02d753b73c9" name="build" arch="noarch">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="9b0dfb7dbd071aefa0b7d34d42e166b81417989f00035d07693ec457f03e51d0" name="build" arch="src">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="ccd9caa058ec306965a32ed2748dc6d95d42691a44cecc0e07b82c6ec3853fae" name="build" arch="noarch">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="8402dd8d38de5928e4b9318219be30a72499cb551a52c3c8709fb5ab815f8f10" name="build" arch="src">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="c8d0c3f5e142fd89c39b12d59a3e3f9ea167b1a58119a9d0d41ce87de9092e7c" name="build-initvm-i586" arch="noarch">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="422f31d5c3a8deef5f21f8f967e9dbfa5b4e2b5038be684e3e686c13e60e75e4" name="build-initvm-i586" arch="noarch">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="e2b012adaa89034a33c02f119a4a1a904ab767b841134475c21bee172e103343" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="5d2355246f4c251ed6990fa3a46c611c9bbc4f54a0654ec10422b70c90058e00" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="da4e5fcafa5e8fe2eddc3fd785651d1ca7a1152f9432dfa9e4d6bb0724319ed2" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="d3475ca923a7744e9e0eeca3658db6d0a1d5cabe83b7191dc43fdaa8294631ed" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="c191fff4196808ab01099a023f828ff837edee74639cdc0d74332a5634afce46" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20171128" rel="5.1"/>
  <changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
  <changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
  <changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
  <changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
  <changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
  <changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
  <changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
  <changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
  <changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
  <changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
  <changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
  <changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
</package>
<package pkgid="c35bc5f1def54ce690b0190994c567cb20a3a7170377cfb4c52290c32a2960e8" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20190128" rel="8.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="b40e3875af19d37259db5f097ba6aaba31bc1a2422273ca4ee3b722d1c8b81c5" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.22" rel="12.1"/>
  <changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
  <changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
</package>
<package pkgid="1801e61fb5da0ba6cf7437bdf6c4d845fcbfbe66ca8556455a01003f595d2103" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.22" rel="12.1"/>
  <changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
  <changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
</package>
<package pkgid="5ead355a4add2b82e0ae400a649a6d3a4197c3d5274bf0c915b2c701011d75f2" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.24" rel="15.1"/>
  <changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="c8e0c1849a804000aa8e5b538c6d1c0ece240fc7239ee0496df1fba452ed055e" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.24" rel="15.1"/>
  <changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="69e008608cff4aa2a6aeb39ab7ec447e5b4e05ace44dca71be0966bb4a14e7d8" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.26" rel="18.1"/>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="af06f60603cb0ea59ff4825e0c2624d4e832b5ca85ae1c3a7869a7255bec1aef" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.26" rel="18.1"/>
  <changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="8af09fea9dcb7999bbf67f03a1296954e00ef8d8275a60a6c7da8cf8322be836" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.30" rel="21.1"/>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
</package>
<package pkgid="3fd16a3c7afcd366962a95392e36ff0a0835ccdb1b2c473f11182f5e9e1d8ba2" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.30" rel="21.1"/>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- updated to 2.7 (bsc#973042)
- renamed: diff-from-upstream-2.2.patch -&gt; diff-from-upstream-2.7.patch
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  AOL CA
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1516795200">- Updated to Mozilla certificate version 2.22 (bsc#1071152 bsc#1071390 bsc#1010996)
- diff-from-upstream-2.7.patch: removed the old 1024 bit CAs we temporary
  left in to allow in-chain root certificates as openssl is now able to handle it.
- Removed Code Signing rights from a lot of CAs (not listed here).
- Removed Server Auth rights from:
  * AddTrust Low-Value Services Root
  * Camerfirma Chambers of Commerce Root
  * Camerfirma Global Chambersign Root
  * Swisscom Root CA 2
- Removed fully:
  * AddTrust Public Services Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * Buypass Class 2 CA 1
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * Certum Root CA
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Services root
  * Comodo Trusted Services root
  * ComSign Secured CA
  * EBG Elektronik Sertifika Hizmet Sa?lay?c?s?
  * Equifax Secure CA
  * Equifax Secure eBusiness CA 1
  * Equifax Secure Global eBusiness CA
  * GeoTrust Global CA 2
  * IGC/A
  * Juur-SK
  * Microsec e-Szigno Root CA
  * PSCProcert
  * Root CA Generalitat Valenciana
  * RSA Security 2048 v3
  * Security Communication EV RootCA1
  * Sonera Class 1 Root CA
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * S-TRUST Authentication and Encryption Root CA 2005 PN
  * Swisscom Root CA 1
  * Swisscom Root EV CA 2
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * Verisign Class 1 Public Primary Certification Authority
  * Verisign Class 2 Public Primary Certification Authority - G2
  * Verisign Class 3 Public Primary Certification Authority
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added:
  * Amazon Root CA 1: (email protection, server auth)
  * Amazon Root CA 2: (email protection, server auth)
  * Amazon Root CA 3: (email protection, server auth)
  * Amazon Root CA 4: (email protection, server auth)
  * Certplus Root CA G1: (email protection, server auth)
  * Certplus Root CA G2: (email protection, server auth)
  * D-TRUST Root CA 3 2013: (email protection)
  * GDCA TrustAUTH R5 ROOT: (server auth)
  * Hellenic Academic and Research Institutions ECC RootCA 2015: (email protection, server auth)
  * Hellenic Academic and Research Institutions RootCA 2015: (email protection, server auth)
  * ISRG Root X1: (server auth)
  * LuxTrust Global Root 2: (server auth)
  * OpenTrust Root CA G1: (email protection, server auth)
  * OpenTrust Root CA G2: (email protection, server auth)
  * OpenTrust Root CA G3: (email protection, server auth)
  * SSL.com EV Root Certification Authority ECC: (server auth)
  * SSL.com EV Root Certification Authority RSA R2: (server auth)
  * SSL.com Root Certification Authority ECC: (email protection, server auth)
  * SSL.com Root Certification Authority RSA: (email protection, server auth)
  * Symantec Class 1 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 1 Public Primary Certification Authority - G6: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G4: (email protection)
  * Symantec Class 2 Public Primary Certification Authority - G6: (email protection)
  * TrustCor ECA-1: (email protection, server auth)
  * TrustCor RootCert CA-1: (email protection, server auth)
  * TrustCor RootCert CA-2: (email protection, server auth)
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1: (server auth)</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
</package>
<package pkgid="50839d26397821113bfd2d83f6f9fffe035becfca4837ebef31f9dd805d4f0f6" name="cacti" arch="noarch">
  <version epoch="0" ver="1.1.16" rel="19.1"/>
  <changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
</package>
<package pkgid="e557ae5c5b5913b9dabf41f29155bc846ecb19554c13138f5d8559d267862aad" name="cacti" arch="src">
  <version epoch="0" ver="1.1.16" rel="19.1"/>
  <changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
</package>
<package pkgid="266e9b12486e0118effbb2e782c3b5e6cecffba95bc96810cf95bc8f3d7725c4" name="cacti" arch="noarch">
  <version epoch="0" ver="1.1.19" rel="22.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
</package>
<package pkgid="d28a68b9c82f95220fdf019b810700831d00329b21d592c01425b64f5f9d2dbe" name="cacti" arch="src">
  <version epoch="0" ver="1.1.19" rel="22.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
</package>
<package pkgid="1bd863f917bb8d44f506ae34c7eaa8356bc52a8916150d414a92364dfdace469" name="cacti" arch="noarch">
  <version epoch="0" ver="1.1.26" rel="25.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
</package>
<package pkgid="96f8e37ff9ecc1711b58e928e2ac91d778e242bc01a762a27a6e657ad7ec02a2" name="cacti" arch="src">
  <version epoch="0" ver="1.1.26" rel="25.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
</package>
<package pkgid="86d3e0b7cc984042c123dd0d0207cfab57bdff10b273b93b6c3491cb7fc17eaf" name="cacti" arch="noarch">
  <version epoch="0" ver="1.1.28" rel="29.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
</package>
<package pkgid="22fbd5680b2015747bfddc3fc5e5c3f71e40d784c6fe26c41a028ed366122ad5" name="cacti" arch="src">
  <version epoch="0" ver="1.1.28" rel="29.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
</package>
<package pkgid="f4a44ce664538e5a953f45622026f29c4def448d341fa7492c29242b7641100a" name="cacti" arch="noarch">
  <version epoch="0" ver="1.1.37" rel="32.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">-Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output
- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations
- Build version 1.1.35
  - issue#114: *all_max_peak* percentile calculations incorrect
  - issue#430: Pressing Back often fails to work as expected
  - issue#564: Fail to move items in graph template as desired
  - issue#981: Hyperlinks for Data Profile stats
  - issue#993: Realtime not working on remote pollers for certain data query
  - issue#1244: Errors importing templates with deprecated hashes
  - issue#1251: Allow zoom out through mouse mmiddle button
  - issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
  - issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with
    some browsers
  - issue#1306: Graphs are not always refreshed properly
  - issue#1309: Provide meaningful authentication errors in graph_json.php
    and graph_image.php
  - issue#1310: Return button fails on change password page
  - issue#1315: Realtime not working on local data collector
  - issue#1316: CDEF Item Value dialog does not update creating items
  - issue#1319: Front end + remote poller - connection timeout issue
  - issue#1321: Use RRDtool pipelining functions within DSSTATS
  - issue#1323: Enhance form layout for readability
  - issue#1329: Spelling errors in automation_networks.php
  - issue: Validate regular expressions if specified in add_graphs.php
  - issue: Ensure compression levels are consistent when importing package
- Build version 1.1.34
  issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
  issue#1195: Improved Javascript error message handling
  issue#1245: Unable to reorder graph name suggested values
  issue#1256: Error reporting of custom errors not displayed correctly
  issue#1257: Boost excessively logging updates
  issue#1258: cacti.sql updated to match expected schema
  issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
  issue#1261: Automatic logout timeout does not apply to web basic authenication
  issue#1263: CLI utility to validate database schema
  issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
  issue#1268: Regex filters not working properly
  issue#1274: Host CPU script checks value existance to avoid error
  issue#1275: SNMP v3 authPriv fails to work
  issue#1287: JSON calls return validation error in HTML format
  issue#1289: Script Server should output parameter array rather than parameters
  issue#1292: Chrome to aggressively caches Javascript files
  issue#1293: Correctly identify if command 'snmpbulkwalk' is available
  issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
  issue#1300: Automation discovery : New devices added by automation discovery
    have empty SNMP community field
  issue#1302: Automatic logout should not be enforced on login page
  issue#1304: mib_cache.php file contains unsafe transactions for binary logging
  feature: CLI utilily to generate and verify file hashes for installed Cacti
    files
  feature: Logging links back to appropriate areas for troubleshooting
  feature: Logging lists filenames in reverse order
- Build version 1.1.33
  - issue#1253: Automatically generated RRDtool DEF names in Cacti
    1.1.32 break existing Graph Templates
- Build version 1.1.32
  - issue#969: Undefined index: color_id / task_item when viewing graphs
  - issue#1166: Fix typo of 'locale' in global_languages.php
  - issue#1222: Graphs with large number of items causes RRDTool to error
  - issue#1230: PHP Fatal error: Call to undefined function
    get_max_tree_sequence()
  - issue#1238: SNMP functions fail to handle "Invalid object identifier"
    error
  - issue#1239: Browser console error in layout.js
  - issue#1240: Page layout issues caused by library update
  - issue#1246: Make SNMP Error return more info
  - issue: Missing or corrupted theme files can corrupt user settings
  - issue: Theme may not change until next login
  - issue: Tree edit Tree/Device/Graph drag areas incorrect
  - issue: Make callback error handling compatible with jQuery 3.x
  - issue: Ensure the snmp_error is cleared before every call
  - issue: Indicate unknown error when RRDTool returns no error message
  - feature: Update Javascript library: js.storage.js, d3.js, jquery.js,
    jquery.tablednd.js, jquery.timepicker.js
- Build version 1.1.31
  - issue#629: Site reload after delete the last letter in the searchbar
  - issue#1022: Discovery network stuck in "running" state does not
    return results
  - issue#1164: Version compare function fails on major/minor only
    versions
  - issue#1166: Invalid New User default language selection
  - issue#1175: Automatic logout inconsistent redirect
  - issue#1179: Warn during installation if installing moving to older
    version
  - issue#1183: Automatically detect missing Theme and use alternate
  - issue#1185: Layout with Graphs having large number of data columns
  - issue#1189: Allow ability to sort tree list by name asc/desc
  - issue#1190: Enabling, Disabling, Uninstalling plugin, you should
    page refresh
  - issue#1191: Tree sequences were not set or checked
  - issue#1197: Add more collection intervals to Data Source Profiles
  - issue#1206: Display issue with internationalization number format
  - issue#1210: CDEF and VDEF Items can not be properly edited
  - issue#1212: Navigation breadcrumbs fail to handle External links
    correctly
  - issue#1213: PHPMailer trying TLS despite SMTPSecure setting
  - issue#1215: Show version when installation prompts for license
  - issue#1217: Add ability to view/edit Input/Query when editing
    Data Template
  - issue: Named colors fail to import on install or upgrade
  - issue: Drag and Drop issues on multiple pages could corrupt
    sequencing
  - feature: Enhance filter to permit more glyphs for table headers
  - feature: Add a page refresh dropdown to the Automation Networks
  - feature: Enhanced SNMP v3 input forms
  - feature: Allow Trees to be rearranged using Drag and Drop
  - feature: Trap GUI callback errors and present error message
- Build version 1.1.30
  - issue#1155: Non-secure mail setting not functional due to changes
    in phpmailer
  - issue#1157: Resolve issue with branch permission api
  - issue#1158: Change CLOG to use regex replacement so line details
    are not mangled
  - issue#1161: Graph View regex's are not preserved during automatic
    page refresh
  - issue#1162: Error messages are not display when editing a user
  - issue#1166: Default language was not correctly set when editing a
    user
  - issue: basename function undefined during upgrade to 1.0.x
  - issue: Storage API and translations required for Change password
    function
  - issue: ALTER IGNORE still throws an error when attempting to drop
    the primary key
  - issue: Data Source profile form API generates error when system is
    half upgraded
  - issue: Resolve issue with importing packages
  - feature: Update package versions for Cacti version 1.1.29
- Build version 1.1.29
  - issue#871: Allow Nth Percentile and Bandwidth Summation to respect
    'Base Value' in template
  - issue#965: Duplicate error message and incorrect error code when
    using LDAP authentication
  - issue#1084: Graph Tree Branch not properly populating when editing
    report item
  - issue#1104: Datetime formatting in developer debug mode incorrect
  - issue#1106: Template Filters has empty row
  - issue#1109: URL used in redirection when referrer already has
    parameters in it
  - issue#1110: Add CPU Total to 'SNMP - Get Processor Information'
  - issue#1111: PHP NOTICE when using LDAP authenication
  - issue#1116: Filters not allowing "None" or "All" when editing
    report item
  - issue#1119: Reduced amount of data fetched for CPU usage to just
    the data used
  - issue#1121: Bandwidth summation not using correct locale
  - issue#1122: Fix issue with local login / potential password problems
  - issue#1128: Resolve php warning when raising messages
  - issue#1130: Fix logging level issue where logs of same level as setting
    where not logged
  - issue#1131: Make upgrade_database.php use same version compare as
    /install/ system
  - issue#1133: Fix issues with variable name and debug log
  - issue#1141: When viewing graphs from list view, pagination causes list
    view filter to be cleared
  - issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value
  - issue#1146: Installation now checks URI path matchs with configuration
    option URL_PATH
  - issue: Updated Graph pagenation and filter reset
  - issue: Resolve issues with cacti_version_compare() processing
  - issue: Zoom context menu stays open after zoom out actions
  - issue: Paginator object was not always translated</changelog>
</package>
<package pkgid="3ad91880d121eaec10a56bd441885105adc15c14c74bb5390406cb512d5d427b" name="cacti" arch="src">
  <version epoch="0" ver="1.1.37" rel="32.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">-Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output
- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations
- Build version 1.1.35
  - issue#114: *all_max_peak* percentile calculations incorrect
  - issue#430: Pressing Back often fails to work as expected
  - issue#564: Fail to move items in graph template as desired
  - issue#981: Hyperlinks for Data Profile stats
  - issue#993: Realtime not working on remote pollers for certain data query
  - issue#1244: Errors importing templates with deprecated hashes
  - issue#1251: Allow zoom out through mouse mmiddle button
  - issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
  - issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with
    some browsers
  - issue#1306: Graphs are not always refreshed properly
  - issue#1309: Provide meaningful authentication errors in graph_json.php
    and graph_image.php
  - issue#1310: Return button fails on change password page
  - issue#1315: Realtime not working on local data collector
  - issue#1316: CDEF Item Value dialog does not update creating items
  - issue#1319: Front end + remote poller - connection timeout issue
  - issue#1321: Use RRDtool pipelining functions within DSSTATS
  - issue#1323: Enhance form layout for readability
  - issue#1329: Spelling errors in automation_networks.php
  - issue: Validate regular expressions if specified in add_graphs.php
  - issue: Ensure compression levels are consistent when importing package
- Build version 1.1.34
  issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
  issue#1195: Improved Javascript error message handling
  issue#1245: Unable to reorder graph name suggested values
  issue#1256: Error reporting of custom errors not displayed correctly
  issue#1257: Boost excessively logging updates
  issue#1258: cacti.sql updated to match expected schema
  issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
  issue#1261: Automatic logout timeout does not apply to web basic authenication
  issue#1263: CLI utility to validate database schema
  issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
  issue#1268: Regex filters not working properly
  issue#1274: Host CPU script checks value existance to avoid error
  issue#1275: SNMP v3 authPriv fails to work
  issue#1287: JSON calls return validation error in HTML format
  issue#1289: Script Server should output parameter array rather than parameters
  issue#1292: Chrome to aggressively caches Javascript files
  issue#1293: Correctly identify if command 'snmpbulkwalk' is available
  issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
  issue#1300: Automation discovery : New devices added by automation discovery
    have empty SNMP community field
  issue#1302: Automatic logout should not be enforced on login page
  issue#1304: mib_cache.php file contains unsafe transactions for binary logging
  feature: CLI utilily to generate and verify file hashes for installed Cacti
    files
  feature: Logging links back to appropriate areas for troubleshooting
  feature: Logging lists filenames in reverse order
- Build version 1.1.33
  - issue#1253: Automatically generated RRDtool DEF names in Cacti
    1.1.32 break existing Graph Templates
- Build version 1.1.32
  - issue#969: Undefined index: color_id / task_item when viewing graphs
  - issue#1166: Fix typo of 'locale' in global_languages.php
  - issue#1222: Graphs with large number of items causes RRDTool to error
  - issue#1230: PHP Fatal error: Call to undefined function
    get_max_tree_sequence()
  - issue#1238: SNMP functions fail to handle "Invalid object identifier"
    error
  - issue#1239: Browser console error in layout.js
  - issue#1240: Page layout issues caused by library update
  - issue#1246: Make SNMP Error return more info
  - issue: Missing or corrupted theme files can corrupt user settings
  - issue: Theme may not change until next login
  - issue: Tree edit Tree/Device/Graph drag areas incorrect
  - issue: Make callback error handling compatible with jQuery 3.x
  - issue: Ensure the snmp_error is cleared before every call
  - issue: Indicate unknown error when RRDTool returns no error message
  - feature: Update Javascript library: js.storage.js, d3.js, jquery.js,
    jquery.tablednd.js, jquery.timepicker.js
- Build version 1.1.31
  - issue#629: Site reload after delete the last letter in the searchbar
  - issue#1022: Discovery network stuck in "running" state does not
    return results
  - issue#1164: Version compare function fails on major/minor only
    versions
  - issue#1166: Invalid New User default language selection
  - issue#1175: Automatic logout inconsistent redirect
  - issue#1179: Warn during installation if installing moving to older
    version
  - issue#1183: Automatically detect missing Theme and use alternate
  - issue#1185: Layout with Graphs having large number of data columns
  - issue#1189: Allow ability to sort tree list by name asc/desc
  - issue#1190: Enabling, Disabling, Uninstalling plugin, you should
    page refresh
  - issue#1191: Tree sequences were not set or checked
  - issue#1197: Add more collection intervals to Data Source Profiles
  - issue#1206: Display issue with internationalization number format
  - issue#1210: CDEF and VDEF Items can not be properly edited
  - issue#1212: Navigation breadcrumbs fail to handle External links
    correctly
  - issue#1213: PHPMailer trying TLS despite SMTPSecure setting
  - issue#1215: Show version when installation prompts for license
  - issue#1217: Add ability to view/edit Input/Query when editing
    Data Template
  - issue: Named colors fail to import on install or upgrade
  - issue: Drag and Drop issues on multiple pages could corrupt
    sequencing
  - feature: Enhance filter to permit more glyphs for table headers
  - feature: Add a page refresh dropdown to the Automation Networks
  - feature: Enhanced SNMP v3 input forms
  - feature: Allow Trees to be rearranged using Drag and Drop
  - feature: Trap GUI callback errors and present error message
- Build version 1.1.30
  - issue#1155: Non-secure mail setting not functional due to changes
    in phpmailer
  - issue#1157: Resolve issue with branch permission api
  - issue#1158: Change CLOG to use regex replacement so line details
    are not mangled
  - issue#1161: Graph View regex's are not preserved during automatic
    page refresh
  - issue#1162: Error messages are not display when editing a user
  - issue#1166: Default language was not correctly set when editing a
    user
  - issue: basename function undefined during upgrade to 1.0.x
  - issue: Storage API and translations required for Change password
    function
  - issue: ALTER IGNORE still throws an error when attempting to drop
    the primary key
  - issue: Data Source profile form API generates error when system is
    half upgraded
  - issue: Resolve issue with importing packages
  - feature: Update package versions for Cacti version 1.1.29
- Build version 1.1.29
  - issue#871: Allow Nth Percentile and Bandwidth Summation to respect
    'Base Value' in template
  - issue#965: Duplicate error message and incorrect error code when
    using LDAP authentication
  - issue#1084: Graph Tree Branch not properly populating when editing
    report item
  - issue#1104: Datetime formatting in developer debug mode incorrect
  - issue#1106: Template Filters has empty row
  - issue#1109: URL used in redirection when referrer already has
    parameters in it
  - issue#1110: Add CPU Total to 'SNMP - Get Processor Information'
  - issue#1111: PHP NOTICE when using LDAP authenication
  - issue#1116: Filters not allowing "None" or "All" when editing
    report item
  - issue#1119: Reduced amount of data fetched for CPU usage to just
    the data used
  - issue#1121: Bandwidth summation not using correct locale
  - issue#1122: Fix issue with local login / potential password problems
  - issue#1128: Resolve php warning when raising messages
  - issue#1130: Fix logging level issue where logs of same level as setting
    where not logged
  - issue#1131: Make upgrade_database.php use same version compare as
    /install/ system
  - issue#1133: Fix issues with variable name and debug log
  - issue#1141: When viewing graphs from list view, pagination causes list
    view filter to be cleared
  - issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value
  - issue#1146: Installation now checks URI path matchs with configuration
    option URL_PATH
  - issue: Updated Graph pagenation and filter reset
  - issue: Resolve issues with cacti_version_compare() processing
  - issue: Zoom context menu stays open after zoom out actions
  - issue: Paginator object was not always translated</changelog>
</package>
<package pkgid="ba36605407335d8b031724bb7ad2df723adbdc767690672f47ff5c230b05aab4" name="cacti-doc" arch="noarch">
  <version epoch="0" ver="1.1.16" rel="19.1"/>
  <changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
</package>
<package pkgid="1bad0ba0068ae56fb0385abf9974be9051dbc53122111f424a024a17ac0d57d1" name="cacti-doc" arch="noarch">
  <version epoch="0" ver="1.1.19" rel="22.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
</package>
<package pkgid="ca9cece49e231e06b9c5abe274a45cf1043e4cd97cb882621cf90ace63fd3455" name="cacti-doc" arch="noarch">
  <version epoch="0" ver="1.1.26" rel="25.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
</package>
<package pkgid="f7f441da0808c27e1fdf546078c4f57ccf4e85f889e5ec0414b0b06f07503da1" name="cacti-doc" arch="noarch">
  <version epoch="0" ver="1.1.28" rel="29.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
</package>
<package pkgid="431288a3f50877bd19306ab58423d4bb83bc3aa425096ecfb228f5ae5f44a912" name="cacti-doc" arch="noarch">
  <version epoch="0" ver="1.1.37" rel="32.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">-Change minimum php version to 5.4
-Build version 1.1.37
  - issue#274: Allow Realtime Graph Popup Mode
  - issue#1405: When Data Query columns are wide, they cause rendering
    issues
  - issue#1414: DSSTATS reports incorrectly that a data source does not
    exist
  - issue#1419: Filtering log results in errors in the log
  - issue#1420: PHP NOTICE editing cdef and vdef items
  - issue#1421: CLI upgrade_database.php PHP Warning on execution
  - issue#1426: Remote poller erroring attempting to verify files
  - issue#1432: Delete confirmation does not disappear
  - issue#1443: Partial Save warnings under Settings -&gt; Mail/Reporting/DNS
  - issue#1447: CLI audit_database.php not detecting database name, and
    failed to create audit tables when run fresh
  - issue#1453: CLI add_graph.php not allowing title to be set
  - issue#1456: Increase minimum php version maintaining support for RHEL6
  - issue#1457: Path-Based Cross-Site Scripting (XSS) issues
  - issue#1458: Error in logs when creating new graphs
  - issue#1459: Automation filter not applied correctly
  - issue#1461: Setting output_format on input type causes no values to be
    returned
  - issue#1464: Poller stuck in infinitely loop causing excess logging
  - issue#1466: No scrollbars in mobile browsers
  - issue#1468: Increase max length of host.snmp_sysObjectID column
  - issue#1471: Undefined function found in global_languages.php
  - issue#1472: Change Device Options - Style needs updating
  - issue#1474: Check possibility for creation of temporary tables on install
  - issue#1487: Undefined constant in ldap.php
  - issue#1483: Create New Graphs - Paw Styling Issue
  - issue#1493: Can't create tree branches with '#' sign
  - feature#1489: Add ability to use parts of OID as value via regex
  - feature: Updated Chinese Simplified translations
  - feature: Updated Dutch translations
  - feature: JavaScript library Chart.js updated 2.7.2
  - feature: Allow snmp formatting functions to detect UTF-8 output
- Build version 1.1.36
  - issue#934: Template names missing in graph management list
  - issue#1211: CDEF and VDEF Item Edit do not use correct procedures
  - issue#1250: Language support does not support localization properly
  - issue#1331: Log Rotation should occur at midnight on system
  - issue#1334: Console-&gt;Users-&gt;(Edit) Permissions checkmark descriptions
    missing
  - issue#1336: Debian test suite reports php error
  - issue#1338: Allow automation to be run in debug mode from GUI
  - issue#1339: First graph of second page does not render
  - issue#1340: Unable to open Time Graph View in new tab
  - issue#1348: Toggle context menu of Zoom
  - issue#1351: Errorimage does not render on systems without GD ttf support
  - issue#1353: New installation without config.php silently throws errors
  - issue#1355: Single tree can have the order of the tree changed
  - issue#1357: Data Profile disable fields shown temporarily as editable
  - issue#1359: Settings page generates error for removed plugin tab
  - issue#1362: DSStats Avg/Peak function broken due to change in RRDtool
    processing
  - issue#1365: Plugin Management enforce folder name
  - issue#1366: Improve error/info message display
  - issue#1380: Potential failure when updating script type
  - issue#1384: When installing/enabling plugins, current user and admin should
    get permissions
  - issue#1386: form_selectable_cell() ignores width if no style_or_class is
    passed
  - issue#1389: Poller is including plugins that are not installed
  - issue#1390: Plugin uninstall should prompt user before removal
  - issue#1396: Prevent installation/uninstallation of a plugin if dependency
    is present
  - issue#1397: Distinguish between plugin tabs and core tabs in settings
  - issue: Allow dynamic setting of from name when emailing
  - issue: Data Query Cache filter layout more consistent
  - issue: Minor plugin permissions format change
  - issue: Implementation of error handling causes errors creating New Graphs
  - issue: Deprecated DDStats setting removed
  - issue: Graph context menu items are now context aware
  - issue: Validate spine path before allowing enabling of spine
  - issue: Errored settings fields now highlighted correctly on error
  - issue: Add the Default Device to the Default Tree at install time
  - issue: Secpass password verification error message unuseful
  - feature: Searching of SNMP Index in View Data Query Cache now works
  - feature: Presets now have default device Template
  - feature: JavaScript library c3.js updated (v0.4.21) / jstree.js (3.3.5)
  - feature: PHPSecLib updated 2.0.10
  - feature: Updated Dutch translations
- Build version 1.1.35
  - issue#114: *all_max_peak* percentile calculations incorrect
  - issue#430: Pressing Back often fails to work as expected
  - issue#564: Fail to move items in graph template as desired
  - issue#981: Hyperlinks for Data Profile stats
  - issue#993: Realtime not working on remote pollers for certain data query
  - issue#1244: Errors importing templates with deprecated hashes
  - issue#1251: Allow zoom out through mouse mmiddle button
  - issue#1281: Max OIDs setting is for bulkget and not bulkwalk operations
  - issue#1286: Correct CHUNKED_ENCODING error when retrieving graph with
    some browsers
  - issue#1306: Graphs are not always refreshed properly
  - issue#1309: Provide meaningful authentication errors in graph_json.php
    and graph_image.php
  - issue#1310: Return button fails on change password page
  - issue#1315: Realtime not working on local data collector
  - issue#1316: CDEF Item Value dialog does not update creating items
  - issue#1319: Front end + remote poller - connection timeout issue
  - issue#1321: Use RRDtool pipelining functions within DSSTATS
  - issue#1323: Enhance form layout for readability
  - issue#1329: Spelling errors in automation_networks.php
  - issue: Validate regular expressions if specified in add_graphs.php
  - issue: Ensure compression levels are consistent when importing package
- Build version 1.1.34
  issue#1040: PHP version 7.2 - ERROR PHP WARNING: sizeof()
  issue#1195: Improved Javascript error message handling
  issue#1245: Unable to reorder graph name suggested values
  issue#1256: Error reporting of custom errors not displayed correctly
  issue#1257: Boost excessively logging updates
  issue#1258: cacti.sql updated to match expected schema
  issue#1260: Tab images fail to render due to TrueType support in PHP GD Module
  issue#1261: Automatic logout timeout does not apply to web basic authenication
  issue#1263: CLI utility to validate database schema
  issue#1266: Inconsistent usage graphWrapper CSS causes odd graph zoom behavior
  issue#1268: Regex filters not working properly
  issue#1274: Host CPU script checks value existance to avoid error
  issue#1275: SNMP v3 authPriv fails to work
  issue#1287: JSON calls return validation error in HTML format
  issue#1289: Script Server should output parameter array rather than parameters
  issue#1292: Chrome to aggressively caches Javascript files
  issue#1293: Correctly identify if command 'snmpbulkwalk' is available
  issue#1296: CactiErrorHandler does not ignore PHP suppressed errors
  issue#1300: Automation discovery : New devices added by automation discovery
    have empty SNMP community field
  issue#1302: Automatic logout should not be enforced on login page
  issue#1304: mib_cache.php file contains unsafe transactions for binary logging
  feature: CLI utilily to generate and verify file hashes for installed Cacti
    files
  feature: Logging links back to appropriate areas for troubleshooting
  feature: Logging lists filenames in reverse order
- Build version 1.1.33
  - issue#1253: Automatically generated RRDtool DEF names in Cacti
    1.1.32 break existing Graph Templates
- Build version 1.1.32
  - issue#969: Undefined index: color_id / task_item when viewing graphs
  - issue#1166: Fix typo of 'locale' in global_languages.php
  - issue#1222: Graphs with large number of items causes RRDTool to error
  - issue#1230: PHP Fatal error: Call to undefined function
    get_max_tree_sequence()
  - issue#1238: SNMP functions fail to handle "Invalid object identifier"
    error
  - issue#1239: Browser console error in layout.js
  - issue#1240: Page layout issues caused by library update
  - issue#1246: Make SNMP Error return more info
  - issue: Missing or corrupted theme files can corrupt user settings
  - issue: Theme may not change until next login
  - issue: Tree edit Tree/Device/Graph drag areas incorrect
  - issue: Make callback error handling compatible with jQuery 3.x
  - issue: Ensure the snmp_error is cleared before every call
  - issue: Indicate unknown error when RRDTool returns no error message
  - feature: Update Javascript library: js.storage.js, d3.js, jquery.js,
    jquery.tablednd.js, jquery.timepicker.js
- Build version 1.1.31
  - issue#629: Site reload after delete the last letter in the searchbar
  - issue#1022: Discovery network stuck in "running" state does not
    return results
  - issue#1164: Version compare function fails on major/minor only
    versions
  - issue#1166: Invalid New User default language selection
  - issue#1175: Automatic logout inconsistent redirect
  - issue#1179: Warn during installation if installing moving to older
    version
  - issue#1183: Automatically detect missing Theme and use alternate
  - issue#1185: Layout with Graphs having large number of data columns
  - issue#1189: Allow ability to sort tree list by name asc/desc
  - issue#1190: Enabling, Disabling, Uninstalling plugin, you should
    page refresh
  - issue#1191: Tree sequences were not set or checked
  - issue#1197: Add more collection intervals to Data Source Profiles
  - issue#1206: Display issue with internationalization number format
  - issue#1210: CDEF and VDEF Items can not be properly edited
  - issue#1212: Navigation breadcrumbs fail to handle External links
    correctly
  - issue#1213: PHPMailer trying TLS despite SMTPSecure setting
  - issue#1215: Show version when installation prompts for license
  - issue#1217: Add ability to view/edit Input/Query when editing
    Data Template
  - issue: Named colors fail to import on install or upgrade
  - issue: Drag and Drop issues on multiple pages could corrupt
    sequencing
  - feature: Enhance filter to permit more glyphs for table headers
  - feature: Add a page refresh dropdown to the Automation Networks
  - feature: Enhanced SNMP v3 input forms
  - feature: Allow Trees to be rearranged using Drag and Drop
  - feature: Trap GUI callback errors and present error message
- Build version 1.1.30
  - issue#1155: Non-secure mail setting not functional due to changes
    in phpmailer
  - issue#1157: Resolve issue with branch permission api
  - issue#1158: Change CLOG to use regex replacement so line details
    are not mangled
  - issue#1161: Graph View regex's are not preserved during automatic
    page refresh
  - issue#1162: Error messages are not display when editing a user
  - issue#1166: Default language was not correctly set when editing a
    user
  - issue: basename function undefined during upgrade to 1.0.x
  - issue: Storage API and translations required for Change password
    function
  - issue: ALTER IGNORE still throws an error when attempting to drop
    the primary key
  - issue: Data Source profile form API generates error when system is
    half upgraded
  - issue: Resolve issue with importing packages
  - feature: Update package versions for Cacti version 1.1.29
- Build version 1.1.29
  - issue#871: Allow Nth Percentile and Bandwidth Summation to respect
    'Base Value' in template
  - issue#965: Duplicate error message and incorrect error code when
    using LDAP authentication
  - issue#1084: Graph Tree Branch not properly populating when editing
    report item
  - issue#1104: Datetime formatting in developer debug mode incorrect
  - issue#1106: Template Filters has empty row
  - issue#1109: URL used in redirection when referrer already has
    parameters in it
  - issue#1110: Add CPU Total to 'SNMP - Get Processor Information'
  - issue#1111: PHP NOTICE when using LDAP authenication
  - issue#1116: Filters not allowing "None" or "All" when editing
    report item
  - issue#1119: Reduced amount of data fetched for CPU usage to just
    the data used
  - issue#1121: Bandwidth summation not using correct locale
  - issue#1122: Fix issue with local login / potential password problems
  - issue#1128: Resolve php warning when raising messages
  - issue#1130: Fix logging level issue where logs of same level as setting
    where not logged
  - issue#1131: Make upgrade_database.php use same version compare as
    /install/ system
  - issue#1133: Fix issues with variable name and debug log
  - issue#1141: When viewing graphs from list view, pagination causes list
    view filter to be cleared
  - issue#1143: ss_host_cpu.php - Division by zero / Invalid Return Value
  - issue#1146: Installation now checks URI path matchs with configuration
    option URL_PATH
  - issue: Updated Graph pagenation and filter reset
  - issue: Resolve issues with cacti_version_compare() processing
  - issue: Zoom context menu stays open after zoom out actions
  - issue: Paginator object was not always translated</changelog>
</package>
<package pkgid="696fdd30a3775c67dc7e5d3f5b7590ba1e8efb4e27390ec9c691d68200d600fd" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.1.16" rel="10.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1462795200">- Update to version 0.8.8h
  * bug:0002659: wrong information about spine setup for icmps
  * bug: Removed requirement for building man page, deferred to 1.0
- Update to version 0.8.8g
  * bug:0002380: please build man page for spine
  * bug:0002610: Spine is trying to use mysql results after data
    being freed
  * bug:0002639: Spine does not respect snmp_retries from the
    database
  * bug:0002640: Spine crashes randomly while polling using
    multiple threads on one device
  * bug:0002549: Spine: hasCaps() always returns FALSE
  * bug:0002638: Spine: ping_udp() uses uninitialised socket timeout
  * bug:0002654: On RHEL 6.5, spine ./configure builds Makefile
    without crypto support</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1487937600">- Update to version 1.0.3
  * issue#6: Spine accepts arbitrary polling modes
- Update to version 1.0.2
  * feature: release to match Cacti release
- Update to version 1.0.1
  * bug:With enough make jobs, help2man will fail if help2man is run before spine has been built
- Update to version 1.0.0
  * feature: Track per host polling time
  * feature: Collect System Mib Information
  * feature: Place collection timing into host table
  * feature: Support snmpContextEngineID
  * feature: Change all references of Host to Device
  * bug:0001415: spine does not handle log_perror
  * bug#0002220: spine/cacti patch to allow SNMP_polling decices' hostnames like user@host:port
  * bug#0002234: Wrong alphanumeric value got from Spine SNMP poller
  * bug#0002651: False Positive Down status with snmpv3
  * bug#0002674: Segmentation fault in Spine during polling host</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
</package>
<package pkgid="4572b6c152f4a7c69e45aba82b94e191e82d9aea93b0cf8ef483df5f666957ba" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="10.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1462795200">- Update to version 0.8.8h
  * bug:0002659: wrong information about spine setup for icmps
  * bug: Removed requirement for building man page, deferred to 1.0
- Update to version 0.8.8g
  * bug:0002380: please build man page for spine
  * bug:0002610: Spine is trying to use mysql results after data
    being freed
  * bug:0002639: Spine does not respect snmp_retries from the
    database
  * bug:0002640: Spine crashes randomly while polling using
    multiple threads on one device
  * bug:0002549: Spine: hasCaps() always returns FALSE
  * bug:0002638: Spine: ping_udp() uses uninitialised socket timeout
  * bug:0002654: On RHEL 6.5, spine ./configure builds Makefile
    without crypto support</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1487937600">- Update to version 1.0.3
  * issue#6: Spine accepts arbitrary polling modes
- Update to version 1.0.2
  * feature: release to match Cacti release
- Update to version 1.0.1
  * bug:With enough make jobs, help2man will fail if help2man is run before spine has been built
- Update to version 1.0.0
  * feature: Track per host polling time
  * feature: Collect System Mib Information
  * feature: Place collection timing into host table
  * feature: Support snmpContextEngineID
  * feature: Change all references of Host to Device
  * bug:0001415: spine does not handle log_perror
  * bug#0002220: spine/cacti patch to allow SNMP_polling decices' hostnames like user@host:port
  * bug#0002234: Wrong alphanumeric value got from Spine SNMP poller
  * bug#0002651: False Positive Down status with snmpv3
  * bug#0002674: Segmentation fault in Spine during polling host</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
</package>
<package pkgid="fff16d80d5eea2ab2062c4155340a5b54784c09712d24bd9a934c11ba73c2e0e" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.1.19" rel="13.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
</package>
<package pkgid="f607bc52a5c599e4f768fce421d96a9dbf7aabfc6fa1b144fed09c9e8ea94823" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.1.19" rel="13.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
</package>
<package pkgid="628335ba44c2b94ab02c971a602150416f8a63cd72ee8523ba2d2cc4968485c5" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.1.26" rel="16.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release
- Update to version 1.1.24
  * feature: release to match Cacti release
- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release
- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
</package>
<package pkgid="f6744bd0eff5e01dde49fc98cd074da4ea217c5c7356fbf2b6bb21e3c705e06c" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.1.26" rel="16.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release
- Update to version 1.1.24
  * feature: release to match Cacti release
- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release
- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
</package>
<package pkgid="f0067952512595b0ed93bf833e2bd69500c37d389ea61eb1dfa97471986215d7" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.1.28" rel="20.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>
</package>
<package pkgid="975b2e1491ab379570e1104c96ef48842d382f0b7724dae26f5536a1038f3705" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.1.28" rel="20.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>
</package>
<package pkgid="b9197050506dc71d9395c69a558fc455127992ac6bd41ded74b0ecbc0d058e07" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.1.37" rel="23.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors
- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping
- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored
- Update to version 1.1.34
  * feature: release to match Cacti release
- Update to version 1.1.33
  * feature: release to match Cacti release
- Update to version 1.1.32
  * feature: release to match Cacti release
- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled
- Update to version 1.1.30
  * feature: release to match Cacti release
- Update to version 1.1.29
  * issue#39: Have spine match cacti_log function</changelog>
</package>
<package pkgid="994ff66a61f6b7a071e9d8bbe7a718c64a84b61cd368c1b2e1e26ae53c115864" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="23.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors
- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping
- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored
- Update to version 1.1.34
  * feature: release to match Cacti release
- Update to version 1.1.33
  * feature: release to match Cacti release
- Update to version 1.1.32
  * feature: release to match Cacti release
- Update to version 1.1.31
  - issue#15: Spine cause CPU usage up to 100%
  - issue#32: Support noAuthNoPriv in Spine
  - issue#34: Re-introduce check for relocatable Net-SNMP and
    development files
  - issue#35: SNMP OID range checks cause some snmpget's to fail
  - issue#38: SNMP Ping timeouts not reported properly
  - issue#39: Spine should use same logging format as Cacti
  - issue#41: Spine cause CPU usage up to 100%
  - issue#42: Boost table keeps populating with boost disabled
- Update to version 1.1.30
  * feature: release to match Cacti release
- Update to version 1.1.29
  * issue#39: Have spine match cacti_log function</changelog>
</package>
<package pkgid="950d6e5182bff7b1b2cf53e100b31347b5e1faa40f72b3a83ba4c7df84add59f" name="cairo" arch="src">
  <version epoch="0" ver="1.15.2" rel="8.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
  <changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
  <changelog author="jw@suse.com" date="1397217600">- Add cairo-render-thin-lines.patch: Fix rendering of thin lines,
  so that inkscape can export 0.01mm lines again to PDF. Regression
  introduced with 1.12.3.</changelog>
  <changelog author="fcrozat@suse.com" date="1404820800">- Add cairo-xlib-endianness.patch: fix crash when client and server
  have different endianness [bnc#882951, fdo#63461]</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 1.14.0:
  + Features:
  - Filtering improvements for the image backend, in particular
    down-scaling of images produces filtered images that depend
    on all the pixels of the source.
  - Improve handling of device transformation and scaling,
    allowing Cairo to now support scaling at a device level,
    permitting easier, more transparent HiDPI support.
  - Support JBIG2 mime data in PDF.  This allows embedding of
    more compressed JPEG formats within PDF, rather than
    including the full uncompressed image. Also, reduce the
    number of transparency groups used by PDF to keep the file
    size small and viewing/printing of the PDF fast.
  - Expand the embedding section to include stencil mask support.
  - Reorder font declarations to be in natural order.
  - Update the Skia backend to build against current Skia.
  - Drop Link-Time Optimization (LTO) support from build system.
  - Optimize VBO size on GL to 1M and to 16k for EGL.
  + API changes:
  - cairo_surface_set_device_scale,
    cairo_surface_get_device_scale.
  - cairo_egl_device_get_display, cairo_egl_device_get_context.
  + Dependency changes:
  - Cairo now requires glib 2.14 for its gobject helper
    functions, and pixman 0.30 for downscaling.
  + Bug fixes:
  - Don't embed CMYK Jpeg images in svg.
  - Fix tests to place output in proper location.
  - Fix determination of alpha for all surfaces when recording.
  - Extend oversize check to cairo_gl_surface_create_for_texture,
    so an error surface is returned if the texture is too large
    to render to.
  - Fix embedding of mime data in PDF and PS files.
  - Remove useless error handling in *_reply() functions in XCB.
  - Fix a double-free exposed by multithreaded apps creating and
    destroying the same font concurrently (fdo#69470).
  - Fix corrupt stacks produced by bugs in operand emission for
    trace.
  - Fix out of bounds array access in format cache for xlib.
  - Don't rename glyphs used by seac operator (fdo#70364).
  - Fix crash on calling cairo_create with a finished surface.
  - Fix SSIZE_T definition problem when making with MSYS on
    Windows7.
  - Fix one off issue in gl context cleanup.
  - Fix usage of CAIRO_STACK_ARRAY_LENGTH.
  - Fix rectangle stroke with non rectilinear pen.
  - Fix imagemask with pattern source failure on some printers
    (fdo#69485).
  - Fix whitespace in font names.
  - Fix page size in generated PDFs (fdo#73452).
  - Fix path-currentpoint test by preserving current-point in
    copy_path()/append_path() sequence.
  - Fix generation of HTML in code docs for
    cairo-format-stride-for-width (fdo#63257).
  - Fix spelling of "tessellator" throughout code (fdo#50411).
  - Fix crash in pixman_image_composite32.
  - Fix crash when trying to modify a (const) all-clipped
    cairo_clip_t (fdo#75819).
  - Add check_composite method to all compositors, to fix crashes
    in the test suite.
  - Fix crash in Firefox when scrolling on certain pages.
  - Fix memory leaks found by static analysis.
  - Fix build of any2ppm if fork is not available.
  - Fix broken build for Qt backend, due to missing libstdc++.
  - Fix typo in two cairo_uint128 functions.  Fixes potential
    build issues on systems without a uint128 type.
  - Fix build when --enable-pdf=no.
  - Fix cache_frozen assertions for Win32 print.
  - Correctly check for xcb image surface for inplace upload.
  - Fix webkit-based web browser crashes due to empty boxes by
    skipping over them when tesselating.
  - Make pixman, libpng, and zlib paths commandline configurable
    for win32 builds.
  - Fix image scale on Win32 when GDI scale is not identity.
  - Fix float endian configure test when using clang -O4.
  - Fix compilation with Android bionic libc.
  - Don't try to build util/sphinx on Windows.
  - Fix loss of precision when emitting joins.
  - Fix loss of precision and associated rendering issues in
    cairo-tor-scan-converter from projection onto sample grid.
  - Fix pixman oversampling of neighbouring edges within a cell
    by eliminating self-intersections for the pixman traps
    compositor.
  - Fix multi-line string splitting in PDFs.
  - Various cleanups and fixes to warnings, documentation, tests,
    and build system. Improve error handling and return value
    checks. Cleanup XFAIL tests and reference images. Cover
    recently added functionality.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420632000">- Add cairo-tor-scan-convertor.patch: tor-scan-converter: can't
  do_fullrow when intersection in row + 0.5subrow (fdo#85151).</changelog>
  <changelog author="tchvatal@suse.com" date="1420804800">- Spec-cleanify
- Remove the obsoletes for sle10 64bit subpackages on ppc
- Remove libtool archive always</changelog>
  <changelog author="opensuse@mirell.de" date="1426334400">- Update to version 1.14.2:
  + Features:
  - Improve xcb's handling of per-screen subpixel ordering. If
    no Xft.rgba property is specified, default to the screen's
    subpixel order.
  + Performance Optimizations:
  - Improve performance of cpu_to_be32 and be32_to_cpu, making
    truetype subsetting of large fonts run about 15% faster.
  + Bug fixes:
  - Fix unaligned access on sparc with the compact font format
    (CFF).
    Unlike truetype, all data in CFF is not aligned.
    (Debian bug #712836)
  - Fix unaligned access on sparc with tor-scan-converter's
    memory pool.
  - Fix crash when loading a PDF with a transformed image.
    (fdo bug #85151)
  - Fix regression on mingw for bigendian test due to removal of
    file extension for executables. (fdo bug #85120)
  - Fix handling of backslash in PDF interpreter (fdo bug #85662)
  - Fix crash in xlib and xcb renderers when swapping a 0-sized
    glyph
  - Fix bug with RTL text in PDF operators (fdo bug #86461)
  - Fix compilation 'cairo-path-stroke-traps.c' with MSVC8
    (fdo bug #84908)
  - Fix crash in _fill_xrgb32_lerp_opaque_spans when a span
    length is negative.
  - Fix valgrind error by releasing pattern created by
    cairo_pattern_create_rgb().
  - Fix valgrind errors when running cairo-test-suite.
  - Fix memory leak in recording surface replays (fdo bug #87898)
  - Fix destruction of fonts in api-special-cases test.
    (fdo bug #87567)
  - Fix duplicated surface push on similar-image, preventing
    trivial GTK3 program traces from being replayable, with an
    error message about invalid values for the size of the input.
    (fdo bug #73580)
  - Fix crash when win32 surface's image size does not cover the
    entire
    surface. (fdo bug #53121)
  - Fix crash due to obsolete CGFontGetGlyphPath call
    (fdo bug #84324)
  - Fix several build issues on AIX (fdo bugs #89338, #89340,
    [#89356], #89354)
  - Fix various documentation warnings and errors
- Remove cairo-tor-scan-convertor.patch. It was upstreamed.</changelog>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="qzheng@suse.com" date="1524657600">- Add replace-malloc-with-cairo-malloc.patch:
  replace malloc with _cairo_malloc and check cmap size before
  allocating ( boo#1049092, CVE-2017-9814  ).</changelog>
</package>
<package pkgid="6ff8e4d230f903084abaf4b99e0f87bd33fbfb24a50715a0fd9f58517107ccfc" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="8.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
  <changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
  <changelog author="jw@suse.com" date="1397217600">- Add cairo-render-thin-lines.patch: Fix rendering of thin lines,
  so that inkscape can export 0.01mm lines again to PDF. Regression
  introduced with 1.12.3.</changelog>
  <changelog author="fcrozat@suse.com" date="1404820800">- Add cairo-xlib-endianness.patch: fix crash when client and server
  have different endianness [bnc#882951, fdo#63461]</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 1.14.0:
  + Features:
  - Filtering improvements for the image backend, in particular
    down-scaling of images produces filtered images that depend
    on all the pixels of the source.
  - Improve handling of device transformation and scaling,
    allowing Cairo to now support scaling at a device level,
    permitting easier, more transparent HiDPI support.
  - Support JBIG2 mime data in PDF.  This allows embedding of
    more compressed JPEG formats within PDF, rather than
    including the full uncompressed image. Also, reduce the
    number of transparency groups used by PDF to keep the file
    size small and viewing/printing of the PDF fast.
  - Expand the embedding section to include stencil mask support.
  - Reorder font declarations to be in natural order.
  - Update the Skia backend to build against current Skia.
  - Drop Link-Time Optimization (LTO) support from build system.
  - Optimize VBO size on GL to 1M and to 16k for EGL.
  + API changes:
  - cairo_surface_set_device_scale,
    cairo_surface_get_device_scale.
  - cairo_egl_device_get_display, cairo_egl_device_get_context.
  + Dependency changes:
  - Cairo now requires glib 2.14 for its gobject helper
    functions, and pixman 0.30 for downscaling.
  + Bug fixes:
  - Don't embed CMYK Jpeg images in svg.
  - Fix tests to place output in proper location.
  - Fix determination of alpha for all surfaces when recording.
  - Extend oversize check to cairo_gl_surface_create_for_texture,
    so an error surface is returned if the texture is too large
    to render to.
  - Fix embedding of mime data in PDF and PS files.
  - Remove useless error handling in *_reply() functions in XCB.
  - Fix a double-free exposed by multithreaded apps creating and
    destroying the same font concurrently (fdo#69470).
  - Fix corrupt stacks produced by bugs in operand emission for
    trace.
  - Fix out of bounds array access in format cache for xlib.
  - Don't rename glyphs used by seac operator (fdo#70364).
  - Fix crash on calling cairo_create with a finished surface.
  - Fix SSIZE_T definition problem when making with MSYS on
    Windows7.
  - Fix one off issue in gl context cleanup.
  - Fix usage of CAIRO_STACK_ARRAY_LENGTH.
  - Fix rectangle stroke with non rectilinear pen.
  - Fix imagemask with pattern source failure on some printers
    (fdo#69485).
  - Fix whitespace in font names.
  - Fix page size in generated PDFs (fdo#73452).
  - Fix path-currentpoint test by preserving current-point in
    copy_path()/append_path() sequence.
  - Fix generation of HTML in code docs for
    cairo-format-stride-for-width (fdo#63257).
  - Fix spelling of "tessellator" throughout code (fdo#50411).
  - Fix crash in pixman_image_composite32.
  - Fix crash when trying to modify a (const) all-clipped
    cairo_clip_t (fdo#75819).
  - Add check_composite method to all compositors, to fix crashes
    in the test suite.
  - Fix crash in Firefox when scrolling on certain pages.
  - Fix memory leaks found by static analysis.
  - Fix build of any2ppm if fork is not available.
  - Fix broken build for Qt backend, due to missing libstdc++.
  - Fix typo in two cairo_uint128 functions.  Fixes potential
    build issues on systems without a uint128 type.
  - Fix build when --enable-pdf=no.
  - Fix cache_frozen assertions for Win32 print.
  - Correctly check for xcb image surface for inplace upload.
  - Fix webkit-based web browser crashes due to empty boxes by
    skipping over them when tesselating.
  - Make pixman, libpng, and zlib paths commandline configurable
    for win32 builds.
  - Fix image scale on Win32 when GDI scale is not identity.
  - Fix float endian configure test when using clang -O4.
  - Fix compilation with Android bionic libc.
  - Don't try to build util/sphinx on Windows.
  - Fix loss of precision when emitting joins.
  - Fix loss of precision and associated rendering issues in
    cairo-tor-scan-converter from projection onto sample grid.
  - Fix pixman oversampling of neighbouring edges within a cell
    by eliminating self-intersections for the pixman traps
    compositor.
  - Fix multi-line string splitting in PDFs.
  - Various cleanups and fixes to warnings, documentation, tests,
    and build system. Improve error handling and return value
    checks. Cleanup XFAIL tests and reference images. Cover
    recently added functionality.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420632000">- Add cairo-tor-scan-convertor.patch: tor-scan-converter: can't
  do_fullrow when intersection in row + 0.5subrow (fdo#85151).</changelog>
  <changelog author="tchvatal@suse.com" date="1420804800">- Spec-cleanify
- Remove the obsoletes for sle10 64bit subpackages on ppc
- Remove libtool archive always</changelog>
  <changelog author="opensuse@mirell.de" date="1426334400">- Update to version 1.14.2:
  + Features:
  - Improve xcb's handling of per-screen subpixel ordering. If
    no Xft.rgba property is specified, default to the screen's
    subpixel order.
  + Performance Optimizations:
  - Improve performance of cpu_to_be32 and be32_to_cpu, making
    truetype subsetting of large fonts run about 15% faster.
  + Bug fixes:
  - Fix unaligned access on sparc with the compact font format
    (CFF).
    Unlike truetype, all data in CFF is not aligned.
    (Debian bug #712836)
  - Fix unaligned access on sparc with tor-scan-converter's
    memory pool.
  - Fix crash when loading a PDF with a transformed image.
    (fdo bug #85151)
  - Fix regression on mingw for bigendian test due to removal of
    file extension for executables. (fdo bug #85120)
  - Fix handling of backslash in PDF interpreter (fdo bug #85662)
  - Fix crash in xlib and xcb renderers when swapping a 0-sized
    glyph
  - Fix bug with RTL text in PDF operators (fdo bug #86461)
  - Fix compilation 'cairo-path-stroke-traps.c' with MSVC8
    (fdo bug #84908)
  - Fix crash in _fill_xrgb32_lerp_opaque_spans when a span
    length is negative.
  - Fix valgrind error by releasing pattern created by
    cairo_pattern_create_rgb().
  - Fix valgrind errors when running cairo-test-suite.
  - Fix memory leak in recording surface replays (fdo bug #87898)
  - Fix destruction of fonts in api-special-cases test.
    (fdo bug #87567)
  - Fix duplicated surface push on similar-image, preventing
    trivial GTK3 program traces from being replayable, with an
    error message about invalid values for the size of the input.
    (fdo bug #73580)
  - Fix crash when win32 surface's image size does not cover the
    entire
    surface. (fdo bug #53121)
  - Fix crash due to obsolete CGFontGetGlyphPath call
    (fdo bug #84324)
  - Fix several build issues on AIX (fdo bugs #89338, #89340,
    [#89356], #89354)
  - Fix various documentation warnings and errors
- Remove cairo-tor-scan-convertor.patch. It was upstreamed.</changelog>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="qzheng@suse.com" date="1524657600">- Add replace-malloc-with-cairo-malloc.patch:
  replace malloc with _cairo_malloc and check cmap size before
  allocating ( boo#1049092, CVE-2017-9814  ).</changelog>
</package>
<package pkgid="8f1b3a190bb51531ffd28806c942b6897bd4036120162869c5b4962a24e49a36" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="8.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
  <changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
  <changelog author="jw@suse.com" date="1397217600">- Add cairo-render-thin-lines.patch: Fix rendering of thin lines,
  so that inkscape can export 0.01mm lines again to PDF. Regression
  introduced with 1.12.3.</changelog>
  <changelog author="fcrozat@suse.com" date="1404820800">- Add cairo-xlib-endianness.patch: fix crash when client and server
  have different endianness [bnc#882951, fdo#63461]</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 1.14.0:
  + Features:
  - Filtering improvements for the image backend, in particular
    down-scaling of images produces filtered images that depend
    on all the pixels of the source.
  - Improve handling of device transformation and scaling,
    allowing Cairo to now support scaling at a device level,
    permitting easier, more transparent HiDPI support.
  - Support JBIG2 mime data in PDF.  This allows embedding of
    more compressed JPEG formats within PDF, rather than
    including the full uncompressed image. Also, reduce the
    number of transparency groups used by PDF to keep the file
    size small and viewing/printing of the PDF fast.
  - Expand the embedding section to include stencil mask support.
  - Reorder font declarations to be in natural order.
  - Update the Skia backend to build against current Skia.
  - Drop Link-Time Optimization (LTO) support from build system.
  - Optimize VBO size on GL to 1M and to 16k for EGL.
  + API changes:
  - cairo_surface_set_device_scale,
    cairo_surface_get_device_scale.
  - cairo_egl_device_get_display, cairo_egl_device_get_context.
  + Dependency changes:
  - Cairo now requires glib 2.14 for its gobject helper
    functions, and pixman 0.30 for downscaling.
  + Bug fixes:
  - Don't embed CMYK Jpeg images in svg.
  - Fix tests to place output in proper location.
  - Fix determination of alpha for all surfaces when recording.
  - Extend oversize check to cairo_gl_surface_create_for_texture,
    so an error surface is returned if the texture is too large
    to render to.
  - Fix embedding of mime data in PDF and PS files.
  - Remove useless error handling in *_reply() functions in XCB.
  - Fix a double-free exposed by multithreaded apps creating and
    destroying the same font concurrently (fdo#69470).
  - Fix corrupt stacks produced by bugs in operand emission for
    trace.
  - Fix out of bounds array access in format cache for xlib.
  - Don't rename glyphs used by seac operator (fdo#70364).
  - Fix crash on calling cairo_create with a finished surface.
  - Fix SSIZE_T definition problem when making with MSYS on
    Windows7.
  - Fix one off issue in gl context cleanup.
  - Fix usage of CAIRO_STACK_ARRAY_LENGTH.
  - Fix rectangle stroke with non rectilinear pen.
  - Fix imagemask with pattern source failure on some printers
    (fdo#69485).
  - Fix whitespace in font names.
  - Fix page size in generated PDFs (fdo#73452).
  - Fix path-currentpoint test by preserving current-point in
    copy_path()/append_path() sequence.
  - Fix generation of HTML in code docs for
    cairo-format-stride-for-width (fdo#63257).
  - Fix spelling of "tessellator" throughout code (fdo#50411).
  - Fix crash in pixman_image_composite32.
  - Fix crash when trying to modify a (const) all-clipped
    cairo_clip_t (fdo#75819).
  - Add check_composite method to all compositors, to fix crashes
    in the test suite.
  - Fix crash in Firefox when scrolling on certain pages.
  - Fix memory leaks found by static analysis.
  - Fix build of any2ppm if fork is not available.
  - Fix broken build for Qt backend, due to missing libstdc++.
  - Fix typo in two cairo_uint128 functions.  Fixes potential
    build issues on systems without a uint128 type.
  - Fix build when --enable-pdf=no.
  - Fix cache_frozen assertions for Win32 print.
  - Correctly check for xcb image surface for inplace upload.
  - Fix webkit-based web browser crashes due to empty boxes by
    skipping over them when tesselating.
  - Make pixman, libpng, and zlib paths commandline configurable
    for win32 builds.
  - Fix image scale on Win32 when GDI scale is not identity.
  - Fix float endian configure test when using clang -O4.
  - Fix compilation with Android bionic libc.
  - Don't try to build util/sphinx on Windows.
  - Fix loss of precision when emitting joins.
  - Fix loss of precision and associated rendering issues in
    cairo-tor-scan-converter from projection onto sample grid.
  - Fix pixman oversampling of neighbouring edges within a cell
    by eliminating self-intersections for the pixman traps
    compositor.
  - Fix multi-line string splitting in PDFs.
  - Various cleanups and fixes to warnings, documentation, tests,
    and build system. Improve error handling and return value
    checks. Cleanup XFAIL tests and reference images. Cover
    recently added functionality.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420632000">- Add cairo-tor-scan-convertor.patch: tor-scan-converter: can't
  do_fullrow when intersection in row + 0.5subrow (fdo#85151).</changelog>
  <changelog author="tchvatal@suse.com" date="1420804800">- Spec-cleanify
- Remove the obsoletes for sle10 64bit subpackages on ppc
- Remove libtool archive always</changelog>
  <changelog author="opensuse@mirell.de" date="1426334400">- Update to version 1.14.2:
  + Features:
  - Improve xcb's handling of per-screen subpixel ordering. If
    no Xft.rgba property is specified, default to the screen's
    subpixel order.
  + Performance Optimizations:
  - Improve performance of cpu_to_be32 and be32_to_cpu, making
    truetype subsetting of large fonts run about 15% faster.
  + Bug fixes:
  - Fix unaligned access on sparc with the compact font format
    (CFF).
    Unlike truetype, all data in CFF is not aligned.
    (Debian bug #712836)
  - Fix unaligned access on sparc with tor-scan-converter's
    memory pool.
  - Fix crash when loading a PDF with a transformed image.
    (fdo bug #85151)
  - Fix regression on mingw for bigendian test due to removal of
    file extension for executables. (fdo bug #85120)
  - Fix handling of backslash in PDF interpreter (fdo bug #85662)
  - Fix crash in xlib and xcb renderers when swapping a 0-sized
    glyph
  - Fix bug with RTL text in PDF operators (fdo bug #86461)
  - Fix compilation 'cairo-path-stroke-traps.c' with MSVC8
    (fdo bug #84908)
  - Fix crash in _fill_xrgb32_lerp_opaque_spans when a span
    length is negative.
  - Fix valgrind error by releasing pattern created by
    cairo_pattern_create_rgb().
  - Fix valgrind errors when running cairo-test-suite.
  - Fix memory leak in recording surface replays (fdo bug #87898)
  - Fix destruction of fonts in api-special-cases test.
    (fdo bug #87567)
  - Fix duplicated surface push on similar-image, preventing
    trivial GTK3 program traces from being replayable, with an
    error message about invalid values for the size of the input.
    (fdo bug #73580)
  - Fix crash when win32 surface's image size does not cover the
    entire
    surface. (fdo bug #53121)
  - Fix crash due to obsolete CGFontGetGlyphPath call
    (fdo bug #84324)
  - Fix several build issues on AIX (fdo bugs #89338, #89340,
    [#89356], #89354)
  - Fix various documentation warnings and errors
- Remove cairo-tor-scan-convertor.patch. It was upstreamed.</changelog>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="qzheng@suse.com" date="1524657600">- Add replace-malloc-with-cairo-malloc.patch:
  replace malloc with _cairo_malloc and check cmap size before
  allocating ( boo#1049092, CVE-2017-9814  ).</changelog>
</package>
<package pkgid="78f73659947c3cc98f7a40409a14126e40cd63008e59e07aebdaa281c548b984" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="8.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
  <changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
  <changelog author="jw@suse.com" date="1397217600">- Add cairo-render-thin-lines.patch: Fix rendering of thin lines,
  so that inkscape can export 0.01mm lines again to PDF. Regression
  introduced with 1.12.3.</changelog>
  <changelog author="fcrozat@suse.com" date="1404820800">- Add cairo-xlib-endianness.patch: fix crash when client and server
  have different endianness [bnc#882951, fdo#63461]</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 1.14.0:
  + Features:
  - Filtering improvements for the image backend, in particular
    down-scaling of images produces filtered images that depend
    on all the pixels of the source.
  - Improve handling of device transformation and scaling,
    allowing Cairo to now support scaling at a device level,
    permitting easier, more transparent HiDPI support.
  - Support JBIG2 mime data in PDF.  This allows embedding of
    more compressed JPEG formats within PDF, rather than
    including the full uncompressed image. Also, reduce the
    number of transparency groups used by PDF to keep the file
    size small and viewing/printing of the PDF fast.
  - Expand the embedding section to include stencil mask support.
  - Reorder font declarations to be in natural order.
  - Update the Skia backend to build against current Skia.
  - Drop Link-Time Optimization (LTO) support from build system.
  - Optimize VBO size on GL to 1M and to 16k for EGL.
  + API changes:
  - cairo_surface_set_device_scale,
    cairo_surface_get_device_scale.
  - cairo_egl_device_get_display, cairo_egl_device_get_context.
  + Dependency changes:
  - Cairo now requires glib 2.14 for its gobject helper
    functions, and pixman 0.30 for downscaling.
  + Bug fixes:
  - Don't embed CMYK Jpeg images in svg.
  - Fix tests to place output in proper location.
  - Fix determination of alpha for all surfaces when recording.
  - Extend oversize check to cairo_gl_surface_create_for_texture,
    so an error surface is returned if the texture is too large
    to render to.
  - Fix embedding of mime data in PDF and PS files.
  - Remove useless error handling in *_reply() functions in XCB.
  - Fix a double-free exposed by multithreaded apps creating and
    destroying the same font concurrently (fdo#69470).
  - Fix corrupt stacks produced by bugs in operand emission for
    trace.
  - Fix out of bounds array access in format cache for xlib.
  - Don't rename glyphs used by seac operator (fdo#70364).
  - Fix crash on calling cairo_create with a finished surface.
  - Fix SSIZE_T definition problem when making with MSYS on
    Windows7.
  - Fix one off issue in gl context cleanup.
  - Fix usage of CAIRO_STACK_ARRAY_LENGTH.
  - Fix rectangle stroke with non rectilinear pen.
  - Fix imagemask with pattern source failure on some printers
    (fdo#69485).
  - Fix whitespace in font names.
  - Fix page size in generated PDFs (fdo#73452).
  - Fix path-currentpoint test by preserving current-point in
    copy_path()/append_path() sequence.
  - Fix generation of HTML in code docs for
    cairo-format-stride-for-width (fdo#63257).
  - Fix spelling of "tessellator" throughout code (fdo#50411).
  - Fix crash in pixman_image_composite32.
  - Fix crash when trying to modify a (const) all-clipped
    cairo_clip_t (fdo#75819).
  - Add check_composite method to all compositors, to fix crashes
    in the test suite.
  - Fix crash in Firefox when scrolling on certain pages.
  - Fix memory leaks found by static analysis.
  - Fix build of any2ppm if fork is not available.
  - Fix broken build for Qt backend, due to missing libstdc++.
  - Fix typo in two cairo_uint128 functions.  Fixes potential
    build issues on systems without a uint128 type.
  - Fix build when --enable-pdf=no.
  - Fix cache_frozen assertions for Win32 print.
  - Correctly check for xcb image surface for inplace upload.
  - Fix webkit-based web browser crashes due to empty boxes by
    skipping over them when tesselating.
  - Make pixman, libpng, and zlib paths commandline configurable
    for win32 builds.
  - Fix image scale on Win32 when GDI scale is not identity.
  - Fix float endian configure test when using clang -O4.
  - Fix compilation with Android bionic libc.
  - Don't try to build util/sphinx on Windows.
  - Fix loss of precision when emitting joins.
  - Fix loss of precision and associated rendering issues in
    cairo-tor-scan-converter from projection onto sample grid.
  - Fix pixman oversampling of neighbouring edges within a cell
    by eliminating self-intersections for the pixman traps
    compositor.
  - Fix multi-line string splitting in PDFs.
  - Various cleanups and fixes to warnings, documentation, tests,
    and build system. Improve error handling and return value
    checks. Cleanup XFAIL tests and reference images. Cover
    recently added functionality.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420632000">- Add cairo-tor-scan-convertor.patch: tor-scan-converter: can't
  do_fullrow when intersection in row + 0.5subrow (fdo#85151).</changelog>
  <changelog author="tchvatal@suse.com" date="1420804800">- Spec-cleanify
- Remove the obsoletes for sle10 64bit subpackages on ppc
- Remove libtool archive always</changelog>
  <changelog author="opensuse@mirell.de" date="1426334400">- Update to version 1.14.2:
  + Features:
  - Improve xcb's handling of per-screen subpixel ordering. If
    no Xft.rgba property is specified, default to the screen's
    subpixel order.
  + Performance Optimizations:
  - Improve performance of cpu_to_be32 and be32_to_cpu, making
    truetype subsetting of large fonts run about 15% faster.
  + Bug fixes:
  - Fix unaligned access on sparc with the compact font format
    (CFF).
    Unlike truetype, all data in CFF is not aligned.
    (Debian bug #712836)
  - Fix unaligned access on sparc with tor-scan-converter's
    memory pool.
  - Fix crash when loading a PDF with a transformed image.
    (fdo bug #85151)
  - Fix regression on mingw for bigendian test due to removal of
    file extension for executables. (fdo bug #85120)
  - Fix handling of backslash in PDF interpreter (fdo bug #85662)
  - Fix crash in xlib and xcb renderers when swapping a 0-sized
    glyph
  - Fix bug with RTL text in PDF operators (fdo bug #86461)
  - Fix compilation 'cairo-path-stroke-traps.c' with MSVC8
    (fdo bug #84908)
  - Fix crash in _fill_xrgb32_lerp_opaque_spans when a span
    length is negative.
  - Fix valgrind error by releasing pattern created by
    cairo_pattern_create_rgb().
  - Fix valgrind errors when running cairo-test-suite.
  - Fix memory leak in recording surface replays (fdo bug #87898)
  - Fix destruction of fonts in api-special-cases test.
    (fdo bug #87567)
  - Fix duplicated surface push on similar-image, preventing
    trivial GTK3 program traces from being replayable, with an
    error message about invalid values for the size of the input.
    (fdo bug #73580)
  - Fix crash when win32 surface's image size does not cover the
    entire
    surface. (fdo bug #53121)
  - Fix crash due to obsolete CGFontGetGlyphPath call
    (fdo bug #84324)
  - Fix several build issues on AIX (fdo bugs #89338, #89340,
    [#89356], #89354)
  - Fix various documentation warnings and errors
- Remove cairo-tor-scan-convertor.patch. It was upstreamed.</changelog>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="qzheng@suse.com" date="1524657600">- Add replace-malloc-with-cairo-malloc.patch:
  replace malloc with _cairo_malloc and check cmap size before
  allocating ( boo#1049092, CVE-2017-9814  ).</changelog>
</package>
<package pkgid="fedbe3e489041e01b5a07bfbf77693110383e68099366f188afea89b7226cb4e" name="caja-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="5.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1472212800">- Initial package.</changelog>
  <changelog author="ecsos@opensuse.org" date="1475236800">- Update to version 2.2.4:
  * Dolphin Plugin: Use the Application name for the socket path
    (gh#owncloud/client#5172).
  * SyncEngine: Fix renaming of directories when files are changed
    (gh#owncloud/client#5195).
  * Selective Sync: Fix HTTP request loop and show error in view
    (gh#owncloud/client#5154).
  * ConnectionValidator: Properly handle error in status.php
    request (gh#owncloud/client#5188).
  * Discovery: Set thread priority to low (gh#owncloud/client#5017).
  * ExcludeFiles: Fix when the directory casing is not the same in
    the settings and in the FS.
  * ShareLink: Ensure the password line edit is enabled
    (gh#owncloud/client#5117).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485259200">- Add nextcloud-client-fix-tray-workaround.patch: fix the tray
  workaround (from commit 98efb07 of owncloud-client).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486123200">- Add nextcloud-client-fix-dolphin.patch from bruno_friedmann to
  fix the Dolphin plugin.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490270400">- Update to version 2.3.1 (changes since 2.2.4):
  * Decreased memory usage during synchronisation.
  * Overlay icons: Lower CPU usage.
  * Allow to not synchronise the server's external storages by
    default.
  * Switch to the new Nextcloud Server WebDAV endpoint.
  * Chunking NG: New file upload chunking algorithm for
    Nextcloud Server 11.0.
  * Allow to synchronise a directory to multiple different servers
    (filename change from .csync_journal.db to _sync_$HASH.db).
  * Conflicts: Use the local mtime for the conflict file name
    (gh#owncloud/client#5273).
  * Add a "Sync now" menu item.
  * Improve SSL Client certificate support (Show UI, Store keys in
    keychain).
  * Propagator: Upload smaller files in parallel.
  * Sync Engine: Read data-fingerprint property to detect backups
    (gh#owncloud/client#2325).
  * GUI: Show link to create an application password/token for
    synchronising.
  * Share dialogue: Add a "Mail link" button.
  * A Caja file manager plugin.
  * Make the "backup detected" message not triggered in wrong cases.
  * SyncEngine: Fix directory renaming when files are changed
    (gh#owncloud/client#5192)
  * Fix a reconnect bug if status.php intermittently returns wrong
    data (gh#owncloud/client#5188).
  * Improve synchronisation scheduling (gh#owncloud/client#5317).
  * Overlay icons: Improvements in correctnes.
  * Tray menu: Only update on demand to fix GNU/Linux desktop
    integration glitches.
  * Progress: Better time/bandwidth estimations.
  * Network: Follow certain HTTP redirects (gh#owncloud/client#2791).
  * Network: Remove all cookies (including load balancers, etc.)
    when logging out.
  * Discovery thread: Low priority.
  * nextcloudsync.log: Write during propagation.
  * Excludes: Consider files in hidden directories excluded
    (gh#owncloud/client#5163).
  * Allow the synchronised directory to be a symlinked directory.
  * Improve HTTP redirect handling (gh#owncloud/client#5555).
  * Blacklist: Escalate repeated soft error to normal error
    (gh#owncloud/client#5500).
  * Fix the URL for linking to application password generation for
    ownCloud 10.0 (gh#owncloud/client#5605).
  * Shibboleth bugfixes.
  * Fixes with regards to low disc space.
  * A tonne of other bugfixes.
  * Refactorings.
  * Improve documentation.
  * Crash fixes.
- Add nextcloud-client-remove-datetime.patch: Remove __TIME__ and
  __DATE__.
- Rebase and rename nextcloud-client-fix-nemo-appname.patch to
  nextcloud-client-fix-caja-nemo-appnames.patch.
- Remove nextcloud-client-fix-dolphin.patch,
  nextcloud-client-fix-ru-typo.patch,
  nextcloud-client-fix-tray-workaround.patch: fixed upstream.
- Rename 100-sync-inotify.conf to the less conflicting
  100-nextcloud-sync-inotify.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1497441600">- Only enable documentation for openSUSE Leap 14.3 and newer
  (boo#1044061).</changelog>
  <changelog author="ecsos@opensuse.org" date="1500638400">- update to 2.3.2
  * Fix more crashes (thanks to everyone submitting to our crash
    reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value
    (3936)
  * Fix disk free check on Windows when opening the local DB
- insert Requires: %{soname}%{sover} = %{version} because lib
  does not up- or downgrade by up- or downgrade from client itself.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1512475200">- Update to version 2.3.3:
  * Chunking NG: Don't use old chunking on new DAV endpoint
    (gh#owncloud/client#5855).
  * Selective Synch: Skip excluded directories when reading DB,
    don't let them show errors (gh#owncloud/client#5772).
  * Settings: Make the window bigger so the Qt version is always
    visible (gh#owncloud/client#5760).
  * Share links: Show a warning that public link shares are public
    (gh#owncloud/client#5786).
  * Downloads: Re-trigger directory discovery on HTTP 404
    (gh#owncloud/client#5799).
  * Notifications: Propagate "Dismiss" as DELETE to server
    (gh#owncloud/client#5922).
  * SynchJournalDB: Don't use ._ as a filename pattern if that does
    not work because of SMB storage settings
    (gh#owncloud/client#5844)
  * SynchJournalDB: Log reason for sqlite3 opening errors.
  * Stop maintaining Qt 4 support.
  * New synch state icon design.
  * Add a state-information icon.
  * Update the icon patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514203200">- Use a better tarball.</changelog>
</package>
<package pkgid="45bc9896bf3745a276c91fcfd216a99983230c636dc708e9715089456451cd82" name="cargo" arch="src">
  <version epoch="0" ver="0.24.0" rel="2.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1478174400">- Update to 0.13.0
  * This release includes security fixes to both curl and OpenSSL.
  * [Fix transitive doctests when panic=abort][cargo/3021]
  * [Add --all-features flag to cargo][cargo/3038]
  * [Reject path-based dependencies in `cargo package`][cargo/3060]
  * [Don't parse the home directory more than once][cargo/3078]
  * [Don't try to generate Cargo.lock on empty workspaces][cargo/3092]
  * [Update OpenSSL to 1.0.2j][cargo/3121]
  * [Add license and license_file to cargo metadata output][cargo/3110]
  * [Make crates-io registry URL optional in config; ignore all changes to
    source.crates-io][cargo/3089]
  * [Don't download dependencies from other platforms][cargo/3123]
  * [Build transitive dev-dependencies when needed][cargo/3125]
  * [Add support for per-target rustflags in .cargo/config][cargo/3157]
  * [Avoid updating registry when adding existing deps][cargo/3144]
  * [Warn about path overrides that won't work][cargo/3136]
  * [Use workspaces during `cargo install`][cargo/3146]
  * [Leak mspdbsrv.exe processes on Windows][cargo/3162]
  * [Add --message-format flag][cargo/3000]
  * [Pass target environment for rustdoc][cargo/3205]
  * [Use `CommandExt::exec` for `cargo run` on Unix][cargo/2818]
  * [Update curl and curl-sys][cargo/3241]
  * [Call rustdoc test with the correct cfg flags of a package][cargo/3242]</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- Add reproducible.patch to allow for reproducible builds</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1485864000">- Update to 0.15.0
  * [In this release, Cargo build scripts no longer have access to the `OUT_DIR`
    environment variable at build time via `env!("OUT_DIR")`][cargo/3368]. They
    should instead check the variable at runtime with `std::env`. That the value
    was set at build time was a bug, and incorrect when cross-compiling. This
    change is known to cause breakage.
  * [Add `--all` flag to `cargo test`][cargo/3221]
  * [Compile statically against the MSVC CRT][cargo/3363]
  * [Mix feature flags into fingerprint/metadata shorthash][cargo/3102]
  * [Link OpenSSL statically on OSX][cargo/3311]
  * [Apply new fingerprinting to build dir outputs][cargo/3310]
  * [Test for bad path overrides with summaries][cargo/3336]
  * [Require `cargo install --vers` to take a semver version][cargo/3338]
  * [Fix retrying crate downloads for network errors][cargo/3348]
  * [Implement string lookup for `build.rustflags` config key][cargo/3356]
  * [Emit more info on --message-format=json][cargo/3319]
  * [Assume `build.rs` in the same directory as `Cargo.toml` is a build script][cargo/3361]
  * [Don't ignore errors in workspace manifest][cargo/3409]
  * [Fix `--message-format JSON` when rustc emits non-JSON warnings][cargo/3410]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1486641600">- Update to 0.16.0
  * No changelog provided by upstream</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1487160000">- Fixes to build for archs armv7, aarch64, ppc64, s390x</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
</package>
<package pkgid="5a078b0e1d4071619ad065d8f3cd864ee671a8b2c41738c0a1a8cf0a23fabcf9" name="cargo" arch="x86_64">
  <version epoch="0" ver="0.24.0" rel="2.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1478174400">- Update to 0.13.0
  * This release includes security fixes to both curl and OpenSSL.
  * [Fix transitive doctests when panic=abort][cargo/3021]
  * [Add --all-features flag to cargo][cargo/3038]
  * [Reject path-based dependencies in `cargo package`][cargo/3060]
  * [Don't parse the home directory more than once][cargo/3078]
  * [Don't try to generate Cargo.lock on empty workspaces][cargo/3092]
  * [Update OpenSSL to 1.0.2j][cargo/3121]
  * [Add license and license_file to cargo metadata output][cargo/3110]
  * [Make crates-io registry URL optional in config; ignore all changes to
    source.crates-io][cargo/3089]
  * [Don't download dependencies from other platforms][cargo/3123]
  * [Build transitive dev-dependencies when needed][cargo/3125]
  * [Add support for per-target rustflags in .cargo/config][cargo/3157]
  * [Avoid updating registry when adding existing deps][cargo/3144]
  * [Warn about path overrides that won't work][cargo/3136]
  * [Use workspaces during `cargo install`][cargo/3146]
  * [Leak mspdbsrv.exe processes on Windows][cargo/3162]
  * [Add --message-format flag][cargo/3000]
  * [Pass target environment for rustdoc][cargo/3205]
  * [Use `CommandExt::exec` for `cargo run` on Unix][cargo/2818]
  * [Update curl and curl-sys][cargo/3241]
  * [Call rustdoc test with the correct cfg flags of a package][cargo/3242]</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- Add reproducible.patch to allow for reproducible builds</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1485864000">- Update to 0.15.0
  * [In this release, Cargo build scripts no longer have access to the `OUT_DIR`
    environment variable at build time via `env!("OUT_DIR")`][cargo/3368]. They
    should instead check the variable at runtime with `std::env`. That the value
    was set at build time was a bug, and incorrect when cross-compiling. This
    change is known to cause breakage.
  * [Add `--all` flag to `cargo test`][cargo/3221]
  * [Compile statically against the MSVC CRT][cargo/3363]
  * [Mix feature flags into fingerprint/metadata shorthash][cargo/3102]
  * [Link OpenSSL statically on OSX][cargo/3311]
  * [Apply new fingerprinting to build dir outputs][cargo/3310]
  * [Test for bad path overrides with summaries][cargo/3336]
  * [Require `cargo install --vers` to take a semver version][cargo/3338]
  * [Fix retrying crate downloads for network errors][cargo/3348]
  * [Implement string lookup for `build.rustflags` config key][cargo/3356]
  * [Emit more info on --message-format=json][cargo/3319]
  * [Assume `build.rs` in the same directory as `Cargo.toml` is a build script][cargo/3361]
  * [Don't ignore errors in workspace manifest][cargo/3409]
  * [Fix `--message-format JSON` when rustc emits non-JSON warnings][cargo/3410]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1486641600">- Update to 0.16.0
  * No changelog provided by upstream</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1487160000">- Fixes to build for archs armv7, aarch64, ppc64, s390x</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
</package>
<package pkgid="64670d391ac1a278dcb0e6ef8ad4ba92466511fd535532624041e45fac4f9b05" name="cargo" arch="src">
  <version epoch="0" ver="0.25.0" rel="2.6.1"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1486641600">- Update to 0.16.0
  * No changelog provided by upstream</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1487160000">- Fixes to build for archs armv7, aarch64, ppc64, s390x</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
</package>
<package pkgid="a40bf1f3bcb4fa90413b230a17e80be22ec156cbc65f2f19bb3db62997846698" name="cargo" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="2.6.1"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1486641600">- Update to 0.16.0
  * No changelog provided by upstream</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1487160000">- Fixes to build for archs armv7, aarch64, ppc64, s390x</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
</package>
<package pkgid="39612443a4d577abb1dee7b7db6a27f0539c86ed1f4073f5e304f29ffaa427ac" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.3" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
</package>
<package pkgid="f8d174490fcda1a7f56b2b0073c66e839b6de0de9cd0134c3e870dfeb82d4fee" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
</package>
<package pkgid="f11c5b2c49fc898fd0874d30ea62a69a139d4a22481527100d83c8a0df56619a" name="catdoc" arch="src">
  <version epoch="0" ver="0.95" rel="10.1"/>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
  <changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
  <changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
  <changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
  <changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>
</package>
<package pkgid="7d377b4dc51db3874b495ea4e45c9921add905af8427cbf324552ea177ba5126" name="catdoc" arch="x86_64">
  <version epoch="0" ver="0.95" rel="10.1"/>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
  <changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
  <changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
  <changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
  <changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
  <changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>
</package>
<package pkgid="d73a5dd0778c05b0a4cda7cd7b9a841c166c4f41ba7114088f28b9d396fb864c" name="cdrkit-cdrtools-compat" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="25.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- build require zlib-devel and fix cmake scripts to detect
  when it is missing.</changelog>
  <changelog author="seife@opensuse.org" date="1266235200">- fix xconfig.h installation with newer cmake</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow warnings from gcc-4.5</changelog>
  <changelog author="reddwarf@opensuse.org" date="1285675200">- updated to 1.1.10:
  * genisoimage: add support for sha256 and sha512 checksum generation
    when making jigdo files.
  * genisoimage: checksumming with lots of algorithms can be very
    time-consuming, so split it out into multiple threads if possible.
  * genisoimage: allow user to specify which checksum algorithms to run
    on the command line.
  * Fix FTBFS with missing xconfig.h. Thanks to Matt Kraai for the patch.
  * genisoimage: fix string overflow breakage when using the -root
    option (https://bugzilla.redhat.com/show_bug.cgi?id=508449)
  * librols: remove or rename several functions that clash with POSIX.
    Fix up callers.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- updated to 1.1.11:
  * genisoimage: Fix silly bug in MD5 output in template files. (Debian
    bug #596681)
  * genisoimage: Minor tweaks to the the genisoimage.1 man page.
  * genisoimage: Update references to atterer.org (Debian bug #596860)
  * genisoimage.1: Make the description of the md5-list format clearer.
  * genisoimage: Use memmove() instead of strcpy() when cleaning
    up graft points.
- Spec file updates:
  - Changes based on rpmdevtools templates and spec-cleaner run.
  - Changed License: to GPLv2.
  - Added description for patches based on openSUSE Patches Guidelines (where
    possible).
  - Updates in Buildrequires:, Requires:,
  - Updates in %prep, %build and %install sections.
  - Fixed rpmlint warnings ("description-shorter-than-summary" for wodim-devel
    and "files-duplicate").
  - Other updates based also on Fedora package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1301918400">- Spec file updates:
  * Added "libbz2-devel" in BuildRequires:.
  * Added "permissions" package in Requires:.
  * Moved mkhybrid to cdrkit-cdrtools-compat.
  * Install also libedc.a library.
  * Changed the installation path of header files (to be more compatible with
    Fedora, at least for libusal).
  * Changed wodim-devel package name to cdrkit-devel-static.
  * Added "-DPIC -fPIC" in CFLAGS to built the static libraries.
  * Added smp_mflags to make.
  * Install config files in /etc.
  * Updates in %post installation script of wodim according to openSUSE spec
    file guidelines.
  * Updates in %files sections.
  * Minor other updates.
- Added a patch from upstream for icedax.1 to fix rpmlint warning "macro `wav,'
  not defined".</changelog>
  <changelog author="davejplater@gmail.com" date="1302177600">- Fixed provides/requires to enable clean installation of cdrtools
  and vice versa.</changelog>
  <changelog author="jengelh@inai.de" date="1364904000">- Dissolve Obsoletes cycle between cdrkit (source package "wodim")
  and cdrtools. Add proper Conflicts instead.
- Use more robust make install call; kill redundant %clean section</changelog>
  <changelog author="coolo@suse.com" date="1366286400">- switch _service to localonly</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Avoid collision of iso{dump,vfy} etc. by moving binaries into
  separate directory. This allows parallel installation of mkisofs
  and genisoimage.</changelog>
  <changelog author="jengelh@inai.de" date="1370520000">- Avoid calling fdupes on entire buildroot; it is not valid for /etc
- Install manpage symlinks inside cdrkit-cdrtools-compat
- Remove static libraries for which there are no header files
  packaged</changelog>
  <changelog author="nadvornik@suse.com" date="1394020800">- fixed large file support (bnc#615177, bnc#831820)
  genisoimage-multi-extent-fix-bnc615177.patch</changelog>
  <changelog author="lnussel@suse.de" date="1403265600">- make wodim position independent (bnc#882035, cdrkit-pie.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1422619200">- add cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (fate#318444)</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Update geteltorito script to latest version
  source: http://userpages.uni-koblenz.de/~krienke/ftp/noarch/geteltorito/geteltorito</changelog>
  <changelog author="jkeil@suse.de" date="1433851201">- Use full url as source</changelog>
  <changelog author="dmueller@suse.com" date="1436356800">- disable source download service, upstream download location
  is dead</changelog>
  <changelog author="dmueller@suse.com" date="1439467200">- remove cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (bsc#939456)</changelog>
  <changelog author="jkeil@suse.de" date="1441108800">- add fix-check_linux_26.patch: also compare major kernel version
  number. (bsc#897950)</changelog>
  <changelog author="jdelvare@suse.com" date="1532692800">- add genisoimage-fix-TRANS.TBL-with-large-files.patch: fix a crash
  when option -T (generate TRANS.TBL) is used in conjunction with
  multi-extent files (files larger than 4 GB) (bsc#1100466)</changelog>
</package>
<package pkgid="fe30c561bb5b0bc7535da8e414e94047c634c3c212d84e90490816a8fdf0f96a" name="cdrkit-devel-static" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="25.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- build require zlib-devel and fix cmake scripts to detect
  when it is missing.</changelog>
  <changelog author="seife@opensuse.org" date="1266235200">- fix xconfig.h installation with newer cmake</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow warnings from gcc-4.5</changelog>
  <changelog author="reddwarf@opensuse.org" date="1285675200">- updated to 1.1.10:
  * genisoimage: add support for sha256 and sha512 checksum generation
    when making jigdo files.
  * genisoimage: checksumming with lots of algorithms can be very
    time-consuming, so split it out into multiple threads if possible.
  * genisoimage: allow user to specify which checksum algorithms to run
    on the command line.
  * Fix FTBFS with missing xconfig.h. Thanks to Matt Kraai for the patch.
  * genisoimage: fix string overflow breakage when using the -root
    option (https://bugzilla.redhat.com/show_bug.cgi?id=508449)
  * librols: remove or rename several functions that clash with POSIX.
    Fix up callers.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- updated to 1.1.11:
  * genisoimage: Fix silly bug in MD5 output in template files. (Debian
    bug #596681)
  * genisoimage: Minor tweaks to the the genisoimage.1 man page.
  * genisoimage: Update references to atterer.org (Debian bug #596860)
  * genisoimage.1: Make the description of the md5-list format clearer.
  * genisoimage: Use memmove() instead of strcpy() when cleaning
    up graft points.
- Spec file updates:
  - Changes based on rpmdevtools templates and spec-cleaner run.
  - Changed License: to GPLv2.
  - Added description for patches based on openSUSE Patches Guidelines (where
    possible).
  - Updates in Buildrequires:, Requires:,
  - Updates in %prep, %build and %install sections.
  - Fixed rpmlint warnings ("description-shorter-than-summary" for wodim-devel
    and "files-duplicate").
  - Other updates based also on Fedora package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1301918400">- Spec file updates:
  * Added "libbz2-devel" in BuildRequires:.
  * Added "permissions" package in Requires:.
  * Moved mkhybrid to cdrkit-cdrtools-compat.
  * Install also libedc.a library.
  * Changed the installation path of header files (to be more compatible with
    Fedora, at least for libusal).
  * Changed wodim-devel package name to cdrkit-devel-static.
  * Added "-DPIC -fPIC" in CFLAGS to built the static libraries.
  * Added smp_mflags to make.
  * Install config files in /etc.
  * Updates in %post installation script of wodim according to openSUSE spec
    file guidelines.
  * Updates in %files sections.
  * Minor other updates.
- Added a patch from upstream for icedax.1 to fix rpmlint warning "macro `wav,'
  not defined".</changelog>
  <changelog author="davejplater@gmail.com" date="1302177600">- Fixed provides/requires to enable clean installation of cdrtools
  and vice versa.</changelog>
  <changelog author="jengelh@inai.de" date="1364904000">- Dissolve Obsoletes cycle between cdrkit (source package "wodim")
  and cdrtools. Add proper Conflicts instead.
- Use more robust make install call; kill redundant %clean section</changelog>
  <changelog author="coolo@suse.com" date="1366286400">- switch _service to localonly</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Avoid collision of iso{dump,vfy} etc. by moving binaries into
  separate directory. This allows parallel installation of mkisofs
  and genisoimage.</changelog>
  <changelog author="jengelh@inai.de" date="1370520000">- Avoid calling fdupes on entire buildroot; it is not valid for /etc
- Install manpage symlinks inside cdrkit-cdrtools-compat
- Remove static libraries for which there are no header files
  packaged</changelog>
  <changelog author="nadvornik@suse.com" date="1394020800">- fixed large file support (bnc#615177, bnc#831820)
  genisoimage-multi-extent-fix-bnc615177.patch</changelog>
  <changelog author="lnussel@suse.de" date="1403265600">- make wodim position independent (bnc#882035, cdrkit-pie.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1422619200">- add cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (fate#318444)</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Update geteltorito script to latest version
  source: http://userpages.uni-koblenz.de/~krienke/ftp/noarch/geteltorito/geteltorito</changelog>
  <changelog author="jkeil@suse.de" date="1433851201">- Use full url as source</changelog>
  <changelog author="dmueller@suse.com" date="1436356800">- disable source download service, upstream download location
  is dead</changelog>
  <changelog author="dmueller@suse.com" date="1439467200">- remove cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (bsc#939456)</changelog>
  <changelog author="jkeil@suse.de" date="1441108800">- add fix-check_linux_26.patch: also compare major kernel version
  number. (bsc#897950)</changelog>
  <changelog author="jdelvare@suse.com" date="1532692800">- add genisoimage-fix-TRANS.TBL-with-large-files.patch: fix a crash
  when option -T (generate TRANS.TBL) is used in conjunction with
  multi-extent files (files larger than 4 GB) (bsc#1100466)</changelog>
</package>
<package pkgid="58be804721cccd73cca8d224f1ab3fc421a5a87b87e1559a9aa2f935c61e4cc9" name="ceph" arch="src">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="cc74b27365f01f5d7a7b2fda1bca91838062e889d97ca038eaa86dcee386ac00" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="66944e175be8cfa133e6ec65cbb8dc3a989371a51c1370e79b8947cfc355f230" name="ceph" arch="src">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="02d40d40eacc5a57f14adcfa6ac0eaab05b53a01e04a25fe3bee0b7f9546b871" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="ab974c98ee137c07a055e4673fcba27accfc724d723363ba87f81ae9baad1d09" name="ceph" arch="src">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="5dd66eaa21f126534cfc920c47609a13773b033f525cf87baee3892b87e96123" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="898059565162bfb14b40914a7b57115d411e84212722283c159d4cbfc8feb9da" name="ceph" arch="src">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="16bdbdedb95c306f7036571f50509fb9b5bd6a366652ea5fbb725fb601b3ee59" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="3c1500472cf7a6dbbd03f67b5a320d581974cec8dce329b7e704c8c78a17af1d" name="ceph" arch="src">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="6aa5df262790e33193dc0e3fe08a33dcb382a1b0b5eb159a3a75c33d2e205c03" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="dbd83545d6079b73a1c68f2f500bb2dfcaaa51357d64ab023895bd818c88cb84" name="ceph" arch="src">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="05a19687ec6042a2404c5b871a39c319f7a95c0b04fa5dc7a1d2201b1f881db8" name="ceph" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="0b229852dca189b5b49cf237ad97172342090ee83a87972efe9bac5c55cb3f09" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="8390e852b6b31a1eeb7b3732ed03315f5b3d72c0956c23f8102227f8a69458b6" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="95922be434a888351eeba767d9a5315835b0998a0a9d6b441de041556beca90f" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="f09ac30e07553a97b47acc317b757d5869aa9386d0adcd7ec189258e259a6e1f" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="a2da2d8a131f31cc06716c0c569578b9c9eaeedb76a27515c2be9db21c631f10" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="c461b510ef59803b12f63cf3d2bd508202e77a5909c43a79d0859c75417024ec" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="98da3a21078ce8f5edfbcd4c4f5f9d2d1b0da895de6b532fb99cfec9863a7495" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="699e3727ec3ffa9536a768a781c6a5c37d95046c713165e0cb1393ef311d95a6" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="e9fd0130b9c957e882414357d8f104c3a0c61d6a183e80363c6633f2bd54c3f1" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="e5716549b3fa65fc9ff7aa3c1e8417b52f4b2ac8c9331cfdfd50f972c7d5427b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="2155e769ae8236c95253e10dbf212c7617bc36a66a7e4893effe36cebabe6514" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="c960ff8ad747532144fbabad60d29a0ced37ce1a3ced9f44087099f5642f6385" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="975ee736da8e312dbacca03a2c528821c8189a0ea4ac332add054d21cfccad9d" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="57dded3416bec2eab8ef29940d777c3abce4e6296f9b241b3fb1bd4136df69d7" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="5ecb72008697cd428474537d0e1a88f94e58fc4e1a2aac3f6141ca95119a6eeb" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="dc768f1a746bb22e2448c31f30150a40ecffcb3ca69ae782d42e3bd17228c3fd" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="b12c449914f0572ccb400dae7751e957b97c5220da932f5a4596969f838f55d5" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="f77c17fd7a88e479088adf2bf1e85c366df9216b0485485c2fcaad41d73a50df" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="c566f80abeefde4e4bdce9281c7763746853bea7bea60ead55348ce1197a0f6d" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="3521573c23e18c3a1e1bd95727ca011da8cdfe613eacb55f2dd0d5ac5b281a94" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="d4a8b5bfe990113b574c487ffbf34c9e21f0adf6bd5c913c24567d37836e6c5b" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="9b1658f2819df5368112863a42464b8e6bdc6ad5b6776b50016ae2454293b6e1" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="7239a17f26ba2cccfa9867ba7f1ec1f1bc978a78786aa5d862c56cdc0bd44adf" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="f1d9b1d51f8eeab99006b6594c60b4d871f78d131e6641c72103fbec88e1ef65" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="b63c5a5c625d160e2f7ae01f8ea204f4f35921ffd621d240c950391ef77f2453" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="092c44be20a6f371ed2e4b91eb03dffdff515ca7a8209da464417d73041a6c35" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="b37254f240dc6cdf03ef74abe895fe698494c395086fc28494692de3ac9e04c4" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="f687d790baa8105db7ab01a7d38d8a4312209b83f5d550d259224300db5c2d58" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="2121384938708df1e8638f2c37ed5cc77584f3f61cb2d145d71aac292e87fd61" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="1b3b9788498ccaa7374a8d65a92d4a76527ea151f358987444bcb228be604bb8" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="4a9a3cc1b454c20995b5a9d657db68abbd9d6e9dcaf2a8d6f85dc783e53ffa9c" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="fd1ba8d3edf91f20dbbb37b9b068b07516f7ebf1201a91cef9236459bf3d3359" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="0145b7b72d0f405ce1b604fbc6ce4e25c397539351fd53f1b7e62752fc10020e" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="17bab20661a951eca8e1b063bfd3a1a677256a4958cc25e2e088cb9e0a9efbb6" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="0a5bb188e7cf97e58d95ff4bec2337175d2e73934da1ffeedd29199232dd964f" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="1784ca88f7ccbd1f007eaa22f18b4ad8b435c75a4b6e3a849bc21f7eb19d46c6" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="7d327074b0b7f320f23169342331188d7f7b2a311d06bf4ad1a59d40f72f7217" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="638e07c71f33bac957624bd96d2f6148cea30d505366ac12b36a8941d9d56742" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="6805d5f30e9404c13ff84be47e4bd601e49305bbbc0e08b43886cacadf917a39" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="875b544b3e956903cca5e04adfadb7ae33d9f7f00d0adb0d990ae8ddc600ae94" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="a6809d9856326431a80693dbb1329ce8f866eef392f77e99508a71b830fffb17" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="7597457f94694bbc6650873975aa16d23b35a1e227454fec6306b9393872f169" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="33ff0d5c016022a4fd4204cbced308395e0a1075e370824067e1c5fece0e50b8" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="d124c3daedce96069a421c027d11d4b1eb485c4d8da929c919a104479cf7d969" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="2844709e02522f985a5ebdaca00e50f17d9a07a699d02ab6886c797cc7553e32" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="fbc642da889b4d1acdaca678a6771bae12f135a3bdda37d06fe2dc231e8f092e" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="4134bf881eb8e02345645f62d37bec312c49b332bf059b7fea3db2ec7c742794" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="810e050d9f0b44fe5b042fce0974ea23aeb13dd2a4b3069b8026c30211dab7e7" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="7c016221e15017159aa5cc274c3b42e294ab6e87f4ba05ee3771036add1a4c40" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="f892059429beb19b6f5bd8cd618277a9b0f28a99ddf46bd778b17cdae3adfc33" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="8a7fb1cf8c8955182be992334b0b07c68647935639c45a3cc24a5c8f7e4b3de3" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="f1c538482586d5ff9db89722f5a5d3e3acd1c18854682482144eb429f4278a69" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="f34ab89c50b7fd5065f259cbe27d56304541bb385cfb9688c53bd1bd7e683a30" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="75ae3b2f31d9431e0148c66ef829b8cb381b6392c1bfbb2429fa175700dd061e" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="ac26bf80225ff00febcbbfd247770f1ce9309817ee524357eed73b3e00802277" name="ceph-test" arch="src">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="06434f0698c9c36aadfda89dcc0bf3cb276e6e9e7ef420cf85a8babd44094396" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>
  <changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
  <changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
</package>
<package pkgid="116da688b1c5511a5a5e91af363aed97009a9a9eb9357bcb7ed0d84ddc5cefb9" name="ceph-test" arch="src">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="d627c2d16e1fda073d2d189f7a72da9e6ff7955c442ac9413db5dfff78ba795c" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.2.0+git.1504118058.706f78da1a" rel="6.1"/>
  <changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
  <changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
  <changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
  <changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
  <changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
  <changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
  <changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
  <changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
  <changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
  <changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
  <changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
  <changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
  <changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
  <changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
  <changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
  <changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
  <changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
  <changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
</package>
<package pkgid="7190ec48371ed02b5c0aa47a636d96ab6342bca205e0d1728d2f021b05bcd096" name="ceph-test" arch="src">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="e58e1b7642fec723a6dc3b7b56a5b910ee2663a6ae606b662ad5380d44da46ca" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.2.10+git.1544718327.fc6f0c7299" rel="18.1"/>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
  <changelog author="ncutler@suse.com" date="1544529600">- Update to version 12.2.10-542-g793ccbe1d0:
  + upstream v12.2.10 release
    see https://ceph.com/releases/v12-2-10-luminous-released/
  + additional fixes from PTFs:
  * rgw: resharding produces invalid values of bucket stats (bsc#1110419)
  * rgw: Fix log level of gc_iterate_entries (bsc#1114414)
  * rgw: dynamic reshard fixe (bsc#1109009)
  * bsc#1110415, bsc#1110416
    [#] rgw: es module: set compression type correctly
    [#] rgw: ES sync: be more restrictive on object system attrs
    [#] rgw: ES sync: wrap all the decode bls in try block
    [#] rgw: librgw: initialize curl and http client for multisite
  * bsc#1116205, bsc#1112872
    [#] rgw: allow init complete to proceed in case of erroneus zone deletes
    [#] rgw: period update: check for dangling master zone references
    [#] tests: tests for master zone deletion
    [#] tests: rgw: test_multi: python 2-3 compatibility</changelog>
</package>
<package pkgid="346180414252fd1c694d51749cc1a33dbf2c26b3da14f9ae22ff2c5d3fb08bb5" name="ceph-test" arch="src">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="f5acf030d9a10827805e71a675ebb7344bf070eab5214149ae62796f0f5c605b" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.2.5+git.1524775272.5e7ea8cf03" rel="9.1"/>
  <changelog author="ncutler@suse.com" date="1504008000">- Update to version 12.2.0+git.1504013812.01ea30bcc9:
  + upstream Luminous v12.2.0 (first stable) release
  * increment version number to 12.2.0
  + spec file
  * edge mem_per_process upward after seeing some OOM-esque build failures
  * package ceph-volume man pages</changelog>
  <changelog author="ncutler@suse.com" date="1504094400">- Update to version 12.2.0+git.1504118058.706f78da1a:
  + fix ceph --version to say "stable" instead of "rc"
  + spec file: add python-numpy-devel build dependency for SUSE
  + bsc#1053836
  * Revert "osd: adjust osd_min_pg_log_entries"
  * osd/PGLog: write only changed dup entries</changelog>
  <changelog author="ncutler@suse.com" date="1505131200">- Update to version 12.2.0+git.1505141259.1264bae1a8:
  + rgw_file: fix LRU lane lock in evict_block() - bsc#1054061
  + os/bluestore: fix deferred write deadlock, aio short return handling -
    bsc#1056125
  + mon/OSDMonitor: don't create pgs if pool was deleted - bsc#1056967</changelog>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
</package>
<package pkgid="d94ba11c7f4e892f71df7205cf4347350fc1885dc159e20449a3f9d811a521c4" name="ceph-test" arch="src">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="00e23885abb87789a20b94305a2c0700a5e6615dcb5f8965a8c45d2fde3c8c60" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.2.7+git.1531910353.c0ef85b854" rel="12.1"/>
  <changelog author="ncutler@suse.com" date="1505995200">- Update to version 12.2.0+git.1506009682.0e5b4307f3
  (upstream luminous a931cf68120d99661b785cc794e2b6965d621f06):
  + ceph-disk: fix mountpoint check for systemctl enable --runtime
    (bsc#1051598)
  + spec file:
  * ceph-fuse requires fuse; make that dependency explicit
  * drop obsolete qemu symlink hack in librbd1 %post</changelog>
  <changelog author="ncutler@suse.com" date="1506772800">- Update to version 12.2.1+git.1506764331.9e2e945bd0:
  (upstream luminous 9d8acf6f3f85dd1410629cc680474e38f3be9838)
  + upstream Luminous v12.2.1
    https://ceph.com/releases/v12-2-1-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
</package>
<package pkgid="e090fb6577285cb862eaeac8a213055dc41dd807b07d91d540a0b6b947492312" name="ceph-test" arch="src">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="7e4701f462aec2bcd53ba1f72dccb6d2aa9fe6f5fa815af7e5f422867ba3afd6" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="12.2.8+git.1536505967.080f2248ff" rel="15.1"/>
  <changelog author="ncutler@suse.com" date="1507118400">- Update to version 12.2.1+git.1507108986.dc637a73e2:
  + rgw: defer constructing keystone engine unless url is configured
    (issue#21400, pr#17775)</changelog>
  <changelog author="ncutler@suse.com" date="1507204800">- Update to version 12.2.1+git.1507226092.b783a015b9:
  + Revert "SIGPIPE suppression for platforms without SO_NOSIGPIPE or MSG_NOSIGNAL"
  + msgr: add a mechanism for Solaris to avoid dying on SIGPIPE</changelog>
  <changelog author="ncutler@suse.com" date="1507809600">- Update to version 12.2.1+git.1507819941.856710ff58:
  + rgw: stop/join TokenCache revoke thread only if started (bsc#1059458)
  + systemd: reinstate TasksMax=infinity</changelog>
  <changelog author="ncutler@suse.com" date="1508068800">- Update to version 12.2.1+git.1507910930.aea79b8b7a:
  + rgw: Remove assertions in IAM Policy (bsc#1063014, CVE-2017-16818)</changelog>
  <changelog author="ncutler@suse.com" date="1509105600">- Update to version 12.2.1+git.1509128342.9347aa6662:
  + common/common_init: disable ms subsystem log gathering for clients
  + spec file: add %{_sysctldir}/90-ceph-osd.conf to ceph-osd
  * ceph.spec.in,debian/rules: change aio-max-nr to 1048576
  * sysctl.d: set kernel.pid_max=4194304 (bsc#1061461)</changelog>
  <changelog author="ncutler@suse.com" date="1510228800">- Update to version 12.2.1+git.1510221942.af9ea5e715:
  + bsc#1066502
  * mon/osd_metadata: sync osd_metadata table
  * mon/OSDMonitor: tidy prefix definitions
  * mon: implement MDSMonitor::get_store_prefixes
  * mon/mgr: sync mgr_command_descs table and mgr_metadata table
  * mon/MgrMonitor: populate on-disk cmd descs if empty on upgrade
  * mon/MgrMonitor: read cmd descs if empty on update_from_paxos()
  + bsc#1067088
  * osd: make the PG's SORTBITWISE assert a more generous shutdown
  + bsc#1066182
  * rgw: ListBucketIndexesCR spawns entries_index after listing metadata
  * rgw: fix error handling in ListBucketIndexesCR
  * rgw: RGWDataSyncControlCR retries on all errors
  + RGW fixes:
  * test/rgw: add test_multipart_object_sync
  * cls/rgw: increment header version to avoid overwriting bilog entries
  * rgw: disable dynamic resharding in multisite environment</changelog>
  <changelog author="ncutler@suse.com" date="1511265600">- Update to version 12.2.1+git.1511279898.8aa892202e:
  + bsc#1060904
  * rgw: keystone: bump up logging when error is received
  + bsc#1067705
  * rgw: set sync_from_all as true when no value is seen
  + bsc#1066182
  * rgw: data sync: set num_shards when building full maps
  * dencoder/rgw: expose rgw sync status types
  * rgw: set num_shards on 'radosgw-admin data sync init'</changelog>
  <changelog author="ncutler@suse.com" date="1511524800">- Drop _link to reflect that filesystems:ceph:luminous/ceph is no
  longer the source for filesystems:ceph/luminous (the Factory/TW
  devel project). Development of ceph in Factory/TW will continue
  in filesystems:ceph:mimic/ceph.</changelog>
  <changelog author="ncutler@suse.com" date="1513166400">- Update to version 12.2.2+git.1513167344.b87ca3c12e:
  + upstream v12.2.2 release
    for details, see https://ceph.com/releases/v12-2-2-luminous-released/</changelog>
  <changelog author="ncutler@suse.com" date="1513339200">- Update to version 12.2.2+git.1513357992.5030136da9:
  + tools/crushtool: skip device id if no name exists (bsc#1067119)
  + pybind/mgr/prometheus: don't crash when encountering an unknown PG state
  + mgr/prometheus: add missing 'deep' state to PG_STATES in ceph-mgr prometheus plugin</changelog>
  <changelog author="ncutler@suse.com" date="1519214400">- Update to version 12.2.2+git.1519207306.ac2f91f62a:
  + qa
  * install deepsea from packages instead of source
  * add suse/smoke and deepsea/adhoc suites
  + rgw: make init env methods return an error (bsc#1081379, CVE-2018-7262)</changelog>
  <changelog author="ncutler@suse.com" date="1520078400">- Update to version 12.2.4+git.1520094840.20594f896d:
  + merge upstream point releases v12.2.3 and v12.2.4
  * rocksdb: fixes early metadata spill over to slow device in bluefs
    (bsc#1071386)
  * mon: reenable timer to send digest when paxos is temporarily inactive
    (bsc#1070357)
  * fsid mismatch when creating additional OSDs (bsc#1080788)
  * rgw: malformed http headers can crash rgw (bsc#1081379, CVE-2018-7262)
  * crash in civetweb/RGW (bsc#1081600)
  * bluestore: db.slow used when db is not full (bsc#1092874)
- migrate tarball generation from tar_scm source service to upstream make-dist
  script
  + drop _service, _servicedata
  + add checkin.sh, README-checkin.sh</changelog>
  <changelog author="ncutler@suse.com" date="1520337600">- Update to version 12.2.4+git.1520347944.ea5f50680a:
  + rgw openssl fixes (bsc#1079076, bsc#1081379)</changelog>
  <changelog author="ncutler@suse.com" date="1524657600">- Update to version 12.2.5-405-gb4dd2afd81
  + upstream v12.2.5 point release
  * journal: limit number of appends sent in one librados op
    (bsc#1086340)
  * RGW user stats fixes (bsc#1087493)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to version 12.2.5-407-g5e7ea8cf03:
  + osd: do not crash on empty snapset (bsc#1074301)
  + mon: add 'ceph osd pool get erasure allow_ec_overwrites' command
    (bsc#1087269)</changelog>
  <changelog author="tserong@suse.com" date="1529668800">- Update to version ceph-12.2.5-414-g8450ca79c0:
  + bsc#1096748, CVE-2018-1128, CVE-2018-1129:
  * auth/cephx/CephxProtocol: better random
  * cephx: update docs
  * auth/cephx: add authorizer challenge
  * mon,msg: implement cephx_*_require_version options
  * auth/cephx/CephxSessionHandler: implement CEPHX_V2 calculation mode
  * include/ceph_features: define CEPHX2 feature
  * msg/async,simple: include MGR as service when applying cephx settings</changelog>
  <changelog author="tserong@suse.com" date="1530100800">- Update to version ceph-12.2.5-419-g8cbf63d997:
  + bsc#1099162, CVE-2018-10861:
  * qa/workunits/rados: test pool op permissions
  * qa/workunits/rbd: test self-managed snapshot create/remove permissions
  * pybind/rados: new methods for manipulating self-managed snapshots
  * mon/OSDMonitor: enforce caps for all remaining pool ops
  * mon/OSDMonitor: enforce caps when creating/deleting unmanaged snapshots</changelog>
  <changelog author="ncutler@suse.com" date="1531915200">- Update to version 12.2.7-420-gc0ef85b854:
  + upstream v12.2.7 release, see:
  * https://ceph.com/releases/12-2-7-luminous-released/
  + bsc#1094932 - luminous: osd: eternal stuck PG in 'unfound_recovery'</changelog>
  <changelog author="ncutler@suse.com" date="1534248000">- Update to version 12.2.7-425-g38edbb7c2f:
  + luminous: mgr/MgrClient: Protect daemon_health_metrics (boo#1104331)
  + ceph-ver-hack.sh: do not touch src/ceph_ver.h.in.cmake</changelog>
  <changelog author="ncutler@suse.com" date="1536494400">- Update to version 12.2.8-467-g080f2248ff:
  + upstream Luminous 12.2.8 point release - for details, see
    https://ceph.com/releases/v12-2-8-released/
  * bsc#1100101 - Syntax errors in the man page for "ceph-bluestore-tool"
  * bsc#1105251 - Configuring PCF is failing when configuring with AWS signature 4
  * bsc#1107857 - ceph-osd segfaults in safe_timer thread</changelog>
</package>
<package pkgid="3cfb5bb94edb2973ee96f0f0ac91bd62465540c58a4c3678ae24421d5eda3ff1" name="cfitsio" arch="src">
  <version epoch="0" ver="3.430" rel="4.3.1"/>
  <changelog author="mseben@novell.com" date="1274270400">- fix libdir,include dir and version string in pkgconfig (bnc#546004)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1274356800">- update to version 3.23.0,
  * reduced the default value for the floating point image
    quantization parameter (q) from 16 to 4.
  * enhanced the template keyword parsing routine to reject a
    header template string that only contains a sequence of dashes.
  * enhanced the ASCII region file reading routine to allow tabs
    as well as spaces between fields in the file.
  * got rid of bogus error message when calling
    fits_update_key_longstr
  * Made the error message more explicit when CFITSIO tries to
    write to a GZIP compressed file.
  * several bugfixes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1316174400">- update to version 3.280
  * Lots of changes (see changes.txt file).
- Spec file updates
  * Changes based on spec-cleaner run.
  * Updates in summaries and descriptions.
  * Updates in Group: entries of the packages.
  * Added description for the patch based on openSUSE Patches Guidelines.
  * Added pkg-config in BuildRequires: (fix for "no-pkg-config-provides"
    rpmlint warning).
  * Added cfitsio package (containing some utilities).
  * Fixes for cfitsio.pc.
  * Minor other updates.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1317729600">- Added correct fix for cfitsio.pc include dirs (Cflags: was wrongly replaced
  with $Cflags:). Fixes reopened bnc#546004.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1323000000">- Update to version 3.290:
  Enhancements
  * modified Makefile.in to allow configure to override the lib and include
    destination directories.
  * added (or restored actually) support for tile compression of 1-byte integer
    images in imcomp_compress_tile.  Support for that data type was overlooked
    during recent updates to this routine.
  * modified the fits_get_token command-line parsing routine to perform more
    rigorous checks to determine if the token can be interpreted as a number
    or not.
  * made small modification to fpack.c to not allow the -i2f option (convert
    image from integer to floating point) with the "-g -q 0" option (do lossless
    gzip compression).  It is more efficient to simply use the -g option alone.
  * made modifications to fitsio.h and drvrfile.c to support reading and
    writing large FITS files (&gt; 2.1 GB) when building CFITSIO using
    Microsoft Visual C++ on Windows platforms.
  * added new WCS routine (ffgicsa) which returns the WCS keyword values
    for a particular WCS version ('A' - 'Z').
  Bug Fixes
  * fixed a problem with multi-threaded apps that open/close FITS files
    simultaneously by putting mutex locks around the call to
    fits_already_open and in fits_clear_Fptr.
  * fixed a bug when using the 'regfilter' function to select a subset of the
    rows in a FITS table that have coordinates that lie within a specified
    spatial region on the sky.  This bug only affects the rarely used panda
    (and epanda and bpanda) region shapes in which the region is defined by
    the intersection of an annulus  and a pie-shaped wedge.  The previous code
    (starting with version 3.181 of CFITSIO where support for the panda region
    was first introduced) only worked correctly if the 2 angles that define
    the wedge have values between -180 and +180.  If not, then fewer rows than
    expected may have been selected from the table.
  * fixed the extended filename parser so that when creating a histogram by
    binning 2 table columns, if a keyword or column name is given as the
    weighting factor,  then the output histrogram image will have a floating
    point datatype, not the default integer datatype as is the case when no
    weigth is specified (e.g. with a filename like
    "myfile.fits[bin x,y; weight_column]"
  * added fix to the code in imcompress.c to work around a problem with
    dereferencing the value of a pointer, in cases where the address of
    that pointer has not been defined (e.g., the nulval variable).
  * modified the byte shuffling algorithm in fits_shuffle_8bytes to work
    around a strange bug in the proprietary SunStudioExpress C compiler
    under OpenSolaris.
  * removed spurious messages on the CFITSIO error stack when opening a
    FITS file with FTP (in drvrnet.c);
- Removed the Makefile.in changes from cfitsio-makefile.patch (fixed upstream).
- Spec file updates:
  * Changed License entry to SPDX style.
  * Enable multithreading support.</changelog>
  <changelog author="idoenmez@suse.de" date="1323000001">- Fix SLE_11 build</changelog>
  <changelog author="idoenmez@suse.de" date="1323086400">- Set license to ISC, bnc#734865</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336478400">- Update to version 3.300:
  Enhancements
  * Added new routine called fits_is_reentrant which returns 1 or 0 depending
    on whether or not CFITSIO was compiled with the -D_REENTRANT directive.
    This can be used to determine if it is safe to use CFITSIO in
    multi-threaded programs.
  * Implimented much faster byte-swapping algorithms in swapproc.c based on
    code provided by Julian Taylor at ESO, Garching.  These routines
    significantly improve the FITS image read and write speed (by more than a
    factor of 2 in some cases) on little-endian machines (e.g., Linux and
    Microsoft Windows running on x86 PCs) where byte-swapping is required.
    This has no effect on big-endian machines (e.g., Macs).  Even faster
    performance can be achieved in some cases by invoking the new
    "--enable-sse2" or "--enable-ssse3" configure options when building CFITSIO
    on machines that have CPUs and compilers that support the SSE2 and SSSE3
    machine instructions.
  * added additional support for implicit data type conversion in cases where
    the floating point image has been losslessly compressed with gzip.  The
    pixels in these compressed images can now be read back as arrays of short,
    int, and long integers as well as single and double precision
    floating-point.
  * modified fitsio2.h and f77_wrap.h to recognize IBM System z mainframes by
    testing if __s390x__ or __s390__ is defined.
  * small change to ffgcrd in getkey.c so that it supports reading a blank
    keyword (e.g., a keyword whose name simply contains 8 space chracters).
  Bug Fixes
  * fixed a bug in imcomp_decompress_tile that caused the tile-compressed image
    to be uncompressed incorrectly (even though the tile-compressed image
    itself was written correctly) under the following specific conditions:
  - the original FITS image has a "float" datatype (R*4)
  - one or more of the image tiles cannot be compressed using the standard
    quantization method  and instead are losslessly compressed with gzip
  - the pixels in these tiles are not all equal to zero (this bug does
    affect tiles where all the pixels are equal to zero)
  - the program that is reading the compressed image uses CFITSIO's
    "implicit datatype conversion" feature to read the "float" image
    back into an array of "double" pixel values.
    If all these conditions are met, then the returned pixel values in the
    affected image tiles will be garbage, with values often ranging
    up to 10**34.  Note that this bug does not affect the fpack/funpack
    programs, because funpack does not use CFITSIO's implicit datatype
    conversion feature when uncompressing the image.
- Replaced cfitsio-makefile.patch with cfitsio.patch (taken from Fedora). It's
  the same patch with the addition of linking libcfitsio with libpthread and
  libm (fixes possible errors with packages requiring libcfitsio0 and compiled
  with the "--as-needed" flag).
- Added a patch (cfitsio-zlib.patch) to use system zlib (based on patches from
  Fedora and Debian). Added zlib-devel in build depencdencies.
- Added a patch (implicit-pointer-decl.patch) to fix "implicit-pointer-decl"
  rpm post build check warning.
- Moved "-lpthread" and added "-lz" in Libs.private: of cfitsio pkg-config
  file.
- Removed "-fno-strict-aliasing" from CFLAGS.
- Don't install static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336564800">- Renamed package from libcfitsio0 to cfitsio.
- Renamed subpackage libcfitsio-doc to libcfitsio-devel-doc (added obsoletes
  entry for libcfitsio-doc of previous openSUSE versions).
- Suggest the libcfitsio-devel-doc package in libcfitsio-devel.
- Removed the requirement for libcfitsio0 from libcfitsio-(devel)-doc (not
  needed).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343736000">- Update to version 3.310:
  * Enhanced the CFITSIO column filtering syntax to allow the comma, in
    addition to the semi-colon, to be used to separate clauses, for example:
    [col X,Y;Z = max(X,Y)].  This was done because users are not allowed to
    enter the semi-colon character in the on-line Hera data processing
    system due to computer security concerns.
  * Enhanced the CFITSIO extended filename syntax to allow specifying image
    compression parameters (e.g. '[compress Rice]') when opening an existing
    FITS file with write access.  The specified compression parameters will
    be used by default if more images are appended to the existing file.
  * Modified drvrfile.c to do additional file secrity checks when CFITSIO
    is running within the HEASARC's Hera software system.  In this case
    CFITSIO will not allow FITS files to be created outside of the user's
    individual Hera data directory area.
  * Fixed an issue in fpack and funpack on Windows machines, caused by
    the fact that the 'rename' function behaves differently on Windows
    in that it does not clobber an existing file, as it does on Unix
    platforms.
  * Fixed bug in the way byte-swapping was being performed when writing
    integer*8 null values to an image or binary table column.
  * Added the missing macro definition for fffree to fitsio.h.
  * Modified the low level table read and write functions in getcol*.c and
    putcol*.c to remove the 32-bit limitation on the number of elements.
    These routines now support reading and writing more than 2**31 elements
    at one time. Thanks to Keh-Cheng Chu (Stanford U.) for the patch.
  * Modified Makefile.in so that the shared libcfitsio.so is linked against
    pthreads and libm.
- Removed the fix to link the library to libpthread and libm from cfitsio.patch
  (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly. Removed the linking of the
  programs (fpack and funpack) to libz from the patch (not needed).
- Remove some more bundled zlib files from the package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1364990400">- Update to version 3.340:
  * modified configure and configure.in to support cross-compiled cfitsio
    as a static library for Windows on a Linux platform using MXE
    (http://mxe.cc) - a build environment for mingw32. (contributed by
    Niels Kristian Bech Jensen)
  * added conditional compilation statementsfor the mingw32 environment in
    drvrfile.c because mingw32 does not include the ftello and fseeko
    functions. (contributed by Niels Kristian Bech Jensen)
  * fixed a potential bug in ffcpcl (routine to copy a column from one table
    to another table) when dealing with the rare case of a '0X' column (zero
    length bit column).
  * fixed an issue in the routines that update or modify string-valued
    keyword values, as a result of the change to ffc2s in the previous
    release.  These routines would exit with a 204 error status if the
    current value of the keyword to be updated or modified is null.
  * fixed typo in the previous modification that was intended to ignore
    numerical overflows in Hcompress when decompressing an image.
  * moved the 'startcol' static variable out of the ffgcnn routine and
    instead added it as a member of the 'FITSfile' structure that is defined
    in fitsio.h.  This removes a possible race condition in ffgcnn in
    multi-threaded environments.
  From version 3.330:
  * modified the imcomp_decompress_tile routine to ignore any numerical
    overflows that might occur when using Hcompress to decompress the
    image.  If Hcompress is used in its 'lossy' mode, the uncompressed
    image pixel values may slightly exceed the range of an integer*2
    variable. This is generally of no consequence, so we can safely ignore
    any overflows in this case and just clip the values to the legal range.
  * the default tiling pattern when writing a tile-compressed image
    has been changed.  The old behaviour was to compress the whole image
    as one single large tile.  This is often not optimal when dealing
    with large images, so the new default behavior is to treat each
    row of the image as one tile.  This is the same default behavior
    as in the standalone fpack program.  The default tile size can
    be overridden by calling fits_set_tile_dim.
  * fixed bug bug that resulted in a corrupted output FITS image when
    attempting to write a float or double array of values to a
    tile-compressed integer data type image.  CFITSIO does not support
    implicit data type conversion in this case and now correctly
    returns an appropriate error status.
  * modified ricecomp.c to define the nonzero_count lookup table as an
    external variable, rather then dynamically allocating it within the
    3 routines that use it.  This simplifies the code and eliminates the
    need for special thread locking and unlocking statements. (Thanks to
    Lars Kr. Lundin for this suggestion).
  * modifed how the uncompressed size of a gzipped file is computed in the
    mem_compress_open routine in drvrmem.c.  Since gzip only uses 4 bytes
    in the compressed file header to store the original file size, one may
    need to apply a modulo 2^32 byte correction in some cases.  The logic
    here was modified to allow for corner cases (e.g., very small files, and
    when running on 32-bit platforms that do not support files larger than
    2^31 bytes in size).
  * added new public routine to construct a 80 keyword record from the 3 input
    component strings, i.e, the keyword name string, the value string, and
    the comment string: fits_make_key/ffmkky.  (This was already an undocumented
    internal routine in previous versions of CFITSIO).
  * modified ffc2s so that if the input keyword value string is a null string,
    then it will return a VALUE_UNDEFINED (204) status value.  This makes it
    consistent with the behavior when attempting to read a null keyword
    (which has no value) as a logical or as a number (which also returns
    the 204 error).  This should only affect cases where the header keyword
    does not have an equal sign followed by a space character in columns 9
    and 10 of the header record.
  * Changed the "char *" parameter declarations to "const char *" in many
    of the routines (mainly the routines that modify or update keywords) to
    avoid compiler warnings or errors from C++ programs that tend to be more
    rigorous about using "const char *" when appropriate.
  * added support for caching uncompressed image tiles, so that the tile does
    not need to be uncompressed again if the application program wants
    to read more data from the same tile. This required changes to the
    main FITS file structure that is defined in fitsio.h, as well as
    changes to imcompress.c.
  * enhanced the previous modification to drvrfile.c to handle additional user
    cases when running in the HEASARC's Hera environment.
  From version 3.320:
  * fixed flaw in the way logical columns (TFORM = 'L') in binary tables
    were read which caused an illegal value of 1 in the column to be
    interpreted as a 'T' (TRUE) value.
  * extended the column filtering syntax in the CFITSIO file name parser to
    enable users and scripts to append new COMMENT or HISTORY keyword into the
    header of the filtered file (provided by Craig Markwardt).  For example,
    fcopy "infile.fits[col #HISTORY='Processed on 2012-10-05']" outfile.fits
    will append this header keyword: "HISTORY Processed on 2012-10-05"
  * small change to the code that opens and reads an ASCII region file to
    return an error if the file is empty.
  * fixed obscure sign propagation error when attempting to read the
    uncompressed size of a gzipped FITS file.  This resulted in a memory
    allocation error if the gzipped file had an uncompressed file
    size between 2^31 and 2^32 bytes.  Fix supplied by Gudlaugur Johannesson
    (Stanford).
- Rebased cfitsio.patch to apply cleanly.</changelog>
  <changelog author="schwab@suse.de" date="1371384000">- aarch64-support.patch: Add support for aarch64</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1373198400">- Update to version 3.350:
  * fixed problem with the default tile size when compressing images with
    fpack using the Hcompress algorithm.
  * fixed returned value ("status" instead of "*status")
  * in imcompress.c, declared some arrays that are used to store the dimensions
    of the image from 'int' to 'long', to support very large images (at least
    on systems where sizeof(long) = 8),
  * modified the routines that convert a string value to a float or double
    to prevent them from returning a NaN or Inf value if the
    string is "NaN" or "Inf" (as can happen with gcc implementation of the
    strtod function).
  * removed/replaced the use of the assert() functions when locking or
    unlocking threads because they did not work correctly if NDEBUG is
    defined.
  * made modifications to the way the command-line file filters are parsed to
    1) remove the 1024-character limit when specifying a column filter,
    2) fixed a potential character buffer-overflow risk in fits_get_token, and
    3) improved the parsing logic to remove any possible of confusing
    2 slash characters ("//") in the string as the beginning of a
    comment string.
  * modified configure and Makefile.in so that when building CFITSIO
    as a shared library on linux or Mac platforms, it will use the SONAME
    convention to indicate whether each new release of the CFITSIO
    library is binary-compatible with the previous version.  Application
    programs that link with the shared library will not need to be
    recompiled as long as the versions are compatible.  In practice,
    this means that the shared library binary file that is created (on
    Linux systems) will have a name like 'libcfitsio.so.I.J.K', where I is the
    SONAME version number, J is the major CFITSIO version number (e.g. 3),
    and K is the minor CFITSIO version number (e.g., 34).  Two link
    files will also be created such that
    libcfitsio.so -&gt; libcfitsio.so.I, and
    libcfitsio.so.I -&gt; libcfitsio.I.J.K
    Application programs will still run correctly with the new version of
    CFITSIO as long as the 'I' version number remains the same, but the
    applications will fail to run if the 'I' number changes, thus alerting
    the user that the application must be rebuilt.
  * fixed bug in fits_insert_col when computing the new table row width
    when inserting a '1Q' variable length array column.
  * modified the image compression routines so that the output compressed
    image (stored in a FITS binary table) uses the '1Q' variable length
    array format (instead of '1P') when the input file is larger than 4 GB.
  * added support for "compression directive" keywords which indicate how
    that HDU should be compressed (e.g., which compression algorithm to use,
    what tiling pattern to use, etc.).  The values of these keywords will
    override the compression parameters that were specified on the command
    line when running the fpack FITS file compression program.
  * globally changed the variable and/or subroutine name "dither_offset"
    to "dither_seed" and "quantize_dither" to "quantize_method" so
    that the names more accurately reflects their purpose.
  * added support for a new SUBTRACTIVE_DITHER_2 method when compressing
    floating point images.  The only difference with the previous method
    is that pixels with a value exactly equal to 0.0 will not be dithered,
    and instead will be exactly preserved when the image is compressed.
  * added support for an alias of "RICE_ONE" for "RICE_1" as the value
    of the ZCMPTYPE keyword, which gives the name of the image compression
    algorithm.  This alias is used if the new SUBTRACTIVE_DITHER_2 option
    is used, to prevent old versions of funpack from creating a corrupted
    uncompressed image file.  Only newer versions of funpack will recognize
    this alias and be able to uncompress the image.
  * made performance improvement to fits_read_compressed_img so that
    when reading a section of an compressed image that includes only
    every nth pixel in some dimension, it will only uncompressed a tile
    if there are actually any pixels of interest in that tile.
  * fixed several issues with the beta FITS binary table compression code
    that is used by fpack:  added support for zero-length vector columns,
    made improvements to the output report when using the -T option in fpack,
    changed the default table compression method to 'Rice' instead of
    'Best', and now writes the 'ZTILELEN' keyword to document the number
    of table rows in each tile.
  * fixed error in ffbinit in calculating the total length of the binary
    table extension if the THEAP keyword was used to override the
    default starting location of the heap.
- Removed cfitsio.patch (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly.
- Added a patch (no-return-in-nonvoid-function.patch) to fix "Program returns
  random data in a function" rpm post build check error.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387108800">- ppc64le-support.patch: Add support for ppc64le.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1392552000">- Update to version 3.360:
  * added 9 Dec: small change to the fileseek function in drvrfile.c to
    support large files &gt; 2 GB when building CFITSIO with MinGW on Windows
  * reorganized the CFITSIO code directory structure; added a 'docs'
    subdirectory for all the documentation, and a 'zlib' directory
    for the zlib/gzip file compression code.
  * made major changes to the compression code for FITS binary table
    to support all types of columns, including variable-length arrays.
    This code is mainly used via the fpack and funpack programs.
  * increased the number of FITS files that can be opened as one
    time to 1000, as defined by NMAXFILES in fitsio2.h.
  * made small configuration changes to configure.in, configure,
    fitsio.h, and drvrfile.c to support large files (64-bit file
    offsets} when using the mingw-w64 compiler (provided by
    Benjamin Gilbert).
  * made small change to fits_delete_file to more completely ignore
    any non-zero input status value.
  * fixed a logic error in a 'if' test when parsing a keyword name
    in the ngp_keyword_is_write function in grparser.c (provided
    by David Binderman).
  * when specifying the image compression parameters as part of the
    compressed image file name (using the "[compress]" qualifier
    after the name of the file), the quantization level value, if
    specified, was not being recognized by the CFITSIO compression
    routines. The image would always be compressed with the default
    quantization level of 4.0, regardless of what was specified.  This
    affected the imcopy program, and potentially other user-generated
    application programs that used this method to specify the
    compression parameters.  This bug did not affect fpack or
    funpack.   This was fixed in the imcomp_get_compressed_image_par
    routine in the imcompress.c file. (reported by Sean Peters)
  * defined a new CFITS_API macro in fitsio.h which is used to export the
    public symbols when building CFITSIO on Windows systems with CMake. This
    works in conjunction with the new Windows CMake build procedure that
    is described in the README.win32 file. This complete revamping of the
    way CFITSIO is built under Windows now supports building 64-bit
    versions of the library.  Thanks to Daniel Kaneider (Luminance HDR
    Team) for providing these new  CMake build procedures.
  * modified the way that the low-level file_create routine works when
    running in the Hera environment to ensure that the FITS file that is
    created is within the allow user data disk area.
  * modified fits_get_compression_type so that it does not return an error
    if the HDU is a normal FITS IMAGE extension, and is not a tile-compressed
    image.
  * modified the low-level ffgcl* and ffpcl* routines to ensure that they
    never try ro read or write more than 2**31 bytes from disk at one time,
    as might happen with very large images, to avoid integer overflow errors.
    Fix kindly provided by Fred Gutsche at NanoFocus AG (www.nanofocus.de).
  * modified Makefile.in so that doing 'make distclean' does not delete
    new config.sub and config.guess files that were recently added.
  * adopted a patch from Debian in zcompress.c to "define" the values of
    GZBUFSIZE and BUFFINCR, instead of exporting the symbols as 'int's.
- Renamed libcfitsio-devel to cfitsio-devel and libcfitsio-devel-doc to
  cfitsio-devel-doc. Added appropriate Provides/Obsoletes entries.
- Removed the following patches (fixed upstream):
  * implicit-pointer-decl.patch
  * no-return-in-nonvoid-function.patch
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 3.370
  + Added configure options to support reading bzip2 compressed FITS files.
    This depends on having the bzlib library installed on the local machine.
  + Replaced the random Gaussian and Poissonian distribution functions with
    new code written by Craig Markwardt derived from public domain C++ functions
  + Patched fitsio2.h to support CFITSIO on AArch64 (64-bit ARM)
    architecture (both big and little endian).
  + Fixed bug in fpackutil.c that caused fpack to exit prematurely if
    the FZALGOR directive keyword was present in the HDU header.
- Remove obsolete patches; fixed on upstream release
  + aarch64-support.patch
  + ppc64le-support.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to version 3.390:
  * Lots of changes - see changes.txt for details.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488283200">- Update to version 3.410:
  * The change made in version 3.40 to include strings.h caused
    problems on Windows (and other) platforms, so this change was
    backed out. The reason for including it was to define the
    strcasecmp and strcasencmp functions, so as an alternative, new
    equivalent functions called fits_strcasecmp and
    fits_strncasecmp have been added to CFITSIO.as a substitute.
    All the previous calls to the str[n]casecmp functions have been
    changed to now call fits_str[n]casecmp. In addition, the
    previously defined ngp_strcasecmp function (in grparser.c) has
    been removed and the calls to it have been changed to
    fits_strcasecmp.
  * The speed.c utility program was changed to correctly call
    the gettimeofday function with a NULL second arguement.
  From version 3.400:
  * fixed a bug when writing long string keywords with the CONTINUE
    convention which caused the CONTINUE'd strings to only be 16
    characters long, instead of using up all the available space in
    the 80-character header record.
  * fixed a missing 'defined' keyword in fitsio.h.
  * replaced all calls to strtok (which is not threadsafe) with a
    new ffstrtok function which internally calls the threadsafe
    strtok_r function.  One byproduct of this change is that
    &lt;strings.h&gt; must also be included in several of the C source
    code files.
  * modified the ffphbn function in putkey.c to support TFORM
    specifiers that use lowercase 'p' (instead of uppercase) when
    referring to a variable-length array column.
  * modified the lexical parser in eval.y and eval_y.c to support
    bit array columns (with TFORMn = 'X') with greater than 256
    elements. Fix to bitcmp function:  The internal 'stream' array
    is now allocated dynamically rather than statically fixed at
    size 256. This was failing when users attempted a row filtering
    of a bitcol that was wider than 256X. In bitlgte, bitand, and
    bitor functions, replaced static stream[256] array allocation
    with dynamic allocation.
  * modified the ffiter function in putcol.c to fix a problem which
    could cause the iterator function to incorrectly deal with null
    values.  This only affected TLONG type columns in cases where
    sizeof(long) = 8, as well as for TLONGLONG type columns.
  * Fix made to uncompress2mem function in zcomprss.c for case
    where output uncompressed file expands to over the 2^32 (4Gb)
    limit.  It now checks for this case at the start, and
    implements a 4Gb paging system through the output buffer.  The
    problem was specifically caused by the d_stream.avail_out
    member being of 4-byte type uInt, and thus unable to handle any
    memory position values above 4Gb.
  * fixed a bug in fpackutil.c when using the -i2f (integer to
    float) option in fpack to compress an integer image that is
    scaled with non-default values for BSCALE and BZERO. This
    required an additional call to ffrhdu to reset the internal
    structures that describe the input FITS file.
  * modified fits_uncompress_table in imcompress.c to silently
    ignore the ZTILELEN keyword value if it larger than the number
    of rows in the table
  * Tweak strcasecmp/strncasecmp ifdefs to exclude 64-bit MINGW
    environment, as it does not lack those functions. (eval_l.c,
    fitsio2.h)
  * CMakeLists.txt: Set M_LIB to "" for MINGW build environment (in
    addition to MSVC).
  * Makefile.in: Add *.dSYM (non-XCode gcc leftovers on Macs) to
    clean list.  Install libs by name rather than using a wildcard.
  * configure: Fix rpath token usage for XCode vs. non-XCode gcc on
    Macs.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to version 3.420:
  * added https support to the collection of drivers handled in
    cfileio.c and drvrnet.c.  This also handles the case where http
    transfers are rerouted to https.  Note that this enhancement
    introduces a dependency on the libcurl development package.  If
    this package is absent, CFITSIO will still build but will not
    have https capability.
  * made fix to imcomp_init_table function in imcompress.c.  It now
    writes ZSIMPLE keyword only to a compressed image that will be
    placed in the primary header.
  * fix made to fits_get_col_display_width for case of a vector
    column of strings.
  * in ftp_open_network and in ftp_file_exist, added code to
    repeatedly attempt to make a ftp connection if the ftp server
    does not respond to the first request. (some ftp servers don't
    appear to be 100% reliable).
  * in drvrnet.c added many calls to 'fclose' to close unneeded
    files, to avoid exceeding the maximum allowed number of files
    that can be open at once.
  * made substantial changes to the ftp_checkfile and
    http_checkfile routines to streamline the process of checking
    for the existence of a .gz or .Z compressed version of the file
    before opening the uncompressed file (when using http or ftp to
    open the file).
  * modified the code in ftp_open_network to send "\r\n" as
    end-of-line characters instead of just "\n".  Some ftp servers
    (in particular, at heasarc.gsfc.nasa.gov) now require both
    characters, otherwise the network connection simply hangs.
  * modified the http_open_network routine to handle HTTP 301 or
    302 redirects to a FTP url.  This is needed to support the new
    configuration on the heasarc HTTP server which sometimes
    redirects http URLS to a ftp URL.
- Added new build requirement libcurl-devel.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1523448000">- Update to version 3.430:
  * Fixed security vulnerabilities (bsc#1088590, CVE-2018-1000166).
  * Calls to https driver functions in cfileio.c need to be macro-
    protected by the HAVE_NET_SERVICES variable (as are the http
    and ftp driver function calls).  Otherwise CMake builds on
    native Windows will fail since drvrnet.o is left empty.
  * Bug fix to ffmvec function.  Should be resetting a local colptr
    variable after making a call to ffiblk (which can reallocate
    Ftpr-&gt;tableptr).
  * Ignore any attempted request to not quantize an image before
    compressing it if the image has integer datatype pixels.
  * Improved error message construction throughout CFITSIO.
- Package licence file as license, not doc (boo#1082318).</changelog>
</package>
<package pkgid="323b99709e5dc349f495cc4c52c8a4cd7269cad4daf322512f6d15c071e99f91" name="cfitsio" arch="x86_64">
  <version epoch="0" ver="3.430" rel="4.3.1"/>
  <changelog author="mseben@novell.com" date="1274270400">- fix libdir,include dir and version string in pkgconfig (bnc#546004)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1274356800">- update to version 3.23.0,
  * reduced the default value for the floating point image
    quantization parameter (q) from 16 to 4.
  * enhanced the template keyword parsing routine to reject a
    header template string that only contains a sequence of dashes.
  * enhanced the ASCII region file reading routine to allow tabs
    as well as spaces between fields in the file.
  * got rid of bogus error message when calling
    fits_update_key_longstr
  * Made the error message more explicit when CFITSIO tries to
    write to a GZIP compressed file.
  * several bugfixes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1316174400">- update to version 3.280
  * Lots of changes (see changes.txt file).
- Spec file updates
  * Changes based on spec-cleaner run.
  * Updates in summaries and descriptions.
  * Updates in Group: entries of the packages.
  * Added description for the patch based on openSUSE Patches Guidelines.
  * Added pkg-config in BuildRequires: (fix for "no-pkg-config-provides"
    rpmlint warning).
  * Added cfitsio package (containing some utilities).
  * Fixes for cfitsio.pc.
  * Minor other updates.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1317729600">- Added correct fix for cfitsio.pc include dirs (Cflags: was wrongly replaced
  with $Cflags:). Fixes reopened bnc#546004.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1323000000">- Update to version 3.290:
  Enhancements
  * modified Makefile.in to allow configure to override the lib and include
    destination directories.
  * added (or restored actually) support for tile compression of 1-byte integer
    images in imcomp_compress_tile.  Support for that data type was overlooked
    during recent updates to this routine.
  * modified the fits_get_token command-line parsing routine to perform more
    rigorous checks to determine if the token can be interpreted as a number
    or not.
  * made small modification to fpack.c to not allow the -i2f option (convert
    image from integer to floating point) with the "-g -q 0" option (do lossless
    gzip compression).  It is more efficient to simply use the -g option alone.
  * made modifications to fitsio.h and drvrfile.c to support reading and
    writing large FITS files (&gt; 2.1 GB) when building CFITSIO using
    Microsoft Visual C++ on Windows platforms.
  * added new WCS routine (ffgicsa) which returns the WCS keyword values
    for a particular WCS version ('A' - 'Z').
  Bug Fixes
  * fixed a problem with multi-threaded apps that open/close FITS files
    simultaneously by putting mutex locks around the call to
    fits_already_open and in fits_clear_Fptr.
  * fixed a bug when using the 'regfilter' function to select a subset of the
    rows in a FITS table that have coordinates that lie within a specified
    spatial region on the sky.  This bug only affects the rarely used panda
    (and epanda and bpanda) region shapes in which the region is defined by
    the intersection of an annulus  and a pie-shaped wedge.  The previous code
    (starting with version 3.181 of CFITSIO where support for the panda region
    was first introduced) only worked correctly if the 2 angles that define
    the wedge have values between -180 and +180.  If not, then fewer rows than
    expected may have been selected from the table.
  * fixed the extended filename parser so that when creating a histogram by
    binning 2 table columns, if a keyword or column name is given as the
    weighting factor,  then the output histrogram image will have a floating
    point datatype, not the default integer datatype as is the case when no
    weigth is specified (e.g. with a filename like
    "myfile.fits[bin x,y; weight_column]"
  * added fix to the code in imcompress.c to work around a problem with
    dereferencing the value of a pointer, in cases where the address of
    that pointer has not been defined (e.g., the nulval variable).
  * modified the byte shuffling algorithm in fits_shuffle_8bytes to work
    around a strange bug in the proprietary SunStudioExpress C compiler
    under OpenSolaris.
  * removed spurious messages on the CFITSIO error stack when opening a
    FITS file with FTP (in drvrnet.c);
- Removed the Makefile.in changes from cfitsio-makefile.patch (fixed upstream).
- Spec file updates:
  * Changed License entry to SPDX style.
  * Enable multithreading support.</changelog>
  <changelog author="idoenmez@suse.de" date="1323000001">- Fix SLE_11 build</changelog>
  <changelog author="idoenmez@suse.de" date="1323086400">- Set license to ISC, bnc#734865</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336478400">- Update to version 3.300:
  Enhancements
  * Added new routine called fits_is_reentrant which returns 1 or 0 depending
    on whether or not CFITSIO was compiled with the -D_REENTRANT directive.
    This can be used to determine if it is safe to use CFITSIO in
    multi-threaded programs.
  * Implimented much faster byte-swapping algorithms in swapproc.c based on
    code provided by Julian Taylor at ESO, Garching.  These routines
    significantly improve the FITS image read and write speed (by more than a
    factor of 2 in some cases) on little-endian machines (e.g., Linux and
    Microsoft Windows running on x86 PCs) where byte-swapping is required.
    This has no effect on big-endian machines (e.g., Macs).  Even faster
    performance can be achieved in some cases by invoking the new
    "--enable-sse2" or "--enable-ssse3" configure options when building CFITSIO
    on machines that have CPUs and compilers that support the SSE2 and SSSE3
    machine instructions.
  * added additional support for implicit data type conversion in cases where
    the floating point image has been losslessly compressed with gzip.  The
    pixels in these compressed images can now be read back as arrays of short,
    int, and long integers as well as single and double precision
    floating-point.
  * modified fitsio2.h and f77_wrap.h to recognize IBM System z mainframes by
    testing if __s390x__ or __s390__ is defined.
  * small change to ffgcrd in getkey.c so that it supports reading a blank
    keyword (e.g., a keyword whose name simply contains 8 space chracters).
  Bug Fixes
  * fixed a bug in imcomp_decompress_tile that caused the tile-compressed image
    to be uncompressed incorrectly (even though the tile-compressed image
    itself was written correctly) under the following specific conditions:
  - the original FITS image has a "float" datatype (R*4)
  - one or more of the image tiles cannot be compressed using the standard
    quantization method  and instead are losslessly compressed with gzip
  - the pixels in these tiles are not all equal to zero (this bug does
    affect tiles where all the pixels are equal to zero)
  - the program that is reading the compressed image uses CFITSIO's
    "implicit datatype conversion" feature to read the "float" image
    back into an array of "double" pixel values.
    If all these conditions are met, then the returned pixel values in the
    affected image tiles will be garbage, with values often ranging
    up to 10**34.  Note that this bug does not affect the fpack/funpack
    programs, because funpack does not use CFITSIO's implicit datatype
    conversion feature when uncompressing the image.
- Replaced cfitsio-makefile.patch with cfitsio.patch (taken from Fedora). It's
  the same patch with the addition of linking libcfitsio with libpthread and
  libm (fixes possible errors with packages requiring libcfitsio0 and compiled
  with the "--as-needed" flag).
- Added a patch (cfitsio-zlib.patch) to use system zlib (based on patches from
  Fedora and Debian). Added zlib-devel in build depencdencies.
- Added a patch (implicit-pointer-decl.patch) to fix "implicit-pointer-decl"
  rpm post build check warning.
- Moved "-lpthread" and added "-lz" in Libs.private: of cfitsio pkg-config
  file.
- Removed "-fno-strict-aliasing" from CFLAGS.
- Don't install static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336564800">- Renamed package from libcfitsio0 to cfitsio.
- Renamed subpackage libcfitsio-doc to libcfitsio-devel-doc (added obsoletes
  entry for libcfitsio-doc of previous openSUSE versions).
- Suggest the libcfitsio-devel-doc package in libcfitsio-devel.
- Removed the requirement for libcfitsio0 from libcfitsio-(devel)-doc (not
  needed).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343736000">- Update to version 3.310:
  * Enhanced the CFITSIO column filtering syntax to allow the comma, in
    addition to the semi-colon, to be used to separate clauses, for example:
    [col X,Y;Z = max(X,Y)].  This was done because users are not allowed to
    enter the semi-colon character in the on-line Hera data processing
    system due to computer security concerns.
  * Enhanced the CFITSIO extended filename syntax to allow specifying image
    compression parameters (e.g. '[compress Rice]') when opening an existing
    FITS file with write access.  The specified compression parameters will
    be used by default if more images are appended to the existing file.
  * Modified drvrfile.c to do additional file secrity checks when CFITSIO
    is running within the HEASARC's Hera software system.  In this case
    CFITSIO will not allow FITS files to be created outside of the user's
    individual Hera data directory area.
  * Fixed an issue in fpack and funpack on Windows machines, caused by
    the fact that the 'rename' function behaves differently on Windows
    in that it does not clobber an existing file, as it does on Unix
    platforms.
  * Fixed bug in the way byte-swapping was being performed when writing
    integer*8 null values to an image or binary table column.
  * Added the missing macro definition for fffree to fitsio.h.
  * Modified the low level table read and write functions in getcol*.c and
    putcol*.c to remove the 32-bit limitation on the number of elements.
    These routines now support reading and writing more than 2**31 elements
    at one time. Thanks to Keh-Cheng Chu (Stanford U.) for the patch.
  * Modified Makefile.in so that the shared libcfitsio.so is linked against
    pthreads and libm.
- Removed the fix to link the library to libpthread and libm from cfitsio.patch
  (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly. Removed the linking of the
  programs (fpack and funpack) to libz from the patch (not needed).
- Remove some more bundled zlib files from the package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1364990400">- Update to version 3.340:
  * modified configure and configure.in to support cross-compiled cfitsio
    as a static library for Windows on a Linux platform using MXE
    (http://mxe.cc) - a build environment for mingw32. (contributed by
    Niels Kristian Bech Jensen)
  * added conditional compilation statementsfor the mingw32 environment in
    drvrfile.c because mingw32 does not include the ftello and fseeko
    functions. (contributed by Niels Kristian Bech Jensen)
  * fixed a potential bug in ffcpcl (routine to copy a column from one table
    to another table) when dealing with the rare case of a '0X' column (zero
    length bit column).
  * fixed an issue in the routines that update or modify string-valued
    keyword values, as a result of the change to ffc2s in the previous
    release.  These routines would exit with a 204 error status if the
    current value of the keyword to be updated or modified is null.
  * fixed typo in the previous modification that was intended to ignore
    numerical overflows in Hcompress when decompressing an image.
  * moved the 'startcol' static variable out of the ffgcnn routine and
    instead added it as a member of the 'FITSfile' structure that is defined
    in fitsio.h.  This removes a possible race condition in ffgcnn in
    multi-threaded environments.
  From version 3.330:
  * modified the imcomp_decompress_tile routine to ignore any numerical
    overflows that might occur when using Hcompress to decompress the
    image.  If Hcompress is used in its 'lossy' mode, the uncompressed
    image pixel values may slightly exceed the range of an integer*2
    variable. This is generally of no consequence, so we can safely ignore
    any overflows in this case and just clip the values to the legal range.
  * the default tiling pattern when writing a tile-compressed image
    has been changed.  The old behaviour was to compress the whole image
    as one single large tile.  This is often not optimal when dealing
    with large images, so the new default behavior is to treat each
    row of the image as one tile.  This is the same default behavior
    as in the standalone fpack program.  The default tile size can
    be overridden by calling fits_set_tile_dim.
  * fixed bug bug that resulted in a corrupted output FITS image when
    attempting to write a float or double array of values to a
    tile-compressed integer data type image.  CFITSIO does not support
    implicit data type conversion in this case and now correctly
    returns an appropriate error status.
  * modified ricecomp.c to define the nonzero_count lookup table as an
    external variable, rather then dynamically allocating it within the
    3 routines that use it.  This simplifies the code and eliminates the
    need for special thread locking and unlocking statements. (Thanks to
    Lars Kr. Lundin for this suggestion).
  * modifed how the uncompressed size of a gzipped file is computed in the
    mem_compress_open routine in drvrmem.c.  Since gzip only uses 4 bytes
    in the compressed file header to store the original file size, one may
    need to apply a modulo 2^32 byte correction in some cases.  The logic
    here was modified to allow for corner cases (e.g., very small files, and
    when running on 32-bit platforms that do not support files larger than
    2^31 bytes in size).
  * added new public routine to construct a 80 keyword record from the 3 input
    component strings, i.e, the keyword name string, the value string, and
    the comment string: fits_make_key/ffmkky.  (This was already an undocumented
    internal routine in previous versions of CFITSIO).
  * modified ffc2s so that if the input keyword value string is a null string,
    then it will return a VALUE_UNDEFINED (204) status value.  This makes it
    consistent with the behavior when attempting to read a null keyword
    (which has no value) as a logical or as a number (which also returns
    the 204 error).  This should only affect cases where the header keyword
    does not have an equal sign followed by a space character in columns 9
    and 10 of the header record.
  * Changed the "char *" parameter declarations to "const char *" in many
    of the routines (mainly the routines that modify or update keywords) to
    avoid compiler warnings or errors from C++ programs that tend to be more
    rigorous about using "const char *" when appropriate.
  * added support for caching uncompressed image tiles, so that the tile does
    not need to be uncompressed again if the application program wants
    to read more data from the same tile. This required changes to the
    main FITS file structure that is defined in fitsio.h, as well as
    changes to imcompress.c.
  * enhanced the previous modification to drvrfile.c to handle additional user
    cases when running in the HEASARC's Hera environment.
  From version 3.320:
  * fixed flaw in the way logical columns (TFORM = 'L') in binary tables
    were read which caused an illegal value of 1 in the column to be
    interpreted as a 'T' (TRUE) value.
  * extended the column filtering syntax in the CFITSIO file name parser to
    enable users and scripts to append new COMMENT or HISTORY keyword into the
    header of the filtered file (provided by Craig Markwardt).  For example,
    fcopy "infile.fits[col #HISTORY='Processed on 2012-10-05']" outfile.fits
    will append this header keyword: "HISTORY Processed on 2012-10-05"
  * small change to the code that opens and reads an ASCII region file to
    return an error if the file is empty.
  * fixed obscure sign propagation error when attempting to read the
    uncompressed size of a gzipped FITS file.  This resulted in a memory
    allocation error if the gzipped file had an uncompressed file
    size between 2^31 and 2^32 bytes.  Fix supplied by Gudlaugur Johannesson
    (Stanford).
- Rebased cfitsio.patch to apply cleanly.</changelog>
  <changelog author="schwab@suse.de" date="1371384000">- aarch64-support.patch: Add support for aarch64</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1373198400">- Update to version 3.350:
  * fixed problem with the default tile size when compressing images with
    fpack using the Hcompress algorithm.
  * fixed returned value ("status" instead of "*status")
  * in imcompress.c, declared some arrays that are used to store the dimensions
    of the image from 'int' to 'long', to support very large images (at least
    on systems where sizeof(long) = 8),
  * modified the routines that convert a string value to a float or double
    to prevent them from returning a NaN or Inf value if the
    string is "NaN" or "Inf" (as can happen with gcc implementation of the
    strtod function).
  * removed/replaced the use of the assert() functions when locking or
    unlocking threads because they did not work correctly if NDEBUG is
    defined.
  * made modifications to the way the command-line file filters are parsed to
    1) remove the 1024-character limit when specifying a column filter,
    2) fixed a potential character buffer-overflow risk in fits_get_token, and
    3) improved the parsing logic to remove any possible of confusing
    2 slash characters ("//") in the string as the beginning of a
    comment string.
  * modified configure and Makefile.in so that when building CFITSIO
    as a shared library on linux or Mac platforms, it will use the SONAME
    convention to indicate whether each new release of the CFITSIO
    library is binary-compatible with the previous version.  Application
    programs that link with the shared library will not need to be
    recompiled as long as the versions are compatible.  In practice,
    this means that the shared library binary file that is created (on
    Linux systems) will have a name like 'libcfitsio.so.I.J.K', where I is the
    SONAME version number, J is the major CFITSIO version number (e.g. 3),
    and K is the minor CFITSIO version number (e.g., 34).  Two link
    files will also be created such that
    libcfitsio.so -&gt; libcfitsio.so.I, and
    libcfitsio.so.I -&gt; libcfitsio.I.J.K
    Application programs will still run correctly with the new version of
    CFITSIO as long as the 'I' version number remains the same, but the
    applications will fail to run if the 'I' number changes, thus alerting
    the user that the application must be rebuilt.
  * fixed bug in fits_insert_col when computing the new table row width
    when inserting a '1Q' variable length array column.
  * modified the image compression routines so that the output compressed
    image (stored in a FITS binary table) uses the '1Q' variable length
    array format (instead of '1P') when the input file is larger than 4 GB.
  * added support for "compression directive" keywords which indicate how
    that HDU should be compressed (e.g., which compression algorithm to use,
    what tiling pattern to use, etc.).  The values of these keywords will
    override the compression parameters that were specified on the command
    line when running the fpack FITS file compression program.
  * globally changed the variable and/or subroutine name "dither_offset"
    to "dither_seed" and "quantize_dither" to "quantize_method" so
    that the names more accurately reflects their purpose.
  * added support for a new SUBTRACTIVE_DITHER_2 method when compressing
    floating point images.  The only difference with the previous method
    is that pixels with a value exactly equal to 0.0 will not be dithered,
    and instead will be exactly preserved when the image is compressed.
  * added support for an alias of "RICE_ONE" for "RICE_1" as the value
    of the ZCMPTYPE keyword, which gives the name of the image compression
    algorithm.  This alias is used if the new SUBTRACTIVE_DITHER_2 option
    is used, to prevent old versions of funpack from creating a corrupted
    uncompressed image file.  Only newer versions of funpack will recognize
    this alias and be able to uncompress the image.
  * made performance improvement to fits_read_compressed_img so that
    when reading a section of an compressed image that includes only
    every nth pixel in some dimension, it will only uncompressed a tile
    if there are actually any pixels of interest in that tile.
  * fixed several issues with the beta FITS binary table compression code
    that is used by fpack:  added support for zero-length vector columns,
    made improvements to the output report when using the -T option in fpack,
    changed the default table compression method to 'Rice' instead of
    'Best', and now writes the 'ZTILELEN' keyword to document the number
    of table rows in each tile.
  * fixed error in ffbinit in calculating the total length of the binary
    table extension if the THEAP keyword was used to override the
    default starting location of the heap.
- Removed cfitsio.patch (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly.
- Added a patch (no-return-in-nonvoid-function.patch) to fix "Program returns
  random data in a function" rpm post build check error.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387108800">- ppc64le-support.patch: Add support for ppc64le.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1392552000">- Update to version 3.360:
  * added 9 Dec: small change to the fileseek function in drvrfile.c to
    support large files &gt; 2 GB when building CFITSIO with MinGW on Windows
  * reorganized the CFITSIO code directory structure; added a 'docs'
    subdirectory for all the documentation, and a 'zlib' directory
    for the zlib/gzip file compression code.
  * made major changes to the compression code for FITS binary table
    to support all types of columns, including variable-length arrays.
    This code is mainly used via the fpack and funpack programs.
  * increased the number of FITS files that can be opened as one
    time to 1000, as defined by NMAXFILES in fitsio2.h.
  * made small configuration changes to configure.in, configure,
    fitsio.h, and drvrfile.c to support large files (64-bit file
    offsets} when using the mingw-w64 compiler (provided by
    Benjamin Gilbert).
  * made small change to fits_delete_file to more completely ignore
    any non-zero input status value.
  * fixed a logic error in a 'if' test when parsing a keyword name
    in the ngp_keyword_is_write function in grparser.c (provided
    by David Binderman).
  * when specifying the image compression parameters as part of the
    compressed image file name (using the "[compress]" qualifier
    after the name of the file), the quantization level value, if
    specified, was not being recognized by the CFITSIO compression
    routines. The image would always be compressed with the default
    quantization level of 4.0, regardless of what was specified.  This
    affected the imcopy program, and potentially other user-generated
    application programs that used this method to specify the
    compression parameters.  This bug did not affect fpack or
    funpack.   This was fixed in the imcomp_get_compressed_image_par
    routine in the imcompress.c file. (reported by Sean Peters)
  * defined a new CFITS_API macro in fitsio.h which is used to export the
    public symbols when building CFITSIO on Windows systems with CMake. This
    works in conjunction with the new Windows CMake build procedure that
    is described in the README.win32 file. This complete revamping of the
    way CFITSIO is built under Windows now supports building 64-bit
    versions of the library.  Thanks to Daniel Kaneider (Luminance HDR
    Team) for providing these new  CMake build procedures.
  * modified the way that the low-level file_create routine works when
    running in the Hera environment to ensure that the FITS file that is
    created is within the allow user data disk area.
  * modified fits_get_compression_type so that it does not return an error
    if the HDU is a normal FITS IMAGE extension, and is not a tile-compressed
    image.
  * modified the low-level ffgcl* and ffpcl* routines to ensure that they
    never try ro read or write more than 2**31 bytes from disk at one time,
    as might happen with very large images, to avoid integer overflow errors.
    Fix kindly provided by Fred Gutsche at NanoFocus AG (www.nanofocus.de).
  * modified Makefile.in so that doing 'make distclean' does not delete
    new config.sub and config.guess files that were recently added.
  * adopted a patch from Debian in zcompress.c to "define" the values of
    GZBUFSIZE and BUFFINCR, instead of exporting the symbols as 'int's.
- Renamed libcfitsio-devel to cfitsio-devel and libcfitsio-devel-doc to
  cfitsio-devel-doc. Added appropriate Provides/Obsoletes entries.
- Removed the following patches (fixed upstream):
  * implicit-pointer-decl.patch
  * no-return-in-nonvoid-function.patch
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 3.370
  + Added configure options to support reading bzip2 compressed FITS files.
    This depends on having the bzlib library installed on the local machine.
  + Replaced the random Gaussian and Poissonian distribution functions with
    new code written by Craig Markwardt derived from public domain C++ functions
  + Patched fitsio2.h to support CFITSIO on AArch64 (64-bit ARM)
    architecture (both big and little endian).
  + Fixed bug in fpackutil.c that caused fpack to exit prematurely if
    the FZALGOR directive keyword was present in the HDU header.
- Remove obsolete patches; fixed on upstream release
  + aarch64-support.patch
  + ppc64le-support.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to version 3.390:
  * Lots of changes - see changes.txt for details.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488283200">- Update to version 3.410:
  * The change made in version 3.40 to include strings.h caused
    problems on Windows (and other) platforms, so this change was
    backed out. The reason for including it was to define the
    strcasecmp and strcasencmp functions, so as an alternative, new
    equivalent functions called fits_strcasecmp and
    fits_strncasecmp have been added to CFITSIO.as a substitute.
    All the previous calls to the str[n]casecmp functions have been
    changed to now call fits_str[n]casecmp. In addition, the
    previously defined ngp_strcasecmp function (in grparser.c) has
    been removed and the calls to it have been changed to
    fits_strcasecmp.
  * The speed.c utility program was changed to correctly call
    the gettimeofday function with a NULL second arguement.
  From version 3.400:
  * fixed a bug when writing long string keywords with the CONTINUE
    convention which caused the CONTINUE'd strings to only be 16
    characters long, instead of using up all the available space in
    the 80-character header record.
  * fixed a missing 'defined' keyword in fitsio.h.
  * replaced all calls to strtok (which is not threadsafe) with a
    new ffstrtok function which internally calls the threadsafe
    strtok_r function.  One byproduct of this change is that
    &lt;strings.h&gt; must also be included in several of the C source
    code files.
  * modified the ffphbn function in putkey.c to support TFORM
    specifiers that use lowercase 'p' (instead of uppercase) when
    referring to a variable-length array column.
  * modified the lexical parser in eval.y and eval_y.c to support
    bit array columns (with TFORMn = 'X') with greater than 256
    elements. Fix to bitcmp function:  The internal 'stream' array
    is now allocated dynamically rather than statically fixed at
    size 256. This was failing when users attempted a row filtering
    of a bitcol that was wider than 256X. In bitlgte, bitand, and
    bitor functions, replaced static stream[256] array allocation
    with dynamic allocation.
  * modified the ffiter function in putcol.c to fix a problem which
    could cause the iterator function to incorrectly deal with null
    values.  This only affected TLONG type columns in cases where
    sizeof(long) = 8, as well as for TLONGLONG type columns.
  * Fix made to uncompress2mem function in zcomprss.c for case
    where output uncompressed file expands to over the 2^32 (4Gb)
    limit.  It now checks for this case at the start, and
    implements a 4Gb paging system through the output buffer.  The
    problem was specifically caused by the d_stream.avail_out
    member being of 4-byte type uInt, and thus unable to handle any
    memory position values above 4Gb.
  * fixed a bug in fpackutil.c when using the -i2f (integer to
    float) option in fpack to compress an integer image that is
    scaled with non-default values for BSCALE and BZERO. This
    required an additional call to ffrhdu to reset the internal
    structures that describe the input FITS file.
  * modified fits_uncompress_table in imcompress.c to silently
    ignore the ZTILELEN keyword value if it larger than the number
    of rows in the table
  * Tweak strcasecmp/strncasecmp ifdefs to exclude 64-bit MINGW
    environment, as it does not lack those functions. (eval_l.c,
    fitsio2.h)
  * CMakeLists.txt: Set M_LIB to "" for MINGW build environment (in
    addition to MSVC).
  * Makefile.in: Add *.dSYM (non-XCode gcc leftovers on Macs) to
    clean list.  Install libs by name rather than using a wildcard.
  * configure: Fix rpath token usage for XCode vs. non-XCode gcc on
    Macs.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to version 3.420:
  * added https support to the collection of drivers handled in
    cfileio.c and drvrnet.c.  This also handles the case where http
    transfers are rerouted to https.  Note that this enhancement
    introduces a dependency on the libcurl development package.  If
    this package is absent, CFITSIO will still build but will not
    have https capability.
  * made fix to imcomp_init_table function in imcompress.c.  It now
    writes ZSIMPLE keyword only to a compressed image that will be
    placed in the primary header.
  * fix made to fits_get_col_display_width for case of a vector
    column of strings.
  * in ftp_open_network and in ftp_file_exist, added code to
    repeatedly attempt to make a ftp connection if the ftp server
    does not respond to the first request. (some ftp servers don't
    appear to be 100% reliable).
  * in drvrnet.c added many calls to 'fclose' to close unneeded
    files, to avoid exceeding the maximum allowed number of files
    that can be open at once.
  * made substantial changes to the ftp_checkfile and
    http_checkfile routines to streamline the process of checking
    for the existence of a .gz or .Z compressed version of the file
    before opening the uncompressed file (when using http or ftp to
    open the file).
  * modified the code in ftp_open_network to send "\r\n" as
    end-of-line characters instead of just "\n".  Some ftp servers
    (in particular, at heasarc.gsfc.nasa.gov) now require both
    characters, otherwise the network connection simply hangs.
  * modified the http_open_network routine to handle HTTP 301 or
    302 redirects to a FTP url.  This is needed to support the new
    configuration on the heasarc HTTP server which sometimes
    redirects http URLS to a ftp URL.
- Added new build requirement libcurl-devel.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1523448000">- Update to version 3.430:
  * Fixed security vulnerabilities (bsc#1088590, CVE-2018-1000166).
  * Calls to https driver functions in cfileio.c need to be macro-
    protected by the HAVE_NET_SERVICES variable (as are the http
    and ftp driver function calls).  Otherwise CMake builds on
    native Windows will fail since drvrnet.o is left empty.
  * Bug fix to ffmvec function.  Should be resetting a local colptr
    variable after making a call to ffiblk (which can reallocate
    Ftpr-&gt;tableptr).
  * Ignore any attempted request to not quantize an image before
    compressing it if the image has integer datatype pixels.
  * Improved error message construction throughout CFITSIO.
- Package licence file as license, not doc (boo#1082318).</changelog>
</package>
<package pkgid="ae4b9b498a8b6ff66e297c9c844c84e72612a3c06709b6dcbd0f662df3ae45ed" name="cfitsio-devel" arch="x86_64">
  <version epoch="0" ver="3.430" rel="4.3.1"/>
  <changelog author="mseben@novell.com" date="1274270400">- fix libdir,include dir and version string in pkgconfig (bnc#546004)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1274356800">- update to version 3.23.0,
  * reduced the default value for the floating point image
    quantization parameter (q) from 16 to 4.
  * enhanced the template keyword parsing routine to reject a
    header template string that only contains a sequence of dashes.
  * enhanced the ASCII region file reading routine to allow tabs
    as well as spaces between fields in the file.
  * got rid of bogus error message when calling
    fits_update_key_longstr
  * Made the error message more explicit when CFITSIO tries to
    write to a GZIP compressed file.
  * several bugfixes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1316174400">- update to version 3.280
  * Lots of changes (see changes.txt file).
- Spec file updates
  * Changes based on spec-cleaner run.
  * Updates in summaries and descriptions.
  * Updates in Group: entries of the packages.
  * Added description for the patch based on openSUSE Patches Guidelines.
  * Added pkg-config in BuildRequires: (fix for "no-pkg-config-provides"
    rpmlint warning).
  * Added cfitsio package (containing some utilities).
  * Fixes for cfitsio.pc.
  * Minor other updates.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1317729600">- Added correct fix for cfitsio.pc include dirs (Cflags: was wrongly replaced
  with $Cflags:). Fixes reopened bnc#546004.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1323000000">- Update to version 3.290:
  Enhancements
  * modified Makefile.in to allow configure to override the lib and include
    destination directories.
  * added (or restored actually) support for tile compression of 1-byte integer
    images in imcomp_compress_tile.  Support for that data type was overlooked
    during recent updates to this routine.
  * modified the fits_get_token command-line parsing routine to perform more
    rigorous checks to determine if the token can be interpreted as a number
    or not.
  * made small modification to fpack.c to not allow the -i2f option (convert
    image from integer to floating point) with the "-g -q 0" option (do lossless
    gzip compression).  It is more efficient to simply use the -g option alone.
  * made modifications to fitsio.h and drvrfile.c to support reading and
    writing large FITS files (&gt; 2.1 GB) when building CFITSIO using
    Microsoft Visual C++ on Windows platforms.
  * added new WCS routine (ffgicsa) which returns the WCS keyword values
    for a particular WCS version ('A' - 'Z').
  Bug Fixes
  * fixed a problem with multi-threaded apps that open/close FITS files
    simultaneously by putting mutex locks around the call to
    fits_already_open and in fits_clear_Fptr.
  * fixed a bug when using the 'regfilter' function to select a subset of the
    rows in a FITS table that have coordinates that lie within a specified
    spatial region on the sky.  This bug only affects the rarely used panda
    (and epanda and bpanda) region shapes in which the region is defined by
    the intersection of an annulus  and a pie-shaped wedge.  The previous code
    (starting with version 3.181 of CFITSIO where support for the panda region
    was first introduced) only worked correctly if the 2 angles that define
    the wedge have values between -180 and +180.  If not, then fewer rows than
    expected may have been selected from the table.
  * fixed the extended filename parser so that when creating a histogram by
    binning 2 table columns, if a keyword or column name is given as the
    weighting factor,  then the output histrogram image will have a floating
    point datatype, not the default integer datatype as is the case when no
    weigth is specified (e.g. with a filename like
    "myfile.fits[bin x,y; weight_column]"
  * added fix to the code in imcompress.c to work around a problem with
    dereferencing the value of a pointer, in cases where the address of
    that pointer has not been defined (e.g., the nulval variable).
  * modified the byte shuffling algorithm in fits_shuffle_8bytes to work
    around a strange bug in the proprietary SunStudioExpress C compiler
    under OpenSolaris.
  * removed spurious messages on the CFITSIO error stack when opening a
    FITS file with FTP (in drvrnet.c);
- Removed the Makefile.in changes from cfitsio-makefile.patch (fixed upstream).
- Spec file updates:
  * Changed License entry to SPDX style.
  * Enable multithreading support.</changelog>
  <changelog author="idoenmez@suse.de" date="1323000001">- Fix SLE_11 build</changelog>
  <changelog author="idoenmez@suse.de" date="1323086400">- Set license to ISC, bnc#734865</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336478400">- Update to version 3.300:
  Enhancements
  * Added new routine called fits_is_reentrant which returns 1 or 0 depending
    on whether or not CFITSIO was compiled with the -D_REENTRANT directive.
    This can be used to determine if it is safe to use CFITSIO in
    multi-threaded programs.
  * Implimented much faster byte-swapping algorithms in swapproc.c based on
    code provided by Julian Taylor at ESO, Garching.  These routines
    significantly improve the FITS image read and write speed (by more than a
    factor of 2 in some cases) on little-endian machines (e.g., Linux and
    Microsoft Windows running on x86 PCs) where byte-swapping is required.
    This has no effect on big-endian machines (e.g., Macs).  Even faster
    performance can be achieved in some cases by invoking the new
    "--enable-sse2" or "--enable-ssse3" configure options when building CFITSIO
    on machines that have CPUs and compilers that support the SSE2 and SSSE3
    machine instructions.
  * added additional support for implicit data type conversion in cases where
    the floating point image has been losslessly compressed with gzip.  The
    pixels in these compressed images can now be read back as arrays of short,
    int, and long integers as well as single and double precision
    floating-point.
  * modified fitsio2.h and f77_wrap.h to recognize IBM System z mainframes by
    testing if __s390x__ or __s390__ is defined.
  * small change to ffgcrd in getkey.c so that it supports reading a blank
    keyword (e.g., a keyword whose name simply contains 8 space chracters).
  Bug Fixes
  * fixed a bug in imcomp_decompress_tile that caused the tile-compressed image
    to be uncompressed incorrectly (even though the tile-compressed image
    itself was written correctly) under the following specific conditions:
  - the original FITS image has a "float" datatype (R*4)
  - one or more of the image tiles cannot be compressed using the standard
    quantization method  and instead are losslessly compressed with gzip
  - the pixels in these tiles are not all equal to zero (this bug does
    affect tiles where all the pixels are equal to zero)
  - the program that is reading the compressed image uses CFITSIO's
    "implicit datatype conversion" feature to read the "float" image
    back into an array of "double" pixel values.
    If all these conditions are met, then the returned pixel values in the
    affected image tiles will be garbage, with values often ranging
    up to 10**34.  Note that this bug does not affect the fpack/funpack
    programs, because funpack does not use CFITSIO's implicit datatype
    conversion feature when uncompressing the image.
- Replaced cfitsio-makefile.patch with cfitsio.patch (taken from Fedora). It's
  the same patch with the addition of linking libcfitsio with libpthread and
  libm (fixes possible errors with packages requiring libcfitsio0 and compiled
  with the "--as-needed" flag).
- Added a patch (cfitsio-zlib.patch) to use system zlib (based on patches from
  Fedora and Debian). Added zlib-devel in build depencdencies.
- Added a patch (implicit-pointer-decl.patch) to fix "implicit-pointer-decl"
  rpm post build check warning.
- Moved "-lpthread" and added "-lz" in Libs.private: of cfitsio pkg-config
  file.
- Removed "-fno-strict-aliasing" from CFLAGS.
- Don't install static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336564800">- Renamed package from libcfitsio0 to cfitsio.
- Renamed subpackage libcfitsio-doc to libcfitsio-devel-doc (added obsoletes
  entry for libcfitsio-doc of previous openSUSE versions).
- Suggest the libcfitsio-devel-doc package in libcfitsio-devel.
- Removed the requirement for libcfitsio0 from libcfitsio-(devel)-doc (not
  needed).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343736000">- Update to version 3.310:
  * Enhanced the CFITSIO column filtering syntax to allow the comma, in
    addition to the semi-colon, to be used to separate clauses, for example:
    [col X,Y;Z = max(X,Y)].  This was done because users are not allowed to
    enter the semi-colon character in the on-line Hera data processing
    system due to computer security concerns.
  * Enhanced the CFITSIO extended filename syntax to allow specifying image
    compression parameters (e.g. '[compress Rice]') when opening an existing
    FITS file with write access.  The specified compression parameters will
    be used by default if more images are appended to the existing file.
  * Modified drvrfile.c to do additional file secrity checks when CFITSIO
    is running within the HEASARC's Hera software system.  In this case
    CFITSIO will not allow FITS files to be created outside of the user's
    individual Hera data directory area.
  * Fixed an issue in fpack and funpack on Windows machines, caused by
    the fact that the 'rename' function behaves differently on Windows
    in that it does not clobber an existing file, as it does on Unix
    platforms.
  * Fixed bug in the way byte-swapping was being performed when writing
    integer*8 null values to an image or binary table column.
  * Added the missing macro definition for fffree to fitsio.h.
  * Modified the low level table read and write functions in getcol*.c and
    putcol*.c to remove the 32-bit limitation on the number of elements.
    These routines now support reading and writing more than 2**31 elements
    at one time. Thanks to Keh-Cheng Chu (Stanford U.) for the patch.
  * Modified Makefile.in so that the shared libcfitsio.so is linked against
    pthreads and libm.
- Removed the fix to link the library to libpthread and libm from cfitsio.patch
  (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly. Removed the linking of the
  programs (fpack and funpack) to libz from the patch (not needed).
- Remove some more bundled zlib files from the package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1364990400">- Update to version 3.340:
  * modified configure and configure.in to support cross-compiled cfitsio
    as a static library for Windows on a Linux platform using MXE
    (http://mxe.cc) - a build environment for mingw32. (contributed by
    Niels Kristian Bech Jensen)
  * added conditional compilation statementsfor the mingw32 environment in
    drvrfile.c because mingw32 does not include the ftello and fseeko
    functions. (contributed by Niels Kristian Bech Jensen)
  * fixed a potential bug in ffcpcl (routine to copy a column from one table
    to another table) when dealing with the rare case of a '0X' column (zero
    length bit column).
  * fixed an issue in the routines that update or modify string-valued
    keyword values, as a result of the change to ffc2s in the previous
    release.  These routines would exit with a 204 error status if the
    current value of the keyword to be updated or modified is null.
  * fixed typo in the previous modification that was intended to ignore
    numerical overflows in Hcompress when decompressing an image.
  * moved the 'startcol' static variable out of the ffgcnn routine and
    instead added it as a member of the 'FITSfile' structure that is defined
    in fitsio.h.  This removes a possible race condition in ffgcnn in
    multi-threaded environments.
  From version 3.330:
  * modified the imcomp_decompress_tile routine to ignore any numerical
    overflows that might occur when using Hcompress to decompress the
    image.  If Hcompress is used in its 'lossy' mode, the uncompressed
    image pixel values may slightly exceed the range of an integer*2
    variable. This is generally of no consequence, so we can safely ignore
    any overflows in this case and just clip the values to the legal range.
  * the default tiling pattern when writing a tile-compressed image
    has been changed.  The old behaviour was to compress the whole image
    as one single large tile.  This is often not optimal when dealing
    with large images, so the new default behavior is to treat each
    row of the image as one tile.  This is the same default behavior
    as in the standalone fpack program.  The default tile size can
    be overridden by calling fits_set_tile_dim.
  * fixed bug bug that resulted in a corrupted output FITS image when
    attempting to write a float or double array of values to a
    tile-compressed integer data type image.  CFITSIO does not support
    implicit data type conversion in this case and now correctly
    returns an appropriate error status.
  * modified ricecomp.c to define the nonzero_count lookup table as an
    external variable, rather then dynamically allocating it within the
    3 routines that use it.  This simplifies the code and eliminates the
    need for special thread locking and unlocking statements. (Thanks to
    Lars Kr. Lundin for this suggestion).
  * modifed how the uncompressed size of a gzipped file is computed in the
    mem_compress_open routine in drvrmem.c.  Since gzip only uses 4 bytes
    in the compressed file header to store the original file size, one may
    need to apply a modulo 2^32 byte correction in some cases.  The logic
    here was modified to allow for corner cases (e.g., very small files, and
    when running on 32-bit platforms that do not support files larger than
    2^31 bytes in size).
  * added new public routine to construct a 80 keyword record from the 3 input
    component strings, i.e, the keyword name string, the value string, and
    the comment string: fits_make_key/ffmkky.  (This was already an undocumented
    internal routine in previous versions of CFITSIO).
  * modified ffc2s so that if the input keyword value string is a null string,
    then it will return a VALUE_UNDEFINED (204) status value.  This makes it
    consistent with the behavior when attempting to read a null keyword
    (which has no value) as a logical or as a number (which also returns
    the 204 error).  This should only affect cases where the header keyword
    does not have an equal sign followed by a space character in columns 9
    and 10 of the header record.
  * Changed the "char *" parameter declarations to "const char *" in many
    of the routines (mainly the routines that modify or update keywords) to
    avoid compiler warnings or errors from C++ programs that tend to be more
    rigorous about using "const char *" when appropriate.
  * added support for caching uncompressed image tiles, so that the tile does
    not need to be uncompressed again if the application program wants
    to read more data from the same tile. This required changes to the
    main FITS file structure that is defined in fitsio.h, as well as
    changes to imcompress.c.
  * enhanced the previous modification to drvrfile.c to handle additional user
    cases when running in the HEASARC's Hera environment.
  From version 3.320:
  * fixed flaw in the way logical columns (TFORM = 'L') in binary tables
    were read which caused an illegal value of 1 in the column to be
    interpreted as a 'T' (TRUE) value.
  * extended the column filtering syntax in the CFITSIO file name parser to
    enable users and scripts to append new COMMENT or HISTORY keyword into the
    header of the filtered file (provided by Craig Markwardt).  For example,
    fcopy "infile.fits[col #HISTORY='Processed on 2012-10-05']" outfile.fits
    will append this header keyword: "HISTORY Processed on 2012-10-05"
  * small change to the code that opens and reads an ASCII region file to
    return an error if the file is empty.
  * fixed obscure sign propagation error when attempting to read the
    uncompressed size of a gzipped FITS file.  This resulted in a memory
    allocation error if the gzipped file had an uncompressed file
    size between 2^31 and 2^32 bytes.  Fix supplied by Gudlaugur Johannesson
    (Stanford).
- Rebased cfitsio.patch to apply cleanly.</changelog>
  <changelog author="schwab@suse.de" date="1371384000">- aarch64-support.patch: Add support for aarch64</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1373198400">- Update to version 3.350:
  * fixed problem with the default tile size when compressing images with
    fpack using the Hcompress algorithm.
  * fixed returned value ("status" instead of "*status")
  * in imcompress.c, declared some arrays that are used to store the dimensions
    of the image from 'int' to 'long', to support very large images (at least
    on systems where sizeof(long) = 8),
  * modified the routines that convert a string value to a float or double
    to prevent them from returning a NaN or Inf value if the
    string is "NaN" or "Inf" (as can happen with gcc implementation of the
    strtod function).
  * removed/replaced the use of the assert() functions when locking or
    unlocking threads because they did not work correctly if NDEBUG is
    defined.
  * made modifications to the way the command-line file filters are parsed to
    1) remove the 1024-character limit when specifying a column filter,
    2) fixed a potential character buffer-overflow risk in fits_get_token, and
    3) improved the parsing logic to remove any possible of confusing
    2 slash characters ("//") in the string as the beginning of a
    comment string.
  * modified configure and Makefile.in so that when building CFITSIO
    as a shared library on linux or Mac platforms, it will use the SONAME
    convention to indicate whether each new release of the CFITSIO
    library is binary-compatible with the previous version.  Application
    programs that link with the shared library will not need to be
    recompiled as long as the versions are compatible.  In practice,
    this means that the shared library binary file that is created (on
    Linux systems) will have a name like 'libcfitsio.so.I.J.K', where I is the
    SONAME version number, J is the major CFITSIO version number (e.g. 3),
    and K is the minor CFITSIO version number (e.g., 34).  Two link
    files will also be created such that
    libcfitsio.so -&gt; libcfitsio.so.I, and
    libcfitsio.so.I -&gt; libcfitsio.I.J.K
    Application programs will still run correctly with the new version of
    CFITSIO as long as the 'I' version number remains the same, but the
    applications will fail to run if the 'I' number changes, thus alerting
    the user that the application must be rebuilt.
  * fixed bug in fits_insert_col when computing the new table row width
    when inserting a '1Q' variable length array column.
  * modified the image compression routines so that the output compressed
    image (stored in a FITS binary table) uses the '1Q' variable length
    array format (instead of '1P') when the input file is larger than 4 GB.
  * added support for "compression directive" keywords which indicate how
    that HDU should be compressed (e.g., which compression algorithm to use,
    what tiling pattern to use, etc.).  The values of these keywords will
    override the compression parameters that were specified on the command
    line when running the fpack FITS file compression program.
  * globally changed the variable and/or subroutine name "dither_offset"
    to "dither_seed" and "quantize_dither" to "quantize_method" so
    that the names more accurately reflects their purpose.
  * added support for a new SUBTRACTIVE_DITHER_2 method when compressing
    floating point images.  The only difference with the previous method
    is that pixels with a value exactly equal to 0.0 will not be dithered,
    and instead will be exactly preserved when the image is compressed.
  * added support for an alias of "RICE_ONE" for "RICE_1" as the value
    of the ZCMPTYPE keyword, which gives the name of the image compression
    algorithm.  This alias is used if the new SUBTRACTIVE_DITHER_2 option
    is used, to prevent old versions of funpack from creating a corrupted
    uncompressed image file.  Only newer versions of funpack will recognize
    this alias and be able to uncompress the image.
  * made performance improvement to fits_read_compressed_img so that
    when reading a section of an compressed image that includes only
    every nth pixel in some dimension, it will only uncompressed a tile
    if there are actually any pixels of interest in that tile.
  * fixed several issues with the beta FITS binary table compression code
    that is used by fpack:  added support for zero-length vector columns,
    made improvements to the output report when using the -T option in fpack,
    changed the default table compression method to 'Rice' instead of
    'Best', and now writes the 'ZTILELEN' keyword to document the number
    of table rows in each tile.
  * fixed error in ffbinit in calculating the total length of the binary
    table extension if the THEAP keyword was used to override the
    default starting location of the heap.
- Removed cfitsio.patch (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly.
- Added a patch (no-return-in-nonvoid-function.patch) to fix "Program returns
  random data in a function" rpm post build check error.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387108800">- ppc64le-support.patch: Add support for ppc64le.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1392552000">- Update to version 3.360:
  * added 9 Dec: small change to the fileseek function in drvrfile.c to
    support large files &gt; 2 GB when building CFITSIO with MinGW on Windows
  * reorganized the CFITSIO code directory structure; added a 'docs'
    subdirectory for all the documentation, and a 'zlib' directory
    for the zlib/gzip file compression code.
  * made major changes to the compression code for FITS binary table
    to support all types of columns, including variable-length arrays.
    This code is mainly used via the fpack and funpack programs.
  * increased the number of FITS files that can be opened as one
    time to 1000, as defined by NMAXFILES in fitsio2.h.
  * made small configuration changes to configure.in, configure,
    fitsio.h, and drvrfile.c to support large files (64-bit file
    offsets} when using the mingw-w64 compiler (provided by
    Benjamin Gilbert).
  * made small change to fits_delete_file to more completely ignore
    any non-zero input status value.
  * fixed a logic error in a 'if' test when parsing a keyword name
    in the ngp_keyword_is_write function in grparser.c (provided
    by David Binderman).
  * when specifying the image compression parameters as part of the
    compressed image file name (using the "[compress]" qualifier
    after the name of the file), the quantization level value, if
    specified, was not being recognized by the CFITSIO compression
    routines. The image would always be compressed with the default
    quantization level of 4.0, regardless of what was specified.  This
    affected the imcopy program, and potentially other user-generated
    application programs that used this method to specify the
    compression parameters.  This bug did not affect fpack or
    funpack.   This was fixed in the imcomp_get_compressed_image_par
    routine in the imcompress.c file. (reported by Sean Peters)
  * defined a new CFITS_API macro in fitsio.h which is used to export the
    public symbols when building CFITSIO on Windows systems with CMake. This
    works in conjunction with the new Windows CMake build procedure that
    is described in the README.win32 file. This complete revamping of the
    way CFITSIO is built under Windows now supports building 64-bit
    versions of the library.  Thanks to Daniel Kaneider (Luminance HDR
    Team) for providing these new  CMake build procedures.
  * modified the way that the low-level file_create routine works when
    running in the Hera environment to ensure that the FITS file that is
    created is within the allow user data disk area.
  * modified fits_get_compression_type so that it does not return an error
    if the HDU is a normal FITS IMAGE extension, and is not a tile-compressed
    image.
  * modified the low-level ffgcl* and ffpcl* routines to ensure that they
    never try ro read or write more than 2**31 bytes from disk at one time,
    as might happen with very large images, to avoid integer overflow errors.
    Fix kindly provided by Fred Gutsche at NanoFocus AG (www.nanofocus.de).
  * modified Makefile.in so that doing 'make distclean' does not delete
    new config.sub and config.guess files that were recently added.
  * adopted a patch from Debian in zcompress.c to "define" the values of
    GZBUFSIZE and BUFFINCR, instead of exporting the symbols as 'int's.
- Renamed libcfitsio-devel to cfitsio-devel and libcfitsio-devel-doc to
  cfitsio-devel-doc. Added appropriate Provides/Obsoletes entries.
- Removed the following patches (fixed upstream):
  * implicit-pointer-decl.patch
  * no-return-in-nonvoid-function.patch
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 3.370
  + Added configure options to support reading bzip2 compressed FITS files.
    This depends on having the bzlib library installed on the local machine.
  + Replaced the random Gaussian and Poissonian distribution functions with
    new code written by Craig Markwardt derived from public domain C++ functions
  + Patched fitsio2.h to support CFITSIO on AArch64 (64-bit ARM)
    architecture (both big and little endian).
  + Fixed bug in fpackutil.c that caused fpack to exit prematurely if
    the FZALGOR directive keyword was present in the HDU header.
- Remove obsolete patches; fixed on upstream release
  + aarch64-support.patch
  + ppc64le-support.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to version 3.390:
  * Lots of changes - see changes.txt for details.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488283200">- Update to version 3.410:
  * The change made in version 3.40 to include strings.h caused
    problems on Windows (and other) platforms, so this change was
    backed out. The reason for including it was to define the
    strcasecmp and strcasencmp functions, so as an alternative, new
    equivalent functions called fits_strcasecmp and
    fits_strncasecmp have been added to CFITSIO.as a substitute.
    All the previous calls to the str[n]casecmp functions have been
    changed to now call fits_str[n]casecmp. In addition, the
    previously defined ngp_strcasecmp function (in grparser.c) has
    been removed and the calls to it have been changed to
    fits_strcasecmp.
  * The speed.c utility program was changed to correctly call
    the gettimeofday function with a NULL second arguement.
  From version 3.400:
  * fixed a bug when writing long string keywords with the CONTINUE
    convention which caused the CONTINUE'd strings to only be 16
    characters long, instead of using up all the available space in
    the 80-character header record.
  * fixed a missing 'defined' keyword in fitsio.h.
  * replaced all calls to strtok (which is not threadsafe) with a
    new ffstrtok function which internally calls the threadsafe
    strtok_r function.  One byproduct of this change is that
    &lt;strings.h&gt; must also be included in several of the C source
    code files.
  * modified the ffphbn function in putkey.c to support TFORM
    specifiers that use lowercase 'p' (instead of uppercase) when
    referring to a variable-length array column.
  * modified the lexical parser in eval.y and eval_y.c to support
    bit array columns (with TFORMn = 'X') with greater than 256
    elements. Fix to bitcmp function:  The internal 'stream' array
    is now allocated dynamically rather than statically fixed at
    size 256. This was failing when users attempted a row filtering
    of a bitcol that was wider than 256X. In bitlgte, bitand, and
    bitor functions, replaced static stream[256] array allocation
    with dynamic allocation.
  * modified the ffiter function in putcol.c to fix a problem which
    could cause the iterator function to incorrectly deal with null
    values.  This only affected TLONG type columns in cases where
    sizeof(long) = 8, as well as for TLONGLONG type columns.
  * Fix made to uncompress2mem function in zcomprss.c for case
    where output uncompressed file expands to over the 2^32 (4Gb)
    limit.  It now checks for this case at the start, and
    implements a 4Gb paging system through the output buffer.  The
    problem was specifically caused by the d_stream.avail_out
    member being of 4-byte type uInt, and thus unable to handle any
    memory position values above 4Gb.
  * fixed a bug in fpackutil.c when using the -i2f (integer to
    float) option in fpack to compress an integer image that is
    scaled with non-default values for BSCALE and BZERO. This
    required an additional call to ffrhdu to reset the internal
    structures that describe the input FITS file.
  * modified fits_uncompress_table in imcompress.c to silently
    ignore the ZTILELEN keyword value if it larger than the number
    of rows in the table
  * Tweak strcasecmp/strncasecmp ifdefs to exclude 64-bit MINGW
    environment, as it does not lack those functions. (eval_l.c,
    fitsio2.h)
  * CMakeLists.txt: Set M_LIB to "" for MINGW build environment (in
    addition to MSVC).
  * Makefile.in: Add *.dSYM (non-XCode gcc leftovers on Macs) to
    clean list.  Install libs by name rather than using a wildcard.
  * configure: Fix rpath token usage for XCode vs. non-XCode gcc on
    Macs.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to version 3.420:
  * added https support to the collection of drivers handled in
    cfileio.c and drvrnet.c.  This also handles the case where http
    transfers are rerouted to https.  Note that this enhancement
    introduces a dependency on the libcurl development package.  If
    this package is absent, CFITSIO will still build but will not
    have https capability.
  * made fix to imcomp_init_table function in imcompress.c.  It now
    writes ZSIMPLE keyword only to a compressed image that will be
    placed in the primary header.
  * fix made to fits_get_col_display_width for case of a vector
    column of strings.
  * in ftp_open_network and in ftp_file_exist, added code to
    repeatedly attempt to make a ftp connection if the ftp server
    does not respond to the first request. (some ftp servers don't
    appear to be 100% reliable).
  * in drvrnet.c added many calls to 'fclose' to close unneeded
    files, to avoid exceeding the maximum allowed number of files
    that can be open at once.
  * made substantial changes to the ftp_checkfile and
    http_checkfile routines to streamline the process of checking
    for the existence of a .gz or .Z compressed version of the file
    before opening the uncompressed file (when using http or ftp to
    open the file).
  * modified the code in ftp_open_network to send "\r\n" as
    end-of-line characters instead of just "\n".  Some ftp servers
    (in particular, at heasarc.gsfc.nasa.gov) now require both
    characters, otherwise the network connection simply hangs.
  * modified the http_open_network routine to handle HTTP 301 or
    302 redirects to a FTP url.  This is needed to support the new
    configuration on the heasarc HTTP server which sometimes
    redirects http URLS to a ftp URL.
- Added new build requirement libcurl-devel.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1523448000">- Update to version 3.430:
  * Fixed security vulnerabilities (bsc#1088590, CVE-2018-1000166).
  * Calls to https driver functions in cfileio.c need to be macro-
    protected by the HAVE_NET_SERVICES variable (as are the http
    and ftp driver function calls).  Otherwise CMake builds on
    native Windows will fail since drvrnet.o is left empty.
  * Bug fix to ffmvec function.  Should be resetting a local colptr
    variable after making a call to ffiblk (which can reallocate
    Ftpr-&gt;tableptr).
  * Ignore any attempted request to not quantize an image before
    compressing it if the image has integer datatype pixels.
  * Improved error message construction throughout CFITSIO.
- Package licence file as license, not doc (boo#1082318).</changelog>
</package>
<package pkgid="7f3db6003cb1f367df1222a9aafd8fa0e131c07b072dfd9d403a854dd728e539" name="cfitsio-devel-doc" arch="x86_64">
  <version epoch="0" ver="3.430" rel="4.3.1"/>
  <changelog author="mseben@novell.com" date="1274270400">- fix libdir,include dir and version string in pkgconfig (bnc#546004)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1274356800">- update to version 3.23.0,
  * reduced the default value for the floating point image
    quantization parameter (q) from 16 to 4.
  * enhanced the template keyword parsing routine to reject a
    header template string that only contains a sequence of dashes.
  * enhanced the ASCII region file reading routine to allow tabs
    as well as spaces between fields in the file.
  * got rid of bogus error message when calling
    fits_update_key_longstr
  * Made the error message more explicit when CFITSIO tries to
    write to a GZIP compressed file.
  * several bugfixes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1316174400">- update to version 3.280
  * Lots of changes (see changes.txt file).
- Spec file updates
  * Changes based on spec-cleaner run.
  * Updates in summaries and descriptions.
  * Updates in Group: entries of the packages.
  * Added description for the patch based on openSUSE Patches Guidelines.
  * Added pkg-config in BuildRequires: (fix for "no-pkg-config-provides"
    rpmlint warning).
  * Added cfitsio package (containing some utilities).
  * Fixes for cfitsio.pc.
  * Minor other updates.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1317729600">- Added correct fix for cfitsio.pc include dirs (Cflags: was wrongly replaced
  with $Cflags:). Fixes reopened bnc#546004.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1323000000">- Update to version 3.290:
  Enhancements
  * modified Makefile.in to allow configure to override the lib and include
    destination directories.
  * added (or restored actually) support for tile compression of 1-byte integer
    images in imcomp_compress_tile.  Support for that data type was overlooked
    during recent updates to this routine.
  * modified the fits_get_token command-line parsing routine to perform more
    rigorous checks to determine if the token can be interpreted as a number
    or not.
  * made small modification to fpack.c to not allow the -i2f option (convert
    image from integer to floating point) with the "-g -q 0" option (do lossless
    gzip compression).  It is more efficient to simply use the -g option alone.
  * made modifications to fitsio.h and drvrfile.c to support reading and
    writing large FITS files (&gt; 2.1 GB) when building CFITSIO using
    Microsoft Visual C++ on Windows platforms.
  * added new WCS routine (ffgicsa) which returns the WCS keyword values
    for a particular WCS version ('A' - 'Z').
  Bug Fixes
  * fixed a problem with multi-threaded apps that open/close FITS files
    simultaneously by putting mutex locks around the call to
    fits_already_open and in fits_clear_Fptr.
  * fixed a bug when using the 'regfilter' function to select a subset of the
    rows in a FITS table that have coordinates that lie within a specified
    spatial region on the sky.  This bug only affects the rarely used panda
    (and epanda and bpanda) region shapes in which the region is defined by
    the intersection of an annulus  and a pie-shaped wedge.  The previous code
    (starting with version 3.181 of CFITSIO where support for the panda region
    was first introduced) only worked correctly if the 2 angles that define
    the wedge have values between -180 and +180.  If not, then fewer rows than
    expected may have been selected from the table.
  * fixed the extended filename parser so that when creating a histogram by
    binning 2 table columns, if a keyword or column name is given as the
    weighting factor,  then the output histrogram image will have a floating
    point datatype, not the default integer datatype as is the case when no
    weigth is specified (e.g. with a filename like
    "myfile.fits[bin x,y; weight_column]"
  * added fix to the code in imcompress.c to work around a problem with
    dereferencing the value of a pointer, in cases where the address of
    that pointer has not been defined (e.g., the nulval variable).
  * modified the byte shuffling algorithm in fits_shuffle_8bytes to work
    around a strange bug in the proprietary SunStudioExpress C compiler
    under OpenSolaris.
  * removed spurious messages on the CFITSIO error stack when opening a
    FITS file with FTP (in drvrnet.c);
- Removed the Makefile.in changes from cfitsio-makefile.patch (fixed upstream).
- Spec file updates:
  * Changed License entry to SPDX style.
  * Enable multithreading support.</changelog>
  <changelog author="idoenmez@suse.de" date="1323000001">- Fix SLE_11 build</changelog>
  <changelog author="idoenmez@suse.de" date="1323086400">- Set license to ISC, bnc#734865</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336478400">- Update to version 3.300:
  Enhancements
  * Added new routine called fits_is_reentrant which returns 1 or 0 depending
    on whether or not CFITSIO was compiled with the -D_REENTRANT directive.
    This can be used to determine if it is safe to use CFITSIO in
    multi-threaded programs.
  * Implimented much faster byte-swapping algorithms in swapproc.c based on
    code provided by Julian Taylor at ESO, Garching.  These routines
    significantly improve the FITS image read and write speed (by more than a
    factor of 2 in some cases) on little-endian machines (e.g., Linux and
    Microsoft Windows running on x86 PCs) where byte-swapping is required.
    This has no effect on big-endian machines (e.g., Macs).  Even faster
    performance can be achieved in some cases by invoking the new
    "--enable-sse2" or "--enable-ssse3" configure options when building CFITSIO
    on machines that have CPUs and compilers that support the SSE2 and SSSE3
    machine instructions.
  * added additional support for implicit data type conversion in cases where
    the floating point image has been losslessly compressed with gzip.  The
    pixels in these compressed images can now be read back as arrays of short,
    int, and long integers as well as single and double precision
    floating-point.
  * modified fitsio2.h and f77_wrap.h to recognize IBM System z mainframes by
    testing if __s390x__ or __s390__ is defined.
  * small change to ffgcrd in getkey.c so that it supports reading a blank
    keyword (e.g., a keyword whose name simply contains 8 space chracters).
  Bug Fixes
  * fixed a bug in imcomp_decompress_tile that caused the tile-compressed image
    to be uncompressed incorrectly (even though the tile-compressed image
    itself was written correctly) under the following specific conditions:
  - the original FITS image has a "float" datatype (R*4)
  - one or more of the image tiles cannot be compressed using the standard
    quantization method  and instead are losslessly compressed with gzip
  - the pixels in these tiles are not all equal to zero (this bug does
    affect tiles where all the pixels are equal to zero)
  - the program that is reading the compressed image uses CFITSIO's
    "implicit datatype conversion" feature to read the "float" image
    back into an array of "double" pixel values.
    If all these conditions are met, then the returned pixel values in the
    affected image tiles will be garbage, with values often ranging
    up to 10**34.  Note that this bug does not affect the fpack/funpack
    programs, because funpack does not use CFITSIO's implicit datatype
    conversion feature when uncompressing the image.
- Replaced cfitsio-makefile.patch with cfitsio.patch (taken from Fedora). It's
  the same patch with the addition of linking libcfitsio with libpthread and
  libm (fixes possible errors with packages requiring libcfitsio0 and compiled
  with the "--as-needed" flag).
- Added a patch (cfitsio-zlib.patch) to use system zlib (based on patches from
  Fedora and Debian). Added zlib-devel in build depencdencies.
- Added a patch (implicit-pointer-decl.patch) to fix "implicit-pointer-decl"
  rpm post build check warning.
- Moved "-lpthread" and added "-lz" in Libs.private: of cfitsio pkg-config
  file.
- Removed "-fno-strict-aliasing" from CFLAGS.
- Don't install static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1336564800">- Renamed package from libcfitsio0 to cfitsio.
- Renamed subpackage libcfitsio-doc to libcfitsio-devel-doc (added obsoletes
  entry for libcfitsio-doc of previous openSUSE versions).
- Suggest the libcfitsio-devel-doc package in libcfitsio-devel.
- Removed the requirement for libcfitsio0 from libcfitsio-(devel)-doc (not
  needed).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343736000">- Update to version 3.310:
  * Enhanced the CFITSIO column filtering syntax to allow the comma, in
    addition to the semi-colon, to be used to separate clauses, for example:
    [col X,Y;Z = max(X,Y)].  This was done because users are not allowed to
    enter the semi-colon character in the on-line Hera data processing
    system due to computer security concerns.
  * Enhanced the CFITSIO extended filename syntax to allow specifying image
    compression parameters (e.g. '[compress Rice]') when opening an existing
    FITS file with write access.  The specified compression parameters will
    be used by default if more images are appended to the existing file.
  * Modified drvrfile.c to do additional file secrity checks when CFITSIO
    is running within the HEASARC's Hera software system.  In this case
    CFITSIO will not allow FITS files to be created outside of the user's
    individual Hera data directory area.
  * Fixed an issue in fpack and funpack on Windows machines, caused by
    the fact that the 'rename' function behaves differently on Windows
    in that it does not clobber an existing file, as it does on Unix
    platforms.
  * Fixed bug in the way byte-swapping was being performed when writing
    integer*8 null values to an image or binary table column.
  * Added the missing macro definition for fffree to fitsio.h.
  * Modified the low level table read and write functions in getcol*.c and
    putcol*.c to remove the 32-bit limitation on the number of elements.
    These routines now support reading and writing more than 2**31 elements
    at one time. Thanks to Keh-Cheng Chu (Stanford U.) for the patch.
  * Modified Makefile.in so that the shared libcfitsio.so is linked against
    pthreads and libm.
- Removed the fix to link the library to libpthread and libm from cfitsio.patch
  (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly. Removed the linking of the
  programs (fpack and funpack) to libz from the patch (not needed).
- Remove some more bundled zlib files from the package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1364990400">- Update to version 3.340:
  * modified configure and configure.in to support cross-compiled cfitsio
    as a static library for Windows on a Linux platform using MXE
    (http://mxe.cc) - a build environment for mingw32. (contributed by
    Niels Kristian Bech Jensen)
  * added conditional compilation statementsfor the mingw32 environment in
    drvrfile.c because mingw32 does not include the ftello and fseeko
    functions. (contributed by Niels Kristian Bech Jensen)
  * fixed a potential bug in ffcpcl (routine to copy a column from one table
    to another table) when dealing with the rare case of a '0X' column (zero
    length bit column).
  * fixed an issue in the routines that update or modify string-valued
    keyword values, as a result of the change to ffc2s in the previous
    release.  These routines would exit with a 204 error status if the
    current value of the keyword to be updated or modified is null.
  * fixed typo in the previous modification that was intended to ignore
    numerical overflows in Hcompress when decompressing an image.
  * moved the 'startcol' static variable out of the ffgcnn routine and
    instead added it as a member of the 'FITSfile' structure that is defined
    in fitsio.h.  This removes a possible race condition in ffgcnn in
    multi-threaded environments.
  From version 3.330:
  * modified the imcomp_decompress_tile routine to ignore any numerical
    overflows that might occur when using Hcompress to decompress the
    image.  If Hcompress is used in its 'lossy' mode, the uncompressed
    image pixel values may slightly exceed the range of an integer*2
    variable. This is generally of no consequence, so we can safely ignore
    any overflows in this case and just clip the values to the legal range.
  * the default tiling pattern when writing a tile-compressed image
    has been changed.  The old behaviour was to compress the whole image
    as one single large tile.  This is often not optimal when dealing
    with large images, so the new default behavior is to treat each
    row of the image as one tile.  This is the same default behavior
    as in the standalone fpack program.  The default tile size can
    be overridden by calling fits_set_tile_dim.
  * fixed bug bug that resulted in a corrupted output FITS image when
    attempting to write a float or double array of values to a
    tile-compressed integer data type image.  CFITSIO does not support
    implicit data type conversion in this case and now correctly
    returns an appropriate error status.
  * modified ricecomp.c to define the nonzero_count lookup table as an
    external variable, rather then dynamically allocating it within the
    3 routines that use it.  This simplifies the code and eliminates the
    need for special thread locking and unlocking statements. (Thanks to
    Lars Kr. Lundin for this suggestion).
  * modifed how the uncompressed size of a gzipped file is computed in the
    mem_compress_open routine in drvrmem.c.  Since gzip only uses 4 bytes
    in the compressed file header to store the original file size, one may
    need to apply a modulo 2^32 byte correction in some cases.  The logic
    here was modified to allow for corner cases (e.g., very small files, and
    when running on 32-bit platforms that do not support files larger than
    2^31 bytes in size).
  * added new public routine to construct a 80 keyword record from the 3 input
    component strings, i.e, the keyword name string, the value string, and
    the comment string: fits_make_key/ffmkky.  (This was already an undocumented
    internal routine in previous versions of CFITSIO).
  * modified ffc2s so that if the input keyword value string is a null string,
    then it will return a VALUE_UNDEFINED (204) status value.  This makes it
    consistent with the behavior when attempting to read a null keyword
    (which has no value) as a logical or as a number (which also returns
    the 204 error).  This should only affect cases where the header keyword
    does not have an equal sign followed by a space character in columns 9
    and 10 of the header record.
  * Changed the "char *" parameter declarations to "const char *" in many
    of the routines (mainly the routines that modify or update keywords) to
    avoid compiler warnings or errors from C++ programs that tend to be more
    rigorous about using "const char *" when appropriate.
  * added support for caching uncompressed image tiles, so that the tile does
    not need to be uncompressed again if the application program wants
    to read more data from the same tile. This required changes to the
    main FITS file structure that is defined in fitsio.h, as well as
    changes to imcompress.c.
  * enhanced the previous modification to drvrfile.c to handle additional user
    cases when running in the HEASARC's Hera environment.
  From version 3.320:
  * fixed flaw in the way logical columns (TFORM = 'L') in binary tables
    were read which caused an illegal value of 1 in the column to be
    interpreted as a 'T' (TRUE) value.
  * extended the column filtering syntax in the CFITSIO file name parser to
    enable users and scripts to append new COMMENT or HISTORY keyword into the
    header of the filtered file (provided by Craig Markwardt).  For example,
    fcopy "infile.fits[col #HISTORY='Processed on 2012-10-05']" outfile.fits
    will append this header keyword: "HISTORY Processed on 2012-10-05"
  * small change to the code that opens and reads an ASCII region file to
    return an error if the file is empty.
  * fixed obscure sign propagation error when attempting to read the
    uncompressed size of a gzipped FITS file.  This resulted in a memory
    allocation error if the gzipped file had an uncompressed file
    size between 2^31 and 2^32 bytes.  Fix supplied by Gudlaugur Johannesson
    (Stanford).
- Rebased cfitsio.patch to apply cleanly.</changelog>
  <changelog author="schwab@suse.de" date="1371384000">- aarch64-support.patch: Add support for aarch64</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1373198400">- Update to version 3.350:
  * fixed problem with the default tile size when compressing images with
    fpack using the Hcompress algorithm.
  * fixed returned value ("status" instead of "*status")
  * in imcompress.c, declared some arrays that are used to store the dimensions
    of the image from 'int' to 'long', to support very large images (at least
    on systems where sizeof(long) = 8),
  * modified the routines that convert a string value to a float or double
    to prevent them from returning a NaN or Inf value if the
    string is "NaN" or "Inf" (as can happen with gcc implementation of the
    strtod function).
  * removed/replaced the use of the assert() functions when locking or
    unlocking threads because they did not work correctly if NDEBUG is
    defined.
  * made modifications to the way the command-line file filters are parsed to
    1) remove the 1024-character limit when specifying a column filter,
    2) fixed a potential character buffer-overflow risk in fits_get_token, and
    3) improved the parsing logic to remove any possible of confusing
    2 slash characters ("//") in the string as the beginning of a
    comment string.
  * modified configure and Makefile.in so that when building CFITSIO
    as a shared library on linux or Mac platforms, it will use the SONAME
    convention to indicate whether each new release of the CFITSIO
    library is binary-compatible with the previous version.  Application
    programs that link with the shared library will not need to be
    recompiled as long as the versions are compatible.  In practice,
    this means that the shared library binary file that is created (on
    Linux systems) will have a name like 'libcfitsio.so.I.J.K', where I is the
    SONAME version number, J is the major CFITSIO version number (e.g. 3),
    and K is the minor CFITSIO version number (e.g., 34).  Two link
    files will also be created such that
    libcfitsio.so -&gt; libcfitsio.so.I, and
    libcfitsio.so.I -&gt; libcfitsio.I.J.K
    Application programs will still run correctly with the new version of
    CFITSIO as long as the 'I' version number remains the same, but the
    applications will fail to run if the 'I' number changes, thus alerting
    the user that the application must be rebuilt.
  * fixed bug in fits_insert_col when computing the new table row width
    when inserting a '1Q' variable length array column.
  * modified the image compression routines so that the output compressed
    image (stored in a FITS binary table) uses the '1Q' variable length
    array format (instead of '1P') when the input file is larger than 4 GB.
  * added support for "compression directive" keywords which indicate how
    that HDU should be compressed (e.g., which compression algorithm to use,
    what tiling pattern to use, etc.).  The values of these keywords will
    override the compression parameters that were specified on the command
    line when running the fpack FITS file compression program.
  * globally changed the variable and/or subroutine name "dither_offset"
    to "dither_seed" and "quantize_dither" to "quantize_method" so
    that the names more accurately reflects their purpose.
  * added support for a new SUBTRACTIVE_DITHER_2 method when compressing
    floating point images.  The only difference with the previous method
    is that pixels with a value exactly equal to 0.0 will not be dithered,
    and instead will be exactly preserved when the image is compressed.
  * added support for an alias of "RICE_ONE" for "RICE_1" as the value
    of the ZCMPTYPE keyword, which gives the name of the image compression
    algorithm.  This alias is used if the new SUBTRACTIVE_DITHER_2 option
    is used, to prevent old versions of funpack from creating a corrupted
    uncompressed image file.  Only newer versions of funpack will recognize
    this alias and be able to uncompress the image.
  * made performance improvement to fits_read_compressed_img so that
    when reading a section of an compressed image that includes only
    every nth pixel in some dimension, it will only uncompressed a tile
    if there are actually any pixels of interest in that tile.
  * fixed several issues with the beta FITS binary table compression code
    that is used by fpack:  added support for zero-length vector columns,
    made improvements to the output report when using the -T option in fpack,
    changed the default table compression method to 'Rice' instead of
    'Best', and now writes the 'ZTILELEN' keyword to document the number
    of table rows in each tile.
  * fixed error in ffbinit in calculating the total length of the binary
    table extension if the THEAP keyword was used to override the
    default starting location of the heap.
- Removed cfitsio.patch (fixed upstream).
- Rebased cfitsio-zlib.patch to apply cleanly.
- Added a patch (no-return-in-nonvoid-function.patch) to fix "Program returns
  random data in a function" rpm post build check error.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387108800">- ppc64le-support.patch: Add support for ppc64le.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1392552000">- Update to version 3.360:
  * added 9 Dec: small change to the fileseek function in drvrfile.c to
    support large files &gt; 2 GB when building CFITSIO with MinGW on Windows
  * reorganized the CFITSIO code directory structure; added a 'docs'
    subdirectory for all the documentation, and a 'zlib' directory
    for the zlib/gzip file compression code.
  * made major changes to the compression code for FITS binary table
    to support all types of columns, including variable-length arrays.
    This code is mainly used via the fpack and funpack programs.
  * increased the number of FITS files that can be opened as one
    time to 1000, as defined by NMAXFILES in fitsio2.h.
  * made small configuration changes to configure.in, configure,
    fitsio.h, and drvrfile.c to support large files (64-bit file
    offsets} when using the mingw-w64 compiler (provided by
    Benjamin Gilbert).
  * made small change to fits_delete_file to more completely ignore
    any non-zero input status value.
  * fixed a logic error in a 'if' test when parsing a keyword name
    in the ngp_keyword_is_write function in grparser.c (provided
    by David Binderman).
  * when specifying the image compression parameters as part of the
    compressed image file name (using the "[compress]" qualifier
    after the name of the file), the quantization level value, if
    specified, was not being recognized by the CFITSIO compression
    routines. The image would always be compressed with the default
    quantization level of 4.0, regardless of what was specified.  This
    affected the imcopy program, and potentially other user-generated
    application programs that used this method to specify the
    compression parameters.  This bug did not affect fpack or
    funpack.   This was fixed in the imcomp_get_compressed_image_par
    routine in the imcompress.c file. (reported by Sean Peters)
  * defined a new CFITS_API macro in fitsio.h which is used to export the
    public symbols when building CFITSIO on Windows systems with CMake. This
    works in conjunction with the new Windows CMake build procedure that
    is described in the README.win32 file. This complete revamping of the
    way CFITSIO is built under Windows now supports building 64-bit
    versions of the library.  Thanks to Daniel Kaneider (Luminance HDR
    Team) for providing these new  CMake build procedures.
  * modified the way that the low-level file_create routine works when
    running in the Hera environment to ensure that the FITS file that is
    created is within the allow user data disk area.
  * modified fits_get_compression_type so that it does not return an error
    if the HDU is a normal FITS IMAGE extension, and is not a tile-compressed
    image.
  * modified the low-level ffgcl* and ffpcl* routines to ensure that they
    never try ro read or write more than 2**31 bytes from disk at one time,
    as might happen with very large images, to avoid integer overflow errors.
    Fix kindly provided by Fred Gutsche at NanoFocus AG (www.nanofocus.de).
  * modified Makefile.in so that doing 'make distclean' does not delete
    new config.sub and config.guess files that were recently added.
  * adopted a patch from Debian in zcompress.c to "define" the values of
    GZBUFSIZE and BUFFINCR, instead of exporting the symbols as 'int's.
- Renamed libcfitsio-devel to cfitsio-devel and libcfitsio-devel-doc to
  cfitsio-devel-doc. Added appropriate Provides/Obsoletes entries.
- Removed the following patches (fixed upstream):
  * implicit-pointer-decl.patch
  * no-return-in-nonvoid-function.patch
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 3.370
  + Added configure options to support reading bzip2 compressed FITS files.
    This depends on having the bzlib library installed on the local machine.
  + Replaced the random Gaussian and Poissonian distribution functions with
    new code written by Craig Markwardt derived from public domain C++ functions
  + Patched fitsio2.h to support CFITSIO on AArch64 (64-bit ARM)
    architecture (both big and little endian).
  + Fixed bug in fpackutil.c that caused fpack to exit prematurely if
    the FZALGOR directive keyword was present in the HDU header.
- Remove obsolete patches; fixed on upstream release
  + aarch64-support.patch
  + ppc64le-support.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to version 3.390:
  * Lots of changes - see changes.txt for details.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488283200">- Update to version 3.410:
  * The change made in version 3.40 to include strings.h caused
    problems on Windows (and other) platforms, so this change was
    backed out. The reason for including it was to define the
    strcasecmp and strcasencmp functions, so as an alternative, new
    equivalent functions called fits_strcasecmp and
    fits_strncasecmp have been added to CFITSIO.as a substitute.
    All the previous calls to the str[n]casecmp functions have been
    changed to now call fits_str[n]casecmp. In addition, the
    previously defined ngp_strcasecmp function (in grparser.c) has
    been removed and the calls to it have been changed to
    fits_strcasecmp.
  * The speed.c utility program was changed to correctly call
    the gettimeofday function with a NULL second arguement.
  From version 3.400:
  * fixed a bug when writing long string keywords with the CONTINUE
    convention which caused the CONTINUE'd strings to only be 16
    characters long, instead of using up all the available space in
    the 80-character header record.
  * fixed a missing 'defined' keyword in fitsio.h.
  * replaced all calls to strtok (which is not threadsafe) with a
    new ffstrtok function which internally calls the threadsafe
    strtok_r function.  One byproduct of this change is that
    &lt;strings.h&gt; must also be included in several of the C source
    code files.
  * modified the ffphbn function in putkey.c to support TFORM
    specifiers that use lowercase 'p' (instead of uppercase) when
    referring to a variable-length array column.
  * modified the lexical parser in eval.y and eval_y.c to support
    bit array columns (with TFORMn = 'X') with greater than 256
    elements. Fix to bitcmp function:  The internal 'stream' array
    is now allocated dynamically rather than statically fixed at
    size 256. This was failing when users attempted a row filtering
    of a bitcol that was wider than 256X. In bitlgte, bitand, and
    bitor functions, replaced static stream[256] array allocation
    with dynamic allocation.
  * modified the ffiter function in putcol.c to fix a problem which
    could cause the iterator function to incorrectly deal with null
    values.  This only affected TLONG type columns in cases where
    sizeof(long) = 8, as well as for TLONGLONG type columns.
  * Fix made to uncompress2mem function in zcomprss.c for case
    where output uncompressed file expands to over the 2^32 (4Gb)
    limit.  It now checks for this case at the start, and
    implements a 4Gb paging system through the output buffer.  The
    problem was specifically caused by the d_stream.avail_out
    member being of 4-byte type uInt, and thus unable to handle any
    memory position values above 4Gb.
  * fixed a bug in fpackutil.c when using the -i2f (integer to
    float) option in fpack to compress an integer image that is
    scaled with non-default values for BSCALE and BZERO. This
    required an additional call to ffrhdu to reset the internal
    structures that describe the input FITS file.
  * modified fits_uncompress_table in imcompress.c to silently
    ignore the ZTILELEN keyword value if it larger than the number
    of rows in the table
  * Tweak strcasecmp/strncasecmp ifdefs to exclude 64-bit MINGW
    environment, as it does not lack those functions. (eval_l.c,
    fitsio2.h)
  * CMakeLists.txt: Set M_LIB to "" for MINGW build environment (in
    addition to MSVC).
  * Makefile.in: Add *.dSYM (non-XCode gcc leftovers on Macs) to
    clean list.  Install libs by name rather than using a wildcard.
  * configure: Fix rpath token usage for XCode vs. non-XCode gcc on
    Macs.
- Rebased cfitsio-zlib.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to version 3.420:
  * added https support to the collection of drivers handled in
    cfileio.c and drvrnet.c.  This also handles the case where http
    transfers are rerouted to https.  Note that this enhancement
    introduces a dependency on the libcurl development package.  If
    this package is absent, CFITSIO will still build but will not
    have https capability.
  * made fix to imcomp_init_table function in imcompress.c.  It now
    writes ZSIMPLE keyword only to a compressed image that will be
    placed in the primary header.
  * fix made to fits_get_col_display_width for case of a vector
    column of strings.
  * in ftp_open_network and in ftp_file_exist, added code to
    repeatedly attempt to make a ftp connection if the ftp server
    does not respond to the first request. (some ftp servers don't
    appear to be 100% reliable).
  * in drvrnet.c added many calls to 'fclose' to close unneeded
    files, to avoid exceeding the maximum allowed number of files
    that can be open at once.
  * made substantial changes to the ftp_checkfile and
    http_checkfile routines to streamline the process of checking
    for the existence of a .gz or .Z compressed version of the file
    before opening the uncompressed file (when using http or ftp to
    open the file).
  * modified the code in ftp_open_network to send "\r\n" as
    end-of-line characters instead of just "\n".  Some ftp servers
    (in particular, at heasarc.gsfc.nasa.gov) now require both
    characters, otherwise the network connection simply hangs.
  * modified the http_open_network routine to handle HTTP 301 or
    302 redirects to a FTP url.  This is needed to support the new
    configuration on the heasarc HTTP server which sometimes
    redirects http URLS to a ftp URL.
- Added new build requirement libcurl-devel.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1523448000">- Update to version 3.430:
  * Fixed security vulnerabilities (bsc#1088590, CVE-2018-1000166).
  * Calls to https driver functions in cfileio.c need to be macro-
    protected by the HAVE_NET_SERVICES variable (as are the http
    and ftp driver function calls).  Otherwise CMake builds on
    native Windows will fail since drvrnet.o is left empty.
  * Bug fix to ffmvec function.  Should be resetting a local colptr
    variable after making a call to ffiblk (which can reallocate
    Ftpr-&gt;tableptr).
  * Ignore any attempted request to not quantize an image before
    compressing it if the image has integer datatype pixels.
  * Improved error message construction throughout CFITSIO.
- Package licence file as license, not doc (boo#1082318).</changelog>
</package>
<package pkgid="09b2f11ecc11ad741222efa68e7b77c036adbbe74ab66a7ae7a22ee909828d7c" name="cgit" arch="src">
  <version epoch="0" ver="1.2.1" rel="13.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="505eedddb005071e5d23f9e4627585995c1a00a1d544280a6da907d061dae282" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="13.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="282d2ab69afa508e6f7a10efc341a85fad175fb2f8a8832d65c1597e01c3dbeb" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="60.0.3112.78" rel="107.1"/>
  <changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
  <changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
  <changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
  <changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
  <changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="69ffa615c110c1f3023a54a4559bff35b0e186f234aa04e6059dc29413c663ce" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="61.0.3163.100" rel="113.1"/>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3b6ba158aadc85898a2087f2b7b00bfa1d3df0c69a3e8db3d1c2a96fedd5e518" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="61.0.3163.79" rel="110.1"/>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
</package>
<package pkgid="e70b12984f96cef89c679680c33297a7bb5436b027e85a677a771df06539eebf" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="62.0.3202.75" rel="118.1"/>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
</package>
<package pkgid="338142d4c525dbde7e6c9c060eb2cfebc9692de4ed2c9820822d49d27de9bab6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="62.0.3202.75" rel="121.1"/>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
</package>
<package pkgid="1f894ba65ac044e1ff38ea610522ab87dffc7ae914164a1db0b8b0cca8adf911" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="62.0.3202.89" rel="124.1"/>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
</package>
<package pkgid="f4555f73ffac5bfe5cfbdabb75c3c7c5e24de5cf15345647087322ec7b15038d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="63.0.3239.108" rel="130.1"/>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
</package>
<package pkgid="199dc06910bbc6ec88417d55898ca07d7c743ea1b1817803334a492935188519" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="63.0.3239.84" rel="127.1"/>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
</package>
<package pkgid="6c28f97fc9e32158190cfc1c3523bcbe68e4473bfb172e690a955714a272e66b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="64.0.3282.119" rel="135.1"/>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime</changelog>
</package>
<package pkgid="bd200c3bfe05b019883070a10babc4aac862b96541ebc2f1266db63ee2644653" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="64.0.3282.140" rel="138.1"/>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
</package>
<package pkgid="e59d392273796b57e59ddb494e319fdbd6cc22b3951321dcc3cd808c8c2dee3f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="64.0.3282.167" rel="141.1"/>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
</package>
<package pkgid="b4b598d9841777bcd4911897fdc1e111496dc30daca707e0ad987aae93d31d1e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="65.0.3325.162" rel="146.1"/>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
</package>
<package pkgid="50eb1dc04d0a710f610d62199201dc49f9ad2d9dd64017af9f9ad23759588c1d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="65.0.3325.181" rel="149.1"/>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
</package>
<package pkgid="bd09e6a461ee95c4b29363d1a52582cf3a99ff1bdf247d36857a25f68c6fdb63" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="66.0.3359.117" rel="152.1"/>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
</package>
<package pkgid="dbce74fbd200eae9d72d3e520da1a03ba65399df699f9eb8cc3d55459b76239e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="66.0.3359.139" rel="155.1"/>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
</package>
<package pkgid="1363075244e606e82eb4037457c6978459adbe2affb5663b4da118ce881e2d89" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="66.0.3359.170" rel="158.1"/>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="93c08fb128ee5c6afa9ca91c5ede04895ec82b1a2120f55f1ff8b104127836f1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="161.4"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="f7c3d98189153dd9d77e1eec32b0e6f8dfcf9699f3c9082b92dd3b9eeb327a64" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="164.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="ab189dfb2637b176b28d00334c805e586e43730969c66f99ad08f885fb43cc50" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="174.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="d080498f6be40e865f203e4fb4b5574a79303220cd5188cfd1bcdd499bf1c382" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="168.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="2bd1d7ef7725cd5c68f6c202e9c0cb55fde31f85c2709da0af60195e9a43c326" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="171.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="19f762ac7eb3754f5e96439e3515eecd2fe68c5703254b1d4d3d9024582f7706" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="182.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="4a1112fd1b0b7e2b0b2584a7cf8c5c4f91956a4c88b3e5fddb4f1f9bca8459ce" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="186.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="ca1cf5d97b187281b97541e9c7947d6df23c36acd1597bb8db34f40026b93208" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="179.1"/>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
</package>
<package pkgid="72100dc114d41549748732fa11f187f6cec234d16d136d554e4d0d1f1db05d60" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="189.1"/>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
</package>
<package pkgid="885f81532c3a6f2c9ab216e7679f0b96bebe7bd9192a0f7ee12dd62904a244cc" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="192.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235201">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
</package>
<package pkgid="8189772074cc1ad0d15bcce5220bb68410fe314dc375182c4a6421826e3fab5b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="72.0.3626.121" rel="202.1"/>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
</package>
<package pkgid="b14476a3a483601f3acd00b7c4d4f5dd3264c72f744066b1c6f57897d14c332c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="72.0.3626.96" rel="197.1"/>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="d79737f8a32f2c95b4e3a0684fe6ffecdff5569f29e0e2841b9d8d83ce4b0802" name="chromium" arch="src">
  <version epoch="0" ver="60.0.3112.78" rel="107.1"/>
  <changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
  <changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
  <changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
  <changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
  <changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="fabb4636f0e86d8fcc4472d6d68382f42abbd0931b391d6cc9c6157ea0475bf9" name="chromium" arch="x86_64">
  <version epoch="0" ver="60.0.3112.78" rel="107.1"/>
  <changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
  <changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
  <changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
  <changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
  <changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="50bf43fc1e2b69bfe15dbaa840b37d0962a4ba724fbd36e88cbc564dd4d5a3bb" name="chromium" arch="src">
  <version epoch="0" ver="61.0.3163.100" rel="113.1"/>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="d472d658911d126c6863280a6c756ebdda6c2e231c9c4a2bd0cea429dc6cbf95" name="chromium" arch="x86_64">
  <version epoch="0" ver="61.0.3163.100" rel="113.1"/>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="b3a7eb8d90d38d0518f8f8882c54af33e1aaa0c6bcc5699bb82e1ab87eb2f3c7" name="chromium" arch="src">
  <version epoch="0" ver="61.0.3163.79" rel="110.1"/>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
</package>
<package pkgid="0c86efe574907bf305b4dc91b25052fc43b854ffadb5259dc45b69579a7ed8b3" name="chromium" arch="x86_64">
  <version epoch="0" ver="61.0.3163.79" rel="110.1"/>
  <changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
  <changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
</package>
<package pkgid="d17c5d9f4b7e0a97e5872288ba7b42b2b0124f386611dbe8187623a012fd2998" name="chromium" arch="src">
  <version epoch="0" ver="62.0.3202.75" rel="118.1"/>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
</package>
<package pkgid="6f247fc3ae3c51477f56819169ebccf2a729807139d8f30aecdf98368bd02c5b" name="chromium" arch="x86_64">
  <version epoch="0" ver="62.0.3202.75" rel="118.1"/>
  <changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
</package>
<package pkgid="784506fd0bccb27c2843b311afc4be2044c2191f10ea07f24135894e21110959" name="chromium" arch="src">
  <version epoch="0" ver="62.0.3202.75" rel="121.1"/>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
</package>
<package pkgid="773e38528bc5427457a82ca1a5d0af5813cb7b3abf84858ad5426401a3040222" name="chromium" arch="x86_64">
  <version epoch="0" ver="62.0.3202.75" rel="121.1"/>
  <changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
</package>
<package pkgid="d8e65427b49010a9b5bd771ed8ce4f71f58500f954c36fbb82944933d50a2b5a" name="chromium" arch="src">
  <version epoch="0" ver="62.0.3202.89" rel="124.1"/>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
</package>
<package pkgid="6b8d6e7657d1f29a3b99fdccbab9c31a3146e6b9a2aaf40b4502de29ccf8fcd4" name="chromium" arch="x86_64">
  <version epoch="0" ver="62.0.3202.89" rel="124.1"/>
  <changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
  <changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
</package>
<package pkgid="1ad85e2e865a9a35582df1ff17918cb99b02615293e53fa04965940642efd68c" name="chromium" arch="src">
  <version epoch="0" ver="63.0.3239.108" rel="130.1"/>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
</package>
<package pkgid="a8c480401bf8d6687a327d3008a4a2b0ed4855194e0a9691d006170cda92821e" name="chromium" arch="x86_64">
  <version epoch="0" ver="63.0.3239.108" rel="130.1"/>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
</package>
<package pkgid="9b5b2be56e38f658ca6d78f6d405eaa554739f1ed5b5cf63aa43903f626ad497" name="chromium" arch="src">
  <version epoch="0" ver="63.0.3239.84" rel="127.1"/>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
</package>
<package pkgid="37e4159816e192c48cf978432ba92f52aff129042c7fb2898909119b25768638" name="chromium" arch="x86_64">
  <version epoch="0" ver="63.0.3239.84" rel="127.1"/>
  <changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
  <changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
</package>
<package pkgid="a795de8258af10bcc9a2598a920eeb93899dcceda3f28cd0cf826ee1baf84499" name="chromium" arch="src">
  <version epoch="0" ver="64.0.3282.119" rel="135.1"/>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime</changelog>
</package>
<package pkgid="1974d46105eb0e2cfa0cd7d34d99d89f2856c148a2d48bc9d421996030ac3004" name="chromium" arch="x86_64">
  <version epoch="0" ver="64.0.3282.119" rel="135.1"/>
  <changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime</changelog>
</package>
<package pkgid="afadd6c627f56e6d2be57acf308e8823638395a21a19c564cd52400f5f10b1cb" name="chromium" arch="src">
  <version epoch="0" ver="64.0.3282.140" rel="138.1"/>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
</package>
<package pkgid="b839a2b8c4e5f0f76a06699e6529cc2863cfae0455b672aec7e1dca2ea25eb2a" name="chromium" arch="x86_64">
  <version epoch="0" ver="64.0.3282.140" rel="138.1"/>
  <changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
</package>
<package pkgid="ef51ec5e41bce454b10a866542d1c3067d7b968a52ea4bcf6f99587dc61e5447" name="chromium" arch="src">
  <version epoch="0" ver="64.0.3282.167" rel="141.1"/>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
</package>
<package pkgid="693d0632e6308733d04b4e0d177156288f46c989b86eb6b89d988890139ee39d" name="chromium" arch="x86_64">
  <version epoch="0" ver="64.0.3282.167" rel="141.1"/>
  <changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
  <changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
  <changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
  <changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
</package>
<package pkgid="b16d2cd26dfcb41a03adc4c4a3394fda7ce7b90fc1b86a69eadaf4fe38da0220" name="chromium" arch="src">
  <version epoch="0" ver="65.0.3325.162" rel="146.1"/>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
</package>
<package pkgid="f706b02891de66f5ead7fe4cd1df0d73415e4d918ec4c269802af278813b637c" name="chromium" arch="x86_64">
  <version epoch="0" ver="65.0.3325.162" rel="146.1"/>
  <changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
  <changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
</package>
<package pkgid="b99f3606b16927364cad6a1616290e25c8f139a8459e79eaf5e1cdda39540a10" name="chromium" arch="src">
  <version epoch="0" ver="65.0.3325.181" rel="149.1"/>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
</package>
<package pkgid="3495c57b7fbcaf9a0003669792be17568bdcd2837ea799e2cd8ad0e479114ac2" name="chromium" arch="x86_64">
  <version epoch="0" ver="65.0.3325.181" rel="149.1"/>
  <changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
  <changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
  <changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
</package>
<package pkgid="5194881f3bcfb485b255682125d62df48bafa0f6724d0dcc3848a2a4f3a71db9" name="chromium" arch="src">
  <version epoch="0" ver="66.0.3359.117" rel="152.1"/>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
</package>
<package pkgid="454924abd9d61f52652bf9934294c073927d83d4dd59b76bb510ad75fc02f58f" name="chromium" arch="x86_64">
  <version epoch="0" ver="66.0.3359.117" rel="152.1"/>
  <changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
</package>
<package pkgid="09d339a5693bc1a86d0426157dec5a2f79ff84af29e5d9663b4e9ee346c889d4" name="chromium" arch="src">
  <version epoch="0" ver="66.0.3359.139" rel="155.1"/>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
</package>
<package pkgid="c6bd91997eb010af375d327d8521db75d993f2c6e160d5d13298653fe3970a14" name="chromium" arch="x86_64">
  <version epoch="0" ver="66.0.3359.139" rel="155.1"/>
  <changelog author="astieger@suse.com" date="1515067200">- Chromium 63.0.3239.132:
  * DevTools: do not report raw headers and cookies for protected
    subresources
  * Various other fixes and updates</changelog>
  <changelog author="tchvatal@suse.com" date="1516881600">- Version update to 64.0.3282.119 bsc#1077571:
  * High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01
  * High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu (@shhnjk) on 2017-11-20
  * High CVE-2018-6033: Race when opening downloaded files. Reported by Juho Nurminen on 2017-12-09
  * Medium CVE-2018-6034: Integer overflow in Blink. Reported by Tobias Klein (www.trapkit.de) on 2017-11-12
  * Medium CVE-2018-6035: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6036: Integer underflow in WebAssembly. Reported by The UK's National Cyber Security Centre (NCSC) on 2017-11-30
  * Medium CVE-2018-6037: Insufficient user gesture requirements in autofill. Reported by Paul Stone of Context Information Security on 2017-08-09
  * Medium CVE-2018-6038: Heap buffer overflow in WebGL. Reported by cloudfuzzer on 2017-10-12
  * Medium CVE-2018-6039: XSS in DevTools. Reported by Juho Nurminen on 2017-10-17
  * Medium CVE-2018-6040: Content security policy bypass. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-26
  * Medium CVE-2018-6041: URL spoof in Navigation. Reported by Luan Herrera on 2017-08-29
  * Medium CVE-2018-6042: URL spoof in OmniBox. Reported by Khalil Zhani on 2017-10-12
  * Medium CVE-2018-6043: Insufficient escaping with external URL handlers. Reported by 0x09AL on 2017-11-16
  * Medium CVE-2018-6045: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-23
  * Medium CVE-2018-6046: Insufficient isolation of devtools from extensions. Reported by Rob Wu on 2017-12-31
  * Medium CVE-2018-6047: Cross origin URL leak in WebGL. Reported by Masato Kinugawa on 2018-01-08
  * Low CVE-2018-6048: Referrer policy bypass in Blink. Reported by Jun Kokatsu (@shhnjk) on 2017-09-08
  * Low CVE-2017-15420: URL spoofing in Omnibox. Reported by Drew Springall (@_aaspring_) on 2017-10-05
  * Low CVE-2018-6049: UI spoof in Permissions. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-13
  * Low CVE-2018-6050: URL spoof in OmniBox. Reported by Jonathan Kew on 2017-10-15
  * Low CVE-2018-6051: Referrer leak in XSS Auditor. Reported by Antonio Sanso (@asanso) on 2014-12-11
  * Low CVE-2018-6052: Incomplete no-referrer policy implementation. Reported by Tanner Emek on 2016-05-28
  * Low CVE-2018-6053: Leak of page thumbnails in New Tab Page. Reported by Asset Kabdenov on 2017-08-23
  * Low CVE-2018-6054: Use after free in WebUI. Reported by Rob Wu on 2017-12-24
- Add patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Drop patch:
  * chromium-gcc.patch
- Change desktop file name to fit bellow the icon on ie KDE desktop</changelog>
  <changelog author="tchvatal@suse.com" date="1516881601">- Switch to gcc7 on Leap builds</changelog>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
</package>
<package pkgid="eeefbb355d971c62fc9c3c254879a534310d53d38e0fa2c4cc26d53eb58874bf" name="chromium" arch="src">
  <version epoch="0" ver="66.0.3359.170" rel="158.1"/>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="6badec3c8d31788afb3eb2e340dfb03496cfb206dd88daad47b5df7af26739b8" name="chromium" arch="x86_64">
  <version epoch="0" ver="66.0.3359.170" rel="158.1"/>
  <changelog author="tchvatal@suse.com" date="1516968000">- Disable ozone stuff conditions for now as the headless mode
  breaks up runtime bsc#1077722</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Install swiftshader objects too as they are needed</changelog>
  <changelog author="tchvatal@suse.com" date="1517227201">- Fix default page to not point to 404</changelog>
  <changelog author="dimstar@opensuse.org" date="1517572800">- Eliminate build dependency on procps: we only used it to run
  'free', in order to find out how much RAM we have available. We
  can get this information directly from the kernel, from
  /proc/meminfo.</changelog>
  <changelog author="tchvatal@suse.com" date="1517572801">- Version update to 64.0.3282.140 bsc#1079021:
  * Various asan fixes bsc#1078463 CVE-2018-6406</changelog>
  <changelog author="astieger@suse.com" date="1518609600">- update to 64.0.3282.167 (bsc#1080920):
  * CVE-2018-6056: Incorrect derived class instantiation in V8</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Chromium 64.0.3282.186:
  * Various minor bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520510400">- Version update to 65.0.3325.146 bsc#1084296:
  * High CVE-2017-11215: Use after free in Flash.
  * High CVE-2017-11225: Use after free in Flash.
  * High CVE-2018-6060: Use after free in Blink.
  * High CVE-2018-6061: Race condition in V8.
  * High CVE-2018-6062: Heap buffer overflow in Skia.
  * High CVE-2018-6057: Incorrect permissions on shared memory.
  * High CVE-2018-6063: Incorrect permissions on shared memory.
  * High CVE-2018-6064: Type confusion in V8.
  * High CVE-2018-6065: Integer overflow in V8.
  * Medium CVE-2018-6066: Same Origin Bypass via canvas.
  * Medium CVE-2018-6067: Buffer overflow in Skia.
  * Medium CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab.
  * Medium CVE-2018-6069: Stack buffer overflow in Skia.
  * Medium CVE-2018-6070: CSP bypass through extensions.
  * Medium CVE-2018-6071: Heap bufffer overflow in Skia.
  * Medium CVE-2018-6072: Integer overflow in PDFium.
  * Medium CVE-2018-6073: Heap bufffer overflow in WebGL.
  * Medium CVE-2018-6074: Mark-of-the-Web bypass.
  * Medium CVE-2018-6075: Overly permissive cross origin downloads.
  * Medium CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink.
  * Medium CVE-2018-6077: Timing attack using SVG filters.
  * Medium CVE-2018-6078: URL Spoof in OmniBox.
  * Medium CVE-2018-6079: Information disclosure via texture data in WebGL.
  * Medium CVE-2018-6080: Information disclosure in IPC call.
  * Low CVE-2018-6081: XSS in interstitials.
  * Low CVE-2018-6082: Circumvention of port blocking.
  * Low CVE-2018-6083: Incorrect processing of AppManifests.
- Add new patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * mojo.patch
- Drop patches:
  * chromium-angle.patch
  * chromium-memcpy.patch
- Update constraints
- Refresh patch chromium-non-void-return.patch to include more
  fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1520596800">- Make sure to require gcc7
- Add patch chromium-drm.patch to make sure to build with Leap 42.3
  variant of libdrm</changelog>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="2018daa78188481c920dbfbc46b469eb7ea7962b9dd7812ef9906252bf9775bb" name="chromium" arch="src">
  <version epoch="0" ver="67.0.3396.99" rel="161.4"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="1c5a3ef0767a1ff45797ef0f614c65f74cf132f14f383f09481ea48ef7b49449" name="chromium" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="161.4"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="40ea51e979e831e0f2f7acdbc937aa0383fa270c4a9469820360035d4dc95070" name="chromium" arch="src">
  <version epoch="0" ver="68.0.3440.75" rel="164.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="84f2d6c955f4690e457eba4e1586c649cdb57006ed393aac44f9c13a03d6e2a3" name="chromium" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="164.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="671e81ae65df90a3ace2f6d04c0a08ab355a01093906fe719ea8e77e459ae440" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.100" rel="174.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="7581a1061a83ddef13e73cf4f9cf3784a5a0e7c0c01b231f17ccae1d4570ad26" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="174.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="07f8a49b9db4b26b5f895c56489c46056ca2b795a3a0f89f7765b101b6646149" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.81" rel="168.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="d23ea528c2e31890428e193682c63ff639c14ad210d0e069dbd7502bfab29021" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="168.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="9be783ed292fe33cb3b88df0093dfdf9b8c5edcf400fa34229a6d7fe8afbe663" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.92" rel="171.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="46803b81e57773f64244de9bacd0db4e3358c2983ddaf435a6f8b9ab88c058da" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="171.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="024118b71cd6fa478905af2dc148919a1ef3ce148672a7ba0070755d55d4a10a" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.102" rel="182.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="c88e9eea0e42ee836fc2af846e7e832aa92cda7a58cd582acd3db5c87221033f" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="182.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="0c512f06b4a392c87b57b58380910d349a58fa6542d9499a97ed5916678eba35" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.110" rel="186.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="5463969cd2d8f9e6d347639c5fb194d26e2af5c394ffdd36a3e8756ed6afcf70" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="186.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="f7d7157cee9878f5e6149c652eef1c34b7d2bad803c7ef7db70a393d6c8da363" name="chromium" arch="src">
  <version epoch="0" ver="70.0.3538.67" rel="179.1"/>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
</package>
<package pkgid="f14f231a1d4f7d9fd2b0491c8bd1e479d6ad250a0b1c94778139cbbddb860916" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="179.1"/>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
</package>
<package pkgid="bc11609652209d3333af9dad3d8fec91d775e258d9d381c7a427d5219bdffbba" name="chromium" arch="src">
  <version epoch="0" ver="71.0.3578.98" rel="189.1"/>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
</package>
<package pkgid="9d49ea6795adf8229727257c8003a3b274aa6af402ab2235fa2aaea77e258ab0" name="chromium" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="189.1"/>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
</package>
<package pkgid="bccb535e60abb666d31a8f25d7a64378f5b8a1b3100e10688aacff129ed4e6db" name="chromium" arch="src">
  <version epoch="0" ver="71.0.3578.98" rel="192.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235201">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
</package>
<package pkgid="9f265097c21fd2476d8a17bd73ec94585b2a47f99bc72b764a1212902230b048" name="chromium" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="192.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235201">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
</package>
<package pkgid="aaca428a356e2bcca21ba62bf5b71ed59082e20080e8f4fd5c0f1a82cdcbe596" name="chromium" arch="src">
  <version epoch="0" ver="72.0.3626.121" rel="202.1"/>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
</package>
<package pkgid="4b08c0b0da7ad5c92272e4ea31ef75c8343a6c8795d117d729ce3c577ab045cc" name="chromium" arch="x86_64">
  <version epoch="0" ver="72.0.3626.121" rel="202.1"/>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
</package>
<package pkgid="f748192cc92a00f7ae310bdb2ff6b5817539b50c8b7db633995ccfb19c3df5f7" name="chromium" arch="src">
  <version epoch="0" ver="72.0.3626.96" rel="197.1"/>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="c2d118f7463ad3507d805a272af05cccc2a0d1240dde16ebada70963d7a87b58" name="chromium" arch="x86_64">
  <version epoch="0" ver="72.0.3626.96" rel="197.1"/>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="ee725452aaeb67862c8dc2ca39bf330d4872de19df63b6cf175b8cd13f49fed5" name="chrony" arch="src">
  <version epoch="0" ver="2.3" rel="4.3.1"/>
  <changelog author="aj@suse.de" date="1322568000">- Update to version 1.26:
  * Added compatibility with Linux 3.0 and later
  * Fixed replying on multihomed IPv6 hosts
  * Other minor bug fixes and improvements
- Cleanup package a bit.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1357905600">-run spec-cleaner on the spec file, fix license and remove cruft</changelog>
  <changelog author="zaitor@opensuse.org" date="1373716800">- Update to version 1.27:
  + Added support for stronger authentication keys via NSS or
    libtomcrypt library.
  + Extended tracking, sources and activity reports printed by
    chronyc.
  + The daemon now waits in foreground until it is fully
    initialized.
  + Other bug fixes and improvements.
- Add mozilla-nss-devel &amp; pkg-config BuildRequires, new optional
  dependencys.</changelog>
  <changelog author="mrueckert@suse.de" date="1393243200">- Update to version 1.29.1:
  * Modify chronyc protocol to prevent amplification attacks
    (CVE-2014-0021) (incompatible with previous protocol version,
    chronyc supports both)
- Additional changes from 1.29
  * Fix crash when processing crafted commands (CVE-2012-4502)
    (possible with IP addresses allowed by cmdallow and localhost)
  * Don't send uninitialized data in SUBNETS_ACCESSED and
    CLIENT_ACCESSES replies (CVE-2012-4503) (not used by chronyc)
  * Drop support for SUBNETS_ACCESSED and CLIENT_ACCESSES commands
- Additional changes from 1.28
  * Combine sources to improve accuracy
  * Make config and command parser strict
  * Add -a option to chronyc to authenticate automatically
  * Add -R option to ignore initstepslew and makestep directives
  * Add generatecommandkey, minsamples, maxsamples and user
    directives
  * Improve compatibility with NTPv1 and NTPv2 clients
  * Create sockets only in selected family with -4/-6 option
  * Treat address bind errors as non-fatal
  * Extend tracking log
  * Accept float values as initstepslew threshold
  * Allow hostnames in offline, online and burst commands
  * Fix and improve peer polling
  * Fix crash in config parsing with too many servers
  * Fix crash with duplicated initstepslew address
  * Fix delta calculation with extreme frequency offsets
  * Set local stratum correctly
  * Remove unnecessary adjtimex calls
  * Set paths in documentation by configure
  * Update chrony.spec
- Updated chrony-config.patch:
  - lots of config values were fixed upstream already
  - key file patching is unnecessary</changelog>
  <changelog author="mrueckert@suse.de" date="1393243201">- clean up build section
  - the configure script can actually import CC/CFLAGS from the
    environment. no need to break any CFLAGS it might set in the
    configure script.
  - remove unneeded prefix from the make calls.
  - enable building the binaries with PIE/relro now</changelog>
  <changelog author="mrueckert@suse.de" date="1448539200">- update to 2.2
  see /usr/share/doc/packages/chrony/NEWS
- sync with fedora spec and add systemd support
- refreshed chrony-config.patch to apply cleanly again
- added chrony-2.2_logrotate.patch: add missing su option as we no
  longer have the daemon run as root.
- added chrony-service-helper.patch: imported from fedora with a
  changed path for moving from libexecdir to datadir
- only use syscall filters on 12.3 and newer
- move helper from libexecdir to datadir</changelog>
  <changelog author="mrueckert@suse.de" date="1448539201">- silence groupadd/useradd call and drop the shell from the user.</changelog>
  <changelog author="mrueckert@suse.de" date="1454068800">- update to 2.2.1
  Restrict authentication of NTP server/peer to specified key
  (CVE-2016-1567)</changelog>
  <changelog author="mrueckert@suse.de" date="1455796800">- update to 2.3
  - Enhancements
  - Add support for NTP and command response rate limiting
  - Add support for dropping root privileges on Mac OS X,
    FreeBSD, Solaris
  - Add require and trust options for source selection
  - Enable logchange by default (1 second threshold)
  - Set RTC on Mac OS X with rtcsync directive
  - Allow binding to NTP port after dropping root privileges on
    NetBSD
  - Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port
    is disabled
  - Resolve names in separate process when seccomp filter is
    enabled
  - Replace old records in client log when memory limit is
    reached
  - Don't reveal local time and synchronisation state in client
    packets
  - Don't keep client sockets open for longer than necessary
  - Ignore poll in KoD RATE packets as ntpd doesn't always set it
    correctly
  - Warn when using keys shorter than 80 bits
  - Add keygen command to generate random keys easily
  - Add serverstats command to report NTP and command packet
    statistics
  - Bug fixes
  - Fix clock correction after making step on Mac OS X
  - Fix building on Solaris
- refreshed patches to apply cleanly again:
  chrony-2.2_logrotate.patch
  chrony-config.patch
  chrony-service-helper.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459166400">- Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508)</changelog>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
</package>
<package pkgid="2a8a0396433330ce7b609e23f4ee4e842fbfdd7e26201e76a34c2631e253699f" name="chrony" arch="x86_64">
  <version epoch="0" ver="2.3" rel="4.3.1"/>
  <changelog author="aj@suse.de" date="1322568000">- Update to version 1.26:
  * Added compatibility with Linux 3.0 and later
  * Fixed replying on multihomed IPv6 hosts
  * Other minor bug fixes and improvements
- Cleanup package a bit.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1357905600">-run spec-cleaner on the spec file, fix license and remove cruft</changelog>
  <changelog author="zaitor@opensuse.org" date="1373716800">- Update to version 1.27:
  + Added support for stronger authentication keys via NSS or
    libtomcrypt library.
  + Extended tracking, sources and activity reports printed by
    chronyc.
  + The daemon now waits in foreground until it is fully
    initialized.
  + Other bug fixes and improvements.
- Add mozilla-nss-devel &amp; pkg-config BuildRequires, new optional
  dependencys.</changelog>
  <changelog author="mrueckert@suse.de" date="1393243200">- Update to version 1.29.1:
  * Modify chronyc protocol to prevent amplification attacks
    (CVE-2014-0021) (incompatible with previous protocol version,
    chronyc supports both)
- Additional changes from 1.29
  * Fix crash when processing crafted commands (CVE-2012-4502)
    (possible with IP addresses allowed by cmdallow and localhost)
  * Don't send uninitialized data in SUBNETS_ACCESSED and
    CLIENT_ACCESSES replies (CVE-2012-4503) (not used by chronyc)
  * Drop support for SUBNETS_ACCESSED and CLIENT_ACCESSES commands
- Additional changes from 1.28
  * Combine sources to improve accuracy
  * Make config and command parser strict
  * Add -a option to chronyc to authenticate automatically
  * Add -R option to ignore initstepslew and makestep directives
  * Add generatecommandkey, minsamples, maxsamples and user
    directives
  * Improve compatibility with NTPv1 and NTPv2 clients
  * Create sockets only in selected family with -4/-6 option
  * Treat address bind errors as non-fatal
  * Extend tracking log
  * Accept float values as initstepslew threshold
  * Allow hostnames in offline, online and burst commands
  * Fix and improve peer polling
  * Fix crash in config parsing with too many servers
  * Fix crash with duplicated initstepslew address
  * Fix delta calculation with extreme frequency offsets
  * Set local stratum correctly
  * Remove unnecessary adjtimex calls
  * Set paths in documentation by configure
  * Update chrony.spec
- Updated chrony-config.patch:
  - lots of config values were fixed upstream already
  - key file patching is unnecessary</changelog>
  <changelog author="mrueckert@suse.de" date="1393243201">- clean up build section
  - the configure script can actually import CC/CFLAGS from the
    environment. no need to break any CFLAGS it might set in the
    configure script.
  - remove unneeded prefix from the make calls.
  - enable building the binaries with PIE/relro now</changelog>
  <changelog author="mrueckert@suse.de" date="1448539200">- update to 2.2
  see /usr/share/doc/packages/chrony/NEWS
- sync with fedora spec and add systemd support
- refreshed chrony-config.patch to apply cleanly again
- added chrony-2.2_logrotate.patch: add missing su option as we no
  longer have the daemon run as root.
- added chrony-service-helper.patch: imported from fedora with a
  changed path for moving from libexecdir to datadir
- only use syscall filters on 12.3 and newer
- move helper from libexecdir to datadir</changelog>
  <changelog author="mrueckert@suse.de" date="1448539201">- silence groupadd/useradd call and drop the shell from the user.</changelog>
  <changelog author="mrueckert@suse.de" date="1454068800">- update to 2.2.1
  Restrict authentication of NTP server/peer to specified key
  (CVE-2016-1567)</changelog>
  <changelog author="mrueckert@suse.de" date="1455796800">- update to 2.3
  - Enhancements
  - Add support for NTP and command response rate limiting
  - Add support for dropping root privileges on Mac OS X,
    FreeBSD, Solaris
  - Add require and trust options for source selection
  - Enable logchange by default (1 second threshold)
  - Set RTC on Mac OS X with rtcsync directive
  - Allow binding to NTP port after dropping root privileges on
    NetBSD
  - Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port
    is disabled
  - Resolve names in separate process when seccomp filter is
    enabled
  - Replace old records in client log when memory limit is
    reached
  - Don't reveal local time and synchronisation state in client
    packets
  - Don't keep client sockets open for longer than necessary
  - Ignore poll in KoD RATE packets as ntpd doesn't always set it
    correctly
  - Warn when using keys shorter than 80 bits
  - Add keygen command to generate random keys easily
  - Add serverstats command to report NTP and command packet
    statistics
  - Bug fixes
  - Fix clock correction after making step on Mac OS X
  - Fix building on Solaris
- refreshed patches to apply cleanly again:
  chrony-2.2_logrotate.patch
  chrony-config.patch
  chrony-service-helper.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459166400">- Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508)</changelog>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
</package>
<package pkgid="66e4b01140524f9063a8433b87805f555707ff386413d3bf3bbab3b9c11839ba" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.5" rel="5.1"/>
  <changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
  <changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
  <changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
  <changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
  <changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
  <changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
  <changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
</package>
<package pkgid="4c57321ab8bdc4c0a09936f7ec9bdf4fa55f1a371927654a594c919e3fd3f734" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.5" rel="5.1"/>
  <changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
  <changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
  <changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
  <changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
  <changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
  <changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
  <changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
</package>
<package pkgid="974852192a702cc55a25baa882aa4ff698d8b542489b2579fbe1a21f446509af" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.5" rel="5.1"/>
  <changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
  <changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
  <changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
  <changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
  <changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
  <changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
  <changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
</package>
<package pkgid="38ee58bf009c8944fc3f99877139fe11a1b3aa82fab621215e7eaca46442543a" name="cinnamon" arch="src">
  <version epoch="0" ver="3.4.6" rel="2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1463054400">- Update to version 3.0.2:
  * Cache generated thumbnails.
  * Fix desktop effects on dialogs and menus.
    This prevents desktop effects on dialogs and menus from being
    used if desktop-effects is turned off. It's like already like
    this in the effects settings dialog.
  * Power applet: Fixed declaration of alias variable.
  * Window list: Fix call on null object.
  * Fix handling of device icon where GIcon is null.
  * cinnamon-settings: Don't set the stack switcher to use the main
    settings stack on creation.
    This is causing visual glitches in a lot of Gtk themes when
    changing from the main icon view to a page that displays the
    stack switcher.
  * Fix highlighting not working correctly for multiple instances
    of an applet.
  * ExtensionCore.py: Don't break when an xlet provides a bad icon
    file.
  * Add null conditional to return empty array when get_devices
    returns null.
  * Correct a potential infinite loop.
  * accessibility settings: Don't use PackageKit for now when
    looking for assistance applications that are installed.
    Just look for their binaries, and notify if not installed.
    Watch the bin folders in case the user installs the dependency
    and doesn't restart cinnamon settings.
  * cs_sound.py: Add a close button to the speaker test dialog.
  * Fix image close crash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 3.0.3:
  * Ensure label text is properly escaped before applying it with
    set_markup().
  * SettingsWidgets.py: Use a more compatible GFileMonitorFlags ?
    WATCH_MOVES is not available in glib 2.40.
  * cinnamon-settings: Include module keywords in desktop files.
  * cinnamon-app: Provide access to desktop file keywords.
    Use them in the menu applet search.
  * generated desktop files: Re-run, to remove unnecessary comment.
  * extensions: Check extensions for unsafe calls (synchronous,
    etc., things that can potentially freeze Cinnamon) and make the
    user aware of them in Cinnamon Settings.
  * ExtensionCore.py: scan_extension_thread ? if the metadata.json
    file is not found, this must be a versioned xlet, check the
    parent directory for it instead.
  * cs_power.py: Expose setting to allow lid-closed action even
    when external monitors are attached.
  * messageTray.js: Don't let notifications with buttons fade on
    mouse-over.
  * menu applet: Use application id instead of application name for
    searches prevents duplicate search results for applications
    with the same desktop entry name when searching with a more
    specific term.
  * sound applet: smplayer: Fix artist metadata display and disable
    seek. While seeking does work, after the first time you seek
    the amount seeked is incorrect. It appears to seek the amount
    between the beginning of the seek bar and where you released
    the click instead.
  * cs_themes: Add setting for dark theme variant preference.
    This is only settable from ~/.config/gtk-3.0/settings.ini, so
    add the ability to modify that as well.
  * cs_effects.py: Expose gtk-overlay-scrollbar setting.
  * cs_sound: Set selection mode to none on the SoundBox() object.
  * Settings: Don't include text/html in the source code mimetypes.
  * st-texture-cache.c: use g_themed_icon_new instead of
    g_themed_icon_new_with_default_fallbacks.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464091200">- Update to version 3.0.4:
  * Update pot file.
  * cs_effects: Only show overlay scrollbar toggle when using
    gtk3 &gt;= 3.16.
  * sound applet: Use an icon that actually exists for blank
    coverart.
  * sound-applet: Fix an icon name.
  * Ignore accents/stokes when searching the menu or
    cinnamon-settings.
  * Menu applet: Remove trailing spaces.
  * Menu applet: Don't refresh twice at the same time.
  * [Menu applet] Fix not cleared drag placeholder in favourites
    box, if an application was dragged over, but not dropped on the
    favourites box.
- Rebase cinnamon-settings-native.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464782400">- Update to version 3.0.5:
  * cinnamon-settings: Remove hard-coded theming for the main
    cinnamon-settings icon view.
  * Background settings: Apply EXIF rotations to thumbnails.
  * cinnamon-util.c: cinnamon_util_get_icon_for_uri.c ? use a
    custom icon if one is set in metadata (via file manager).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466683200">- Update to version 3.0.6:
  * Add a generic "bluetooth" icon.
  * power applet: Don't connect to any signals that call
    _devicesChanged until we have the power proxy (since the
    callbacks assume we do have it).
  * windowAttentionHandler.js: Make the ignored application check
    case- insensitive. While we're here make it a gsettings array
    for convenience.
  * org.cinnamon.gschema.in: Add pidgin to ignored wm classes.
  * Touchpad settings: Invert motion-threshold setting widget.
  * appletManager.js: Fix copy/pasting applet panel applet layouts.
    Extension.get_max_instances() needed an extra argument, and
    then we were doing work twice - finished removing obsolete code.
  * cinnamon-recorder: Fix crash when starting recorder.
  * cinnamon-recorder.c: Restore avoidance of the panel when
    drawing the recording indicators. This was removed during some
    panel work a while back and never restored. Always draw them on
    the primary monitor now (the only monitor with reliable,
    simple-to-get workarea information).
  * Fix spelling mistakes.
  * onscreen keyboard: Add option to change activation behaviour -
    accessible mode has the keyboard appear whenever focus demands
    it (ordinary accessibility behavior). On-demand mode will have
    the keyboard only appear when the user requests it via an
    applet click or keyboard shortcut.
  * Themes settings: Fix loading icon themes when a theme isn't
    readable.
  * popupMenu.js: Use the signalManager.disconnect correctly -
    the source actor (the panel actor for the applet) has to be the
    second argument, the object to disconnect from. Was causing
    flickering in the menu applet after repositioning it.
  * Settings: Don't hardcode "more info" link colour in spices
    modules.
  * [desrt] network: Properly remove connections from list.
  * Network applet: Fix icon not showing VPN status.
  * Network applet: Delete trailing spaces.
  * Network applet: Fix applet showing "Auto" wireless connection
    when turning wifi OFF and then back ON.
  * tray icons: Bump icon request to 24px, then scale back to 20px
    in the applet. This is needed due to changes to GtkIconSize
    values in Gtk3. GtkStatusIcon iterates thru the built-in icon
    sizes to pick an appropriate icon to use, and as of 3.18 there
    are no sizes between 16px and 24px.
  * Preferred application settings: Set mimetypes more exhaustively.
- Rebase cinnamon-network-user-connections.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1468584000">- Update to version 3.0.7:
  * Fix power settings segfault.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.1:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase ../cinnamon-wheel-and-sbin-path.patch,
  cinnamon-settings-native.patch,
  cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.
- Add cinnamon-fix-typelib-false-positive.patch: Avoid any false
  positives in typelib detection.
- Add cinnamon-optional-ax-macros.patch: Make AX_ macros optional
  (commit 023c17f).
- Remove requirements in cinnamon-branding-upstream that belong in
  libcinnamon-desktop-branding-upstream.
- Replace cinnamon-branding with cinnamon-gschemas-branding:
  gschemas can be installed standalone from the main cinnamon
  package yet still have to be branded.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479988800">- Update to version 3.2.2:
  * build: Make AX_ macros optional.
  * [Xlet settings] Fix for icon choosers stuck dialogues.
  * [cinnamon-json-makepot] Add support for "title" key.
  * Ensure a default icon size of 16px if the icon-size is not set
    in the indicator icon theme class.
  * [workspace-switcher] Fix buttons' size Buttons didn't get
    proper height (or width in vertical mode) if the auto-scale
    font setting was not enabled.
  * Restore the ability to theme the menu applet menu separately
    from other menus.
  * cs_effects: Disable menu animations when turning of window
    effects.
  * [applet.js] Re add ability to display a separator on applets
    context menus.
  * [applet.js] Add a mechanism to highlight applets with open
    menus.
  * [menu-applet] Fix keynav issues with TAB and right.
  * Use the Gio library for establish the file permissions in
    replace of the spawnCommandLine usage.
  * panel-launchers: Close the menu before destroying when removing
    a launcher.
  * [Xlet settings] Add a translation mechanism to xlets settings
    windows.
  * cs_backgrounds.py: Fix thumb generation on Debian Jessie.
  * [sound-applet] Remove a show percentage label for slider option.
  * theme: Fix theming of the workspace switcher.
- Rebase cinnamon-no-gksu-requirement.patch.
- Remove cinnamon-optional-ax-macros.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Use the %license macro.
- Minor spec clean-up.</changelog>
</package>
<package pkgid="0a1537576daeed830a9839c3c5f091f79407ba6a947425dc11366a047e617891" name="cinnamon" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1463054400">- Update to version 3.0.2:
  * Cache generated thumbnails.
  * Fix desktop effects on dialogs and menus.
    This prevents desktop effects on dialogs and menus from being
    used if desktop-effects is turned off. It's like already like
    this in the effects settings dialog.
  * Power applet: Fixed declaration of alias variable.
  * Window list: Fix call on null object.
  * Fix handling of device icon where GIcon is null.
  * cinnamon-settings: Don't set the stack switcher to use the main
    settings stack on creation.
    This is causing visual glitches in a lot of Gtk themes when
    changing from the main icon view to a page that displays the
    stack switcher.
  * Fix highlighting not working correctly for multiple instances
    of an applet.
  * ExtensionCore.py: Don't break when an xlet provides a bad icon
    file.
  * Add null conditional to return empty array when get_devices
    returns null.
  * Correct a potential infinite loop.
  * accessibility settings: Don't use PackageKit for now when
    looking for assistance applications that are installed.
    Just look for their binaries, and notify if not installed.
    Watch the bin folders in case the user installs the dependency
    and doesn't restart cinnamon settings.
  * cs_sound.py: Add a close button to the speaker test dialog.
  * Fix image close crash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 3.0.3:
  * Ensure label text is properly escaped before applying it with
    set_markup().
  * SettingsWidgets.py: Use a more compatible GFileMonitorFlags ?
    WATCH_MOVES is not available in glib 2.40.
  * cinnamon-settings: Include module keywords in desktop files.
  * cinnamon-app: Provide access to desktop file keywords.
    Use them in the menu applet search.
  * generated desktop files: Re-run, to remove unnecessary comment.
  * extensions: Check extensions for unsafe calls (synchronous,
    etc., things that can potentially freeze Cinnamon) and make the
    user aware of them in Cinnamon Settings.
  * ExtensionCore.py: scan_extension_thread ? if the metadata.json
    file is not found, this must be a versioned xlet, check the
    parent directory for it instead.
  * cs_power.py: Expose setting to allow lid-closed action even
    when external monitors are attached.
  * messageTray.js: Don't let notifications with buttons fade on
    mouse-over.
  * menu applet: Use application id instead of application name for
    searches prevents duplicate search results for applications
    with the same desktop entry name when searching with a more
    specific term.
  * sound applet: smplayer: Fix artist metadata display and disable
    seek. While seeking does work, after the first time you seek
    the amount seeked is incorrect. It appears to seek the amount
    between the beginning of the seek bar and where you released
    the click instead.
  * cs_themes: Add setting for dark theme variant preference.
    This is only settable from ~/.config/gtk-3.0/settings.ini, so
    add the ability to modify that as well.
  * cs_effects.py: Expose gtk-overlay-scrollbar setting.
  * cs_sound: Set selection mode to none on the SoundBox() object.
  * Settings: Don't include text/html in the source code mimetypes.
  * st-texture-cache.c: use g_themed_icon_new instead of
    g_themed_icon_new_with_default_fallbacks.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464091200">- Update to version 3.0.4:
  * Update pot file.
  * cs_effects: Only show overlay scrollbar toggle when using
    gtk3 &gt;= 3.16.
  * sound applet: Use an icon that actually exists for blank
    coverart.
  * sound-applet: Fix an icon name.
  * Ignore accents/stokes when searching the menu or
    cinnamon-settings.
  * Menu applet: Remove trailing spaces.
  * Menu applet: Don't refresh twice at the same time.
  * [Menu applet] Fix not cleared drag placeholder in favourites
    box, if an application was dragged over, but not dropped on the
    favourites box.
- Rebase cinnamon-settings-native.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464782400">- Update to version 3.0.5:
  * cinnamon-settings: Remove hard-coded theming for the main
    cinnamon-settings icon view.
  * Background settings: Apply EXIF rotations to thumbnails.
  * cinnamon-util.c: cinnamon_util_get_icon_for_uri.c ? use a
    custom icon if one is set in metadata (via file manager).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466683200">- Update to version 3.0.6:
  * Add a generic "bluetooth" icon.
  * power applet: Don't connect to any signals that call
    _devicesChanged until we have the power proxy (since the
    callbacks assume we do have it).
  * windowAttentionHandler.js: Make the ignored application check
    case- insensitive. While we're here make it a gsettings array
    for convenience.
  * org.cinnamon.gschema.in: Add pidgin to ignored wm classes.
  * Touchpad settings: Invert motion-threshold setting widget.
  * appletManager.js: Fix copy/pasting applet panel applet layouts.
    Extension.get_max_instances() needed an extra argument, and
    then we were doing work twice - finished removing obsolete code.
  * cinnamon-recorder: Fix crash when starting recorder.
  * cinnamon-recorder.c: Restore avoidance of the panel when
    drawing the recording indicators. This was removed during some
    panel work a while back and never restored. Always draw them on
    the primary monitor now (the only monitor with reliable,
    simple-to-get workarea information).
  * Fix spelling mistakes.
  * onscreen keyboard: Add option to change activation behaviour -
    accessible mode has the keyboard appear whenever focus demands
    it (ordinary accessibility behavior). On-demand mode will have
    the keyboard only appear when the user requests it via an
    applet click or keyboard shortcut.
  * Themes settings: Fix loading icon themes when a theme isn't
    readable.
  * popupMenu.js: Use the signalManager.disconnect correctly -
    the source actor (the panel actor for the applet) has to be the
    second argument, the object to disconnect from. Was causing
    flickering in the menu applet after repositioning it.
  * Settings: Don't hardcode "more info" link colour in spices
    modules.
  * [desrt] network: Properly remove connections from list.
  * Network applet: Fix icon not showing VPN status.
  * Network applet: Delete trailing spaces.
  * Network applet: Fix applet showing "Auto" wireless connection
    when turning wifi OFF and then back ON.
  * tray icons: Bump icon request to 24px, then scale back to 20px
    in the applet. This is needed due to changes to GtkIconSize
    values in Gtk3. GtkStatusIcon iterates thru the built-in icon
    sizes to pick an appropriate icon to use, and as of 3.18 there
    are no sizes between 16px and 24px.
  * Preferred application settings: Set mimetypes more exhaustively.
- Rebase cinnamon-network-user-connections.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1468584000">- Update to version 3.0.7:
  * Fix power settings segfault.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.1:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase ../cinnamon-wheel-and-sbin-path.patch,
  cinnamon-settings-native.patch,
  cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.
- Add cinnamon-fix-typelib-false-positive.patch: Avoid any false
  positives in typelib detection.
- Add cinnamon-optional-ax-macros.patch: Make AX_ macros optional
  (commit 023c17f).
- Remove requirements in cinnamon-branding-upstream that belong in
  libcinnamon-desktop-branding-upstream.
- Replace cinnamon-branding with cinnamon-gschemas-branding:
  gschemas can be installed standalone from the main cinnamon
  package yet still have to be branded.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479988800">- Update to version 3.2.2:
  * build: Make AX_ macros optional.
  * [Xlet settings] Fix for icon choosers stuck dialogues.
  * [cinnamon-json-makepot] Add support for "title" key.
  * Ensure a default icon size of 16px if the icon-size is not set
    in the indicator icon theme class.
  * [workspace-switcher] Fix buttons' size Buttons didn't get
    proper height (or width in vertical mode) if the auto-scale
    font setting was not enabled.
  * Restore the ability to theme the menu applet menu separately
    from other menus.
  * cs_effects: Disable menu animations when turning of window
    effects.
  * [applet.js] Re add ability to display a separator on applets
    context menus.
  * [applet.js] Add a mechanism to highlight applets with open
    menus.
  * [menu-applet] Fix keynav issues with TAB and right.
  * Use the Gio library for establish the file permissions in
    replace of the spawnCommandLine usage.
  * panel-launchers: Close the menu before destroying when removing
    a launcher.
  * [Xlet settings] Add a translation mechanism to xlets settings
    windows.
  * cs_backgrounds.py: Fix thumb generation on Debian Jessie.
  * [sound-applet] Remove a show percentage label for slider option.
  * theme: Fix theming of the workspace switcher.
- Rebase cinnamon-no-gksu-requirement.patch.
- Remove cinnamon-optional-ax-macros.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Use the %license macro.
- Minor spec clean-up.</changelog>
</package>
<package pkgid="4bdcecf2e99d80d6ba4519baa3e28fe9cc91afc7dc06af00dfe29008618f367e" name="cinnamon-gschemas" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1463054400">- Update to version 3.0.2:
  * Cache generated thumbnails.
  * Fix desktop effects on dialogs and menus.
    This prevents desktop effects on dialogs and menus from being
    used if desktop-effects is turned off. It's like already like
    this in the effects settings dialog.
  * Power applet: Fixed declaration of alias variable.
  * Window list: Fix call on null object.
  * Fix handling of device icon where GIcon is null.
  * cinnamon-settings: Don't set the stack switcher to use the main
    settings stack on creation.
    This is causing visual glitches in a lot of Gtk themes when
    changing from the main icon view to a page that displays the
    stack switcher.
  * Fix highlighting not working correctly for multiple instances
    of an applet.
  * ExtensionCore.py: Don't break when an xlet provides a bad icon
    file.
  * Add null conditional to return empty array when get_devices
    returns null.
  * Correct a potential infinite loop.
  * accessibility settings: Don't use PackageKit for now when
    looking for assistance applications that are installed.
    Just look for their binaries, and notify if not installed.
    Watch the bin folders in case the user installs the dependency
    and doesn't restart cinnamon settings.
  * cs_sound.py: Add a close button to the speaker test dialog.
  * Fix image close crash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 3.0.3:
  * Ensure label text is properly escaped before applying it with
    set_markup().
  * SettingsWidgets.py: Use a more compatible GFileMonitorFlags ?
    WATCH_MOVES is not available in glib 2.40.
  * cinnamon-settings: Include module keywords in desktop files.
  * cinnamon-app: Provide access to desktop file keywords.
    Use them in the menu applet search.
  * generated desktop files: Re-run, to remove unnecessary comment.
  * extensions: Check extensions for unsafe calls (synchronous,
    etc., things that can potentially freeze Cinnamon) and make the
    user aware of them in Cinnamon Settings.
  * ExtensionCore.py: scan_extension_thread ? if the metadata.json
    file is not found, this must be a versioned xlet, check the
    parent directory for it instead.
  * cs_power.py: Expose setting to allow lid-closed action even
    when external monitors are attached.
  * messageTray.js: Don't let notifications with buttons fade on
    mouse-over.
  * menu applet: Use application id instead of application name for
    searches prevents duplicate search results for applications
    with the same desktop entry name when searching with a more
    specific term.
  * sound applet: smplayer: Fix artist metadata display and disable
    seek. While seeking does work, after the first time you seek
    the amount seeked is incorrect. It appears to seek the amount
    between the beginning of the seek bar and where you released
    the click instead.
  * cs_themes: Add setting for dark theme variant preference.
    This is only settable from ~/.config/gtk-3.0/settings.ini, so
    add the ability to modify that as well.
  * cs_effects.py: Expose gtk-overlay-scrollbar setting.
  * cs_sound: Set selection mode to none on the SoundBox() object.
  * Settings: Don't include text/html in the source code mimetypes.
  * st-texture-cache.c: use g_themed_icon_new instead of
    g_themed_icon_new_with_default_fallbacks.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464091200">- Update to version 3.0.4:
  * Update pot file.
  * cs_effects: Only show overlay scrollbar toggle when using
    gtk3 &gt;= 3.16.
  * sound applet: Use an icon that actually exists for blank
    coverart.
  * sound-applet: Fix an icon name.
  * Ignore accents/stokes when searching the menu or
    cinnamon-settings.
  * Menu applet: Remove trailing spaces.
  * Menu applet: Don't refresh twice at the same time.
  * [Menu applet] Fix not cleared drag placeholder in favourites
    box, if an application was dragged over, but not dropped on the
    favourites box.
- Rebase cinnamon-settings-native.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464782400">- Update to version 3.0.5:
  * cinnamon-settings: Remove hard-coded theming for the main
    cinnamon-settings icon view.
  * Background settings: Apply EXIF rotations to thumbnails.
  * cinnamon-util.c: cinnamon_util_get_icon_for_uri.c ? use a
    custom icon if one is set in metadata (via file manager).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466683200">- Update to version 3.0.6:
  * Add a generic "bluetooth" icon.
  * power applet: Don't connect to any signals that call
    _devicesChanged until we have the power proxy (since the
    callbacks assume we do have it).
  * windowAttentionHandler.js: Make the ignored application check
    case- insensitive. While we're here make it a gsettings array
    for convenience.
  * org.cinnamon.gschema.in: Add pidgin to ignored wm classes.
  * Touchpad settings: Invert motion-threshold setting widget.
  * appletManager.js: Fix copy/pasting applet panel applet layouts.
    Extension.get_max_instances() needed an extra argument, and
    then we were doing work twice - finished removing obsolete code.
  * cinnamon-recorder: Fix crash when starting recorder.
  * cinnamon-recorder.c: Restore avoidance of the panel when
    drawing the recording indicators. This was removed during some
    panel work a while back and never restored. Always draw them on
    the primary monitor now (the only monitor with reliable,
    simple-to-get workarea information).
  * Fix spelling mistakes.
  * onscreen keyboard: Add option to change activation behaviour -
    accessible mode has the keyboard appear whenever focus demands
    it (ordinary accessibility behavior). On-demand mode will have
    the keyboard only appear when the user requests it via an
    applet click or keyboard shortcut.
  * Themes settings: Fix loading icon themes when a theme isn't
    readable.
  * popupMenu.js: Use the signalManager.disconnect correctly -
    the source actor (the panel actor for the applet) has to be the
    second argument, the object to disconnect from. Was causing
    flickering in the menu applet after repositioning it.
  * Settings: Don't hardcode "more info" link colour in spices
    modules.
  * [desrt] network: Properly remove connections from list.
  * Network applet: Fix icon not showing VPN status.
  * Network applet: Delete trailing spaces.
  * Network applet: Fix applet showing "Auto" wireless connection
    when turning wifi OFF and then back ON.
  * tray icons: Bump icon request to 24px, then scale back to 20px
    in the applet. This is needed due to changes to GtkIconSize
    values in Gtk3. GtkStatusIcon iterates thru the built-in icon
    sizes to pick an appropriate icon to use, and as of 3.18 there
    are no sizes between 16px and 24px.
  * Preferred application settings: Set mimetypes more exhaustively.
- Rebase cinnamon-network-user-connections.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1468584000">- Update to version 3.0.7:
  * Fix power settings segfault.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.1:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase ../cinnamon-wheel-and-sbin-path.patch,
  cinnamon-settings-native.patch,
  cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.
- Add cinnamon-fix-typelib-false-positive.patch: Avoid any false
  positives in typelib detection.
- Add cinnamon-optional-ax-macros.patch: Make AX_ macros optional
  (commit 023c17f).
- Remove requirements in cinnamon-branding-upstream that belong in
  libcinnamon-desktop-branding-upstream.
- Replace cinnamon-branding with cinnamon-gschemas-branding:
  gschemas can be installed standalone from the main cinnamon
  package yet still have to be branded.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479988800">- Update to version 3.2.2:
  * build: Make AX_ macros optional.
  * [Xlet settings] Fix for icon choosers stuck dialogues.
  * [cinnamon-json-makepot] Add support for "title" key.
  * Ensure a default icon size of 16px if the icon-size is not set
    in the indicator icon theme class.
  * [workspace-switcher] Fix buttons' size Buttons didn't get
    proper height (or width in vertical mode) if the auto-scale
    font setting was not enabled.
  * Restore the ability to theme the menu applet menu separately
    from other menus.
  * cs_effects: Disable menu animations when turning of window
    effects.
  * [applet.js] Re add ability to display a separator on applets
    context menus.
  * [applet.js] Add a mechanism to highlight applets with open
    menus.
  * [menu-applet] Fix keynav issues with TAB and right.
  * Use the Gio library for establish the file permissions in
    replace of the spawnCommandLine usage.
  * panel-launchers: Close the menu before destroying when removing
    a launcher.
  * [Xlet settings] Add a translation mechanism to xlets settings
    windows.
  * cs_backgrounds.py: Fix thumb generation on Debian Jessie.
  * [sound-applet] Remove a show percentage label for slider option.
  * theme: Fix theming of the workspace switcher.
- Rebase cinnamon-no-gksu-requirement.patch.
- Remove cinnamon-optional-ax-macros.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Use the %license macro.
- Minor spec clean-up.</changelog>
</package>
<package pkgid="c37d4d72b3372937d4cd243d84769bfdcbe502f9a784f42de9a4d6f86487d3d4" name="cinnamon-gschemas-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.4.6" rel="2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1463054400">- Update to version 3.0.2:
  * Cache generated thumbnails.
  * Fix desktop effects on dialogs and menus.
    This prevents desktop effects on dialogs and menus from being
    used if desktop-effects is turned off. It's like already like
    this in the effects settings dialog.
  * Power applet: Fixed declaration of alias variable.
  * Window list: Fix call on null object.
  * Fix handling of device icon where GIcon is null.
  * cinnamon-settings: Don't set the stack switcher to use the main
    settings stack on creation.
    This is causing visual glitches in a lot of Gtk themes when
    changing from the main icon view to a page that displays the
    stack switcher.
  * Fix highlighting not working correctly for multiple instances
    of an applet.
  * ExtensionCore.py: Don't break when an xlet provides a bad icon
    file.
  * Add null conditional to return empty array when get_devices
    returns null.
  * Correct a potential infinite loop.
  * accessibility settings: Don't use PackageKit for now when
    looking for assistance applications that are installed.
    Just look for their binaries, and notify if not installed.
    Watch the bin folders in case the user installs the dependency
    and doesn't restart cinnamon settings.
  * cs_sound.py: Add a close button to the speaker test dialog.
  * Fix image close crash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 3.0.3:
  * Ensure label text is properly escaped before applying it with
    set_markup().
  * SettingsWidgets.py: Use a more compatible GFileMonitorFlags ?
    WATCH_MOVES is not available in glib 2.40.
  * cinnamon-settings: Include module keywords in desktop files.
  * cinnamon-app: Provide access to desktop file keywords.
    Use them in the menu applet search.
  * generated desktop files: Re-run, to remove unnecessary comment.
  * extensions: Check extensions for unsafe calls (synchronous,
    etc., things that can potentially freeze Cinnamon) and make the
    user aware of them in Cinnamon Settings.
  * ExtensionCore.py: scan_extension_thread ? if the metadata.json
    file is not found, this must be a versioned xlet, check the
    parent directory for it instead.
  * cs_power.py: Expose setting to allow lid-closed action even
    when external monitors are attached.
  * messageTray.js: Don't let notifications with buttons fade on
    mouse-over.
  * menu applet: Use application id instead of application name for
    searches prevents duplicate search results for applications
    with the same desktop entry name when searching with a more
    specific term.
  * sound applet: smplayer: Fix artist metadata display and disable
    seek. While seeking does work, after the first time you seek
    the amount seeked is incorrect. It appears to seek the amount
    between the beginning of the seek bar and where you released
    the click instead.
  * cs_themes: Add setting for dark theme variant preference.
    This is only settable from ~/.config/gtk-3.0/settings.ini, so
    add the ability to modify that as well.
  * cs_effects.py: Expose gtk-overlay-scrollbar setting.
  * cs_sound: Set selection mode to none on the SoundBox() object.
  * Settings: Don't include text/html in the source code mimetypes.
  * st-texture-cache.c: use g_themed_icon_new instead of
    g_themed_icon_new_with_default_fallbacks.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464091200">- Update to version 3.0.4:
  * Update pot file.
  * cs_effects: Only show overlay scrollbar toggle when using
    gtk3 &gt;= 3.16.
  * sound applet: Use an icon that actually exists for blank
    coverart.
  * sound-applet: Fix an icon name.
  * Ignore accents/stokes when searching the menu or
    cinnamon-settings.
  * Menu applet: Remove trailing spaces.
  * Menu applet: Don't refresh twice at the same time.
  * [Menu applet] Fix not cleared drag placeholder in favourites
    box, if an application was dragged over, but not dropped on the
    favourites box.
- Rebase cinnamon-settings-native.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464782400">- Update to version 3.0.5:
  * cinnamon-settings: Remove hard-coded theming for the main
    cinnamon-settings icon view.
  * Background settings: Apply EXIF rotations to thumbnails.
  * cinnamon-util.c: cinnamon_util_get_icon_for_uri.c ? use a
    custom icon if one is set in metadata (via file manager).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466683200">- Update to version 3.0.6:
  * Add a generic "bluetooth" icon.
  * power applet: Don't connect to any signals that call
    _devicesChanged until we have the power proxy (since the
    callbacks assume we do have it).
  * windowAttentionHandler.js: Make the ignored application check
    case- insensitive. While we're here make it a gsettings array
    for convenience.
  * org.cinnamon.gschema.in: Add pidgin to ignored wm classes.
  * Touchpad settings: Invert motion-threshold setting widget.
  * appletManager.js: Fix copy/pasting applet panel applet layouts.
    Extension.get_max_instances() needed an extra argument, and
    then we were doing work twice - finished removing obsolete code.
  * cinnamon-recorder: Fix crash when starting recorder.
  * cinnamon-recorder.c: Restore avoidance of the panel when
    drawing the recording indicators. This was removed during some
    panel work a while back and never restored. Always draw them on
    the primary monitor now (the only monitor with reliable,
    simple-to-get workarea information).
  * Fix spelling mistakes.
  * onscreen keyboard: Add option to change activation behaviour -
    accessible mode has the keyboard appear whenever focus demands
    it (ordinary accessibility behavior). On-demand mode will have
    the keyboard only appear when the user requests it via an
    applet click or keyboard shortcut.
  * Themes settings: Fix loading icon themes when a theme isn't
    readable.
  * popupMenu.js: Use the signalManager.disconnect correctly -
    the source actor (the panel actor for the applet) has to be the
    second argument, the object to disconnect from. Was causing
    flickering in the menu applet after repositioning it.
  * Settings: Don't hardcode "more info" link colour in spices
    modules.
  * [desrt] network: Properly remove connections from list.
  * Network applet: Fix icon not showing VPN status.
  * Network applet: Delete trailing spaces.
  * Network applet: Fix applet showing "Auto" wireless connection
    when turning wifi OFF and then back ON.
  * tray icons: Bump icon request to 24px, then scale back to 20px
    in the applet. This is needed due to changes to GtkIconSize
    values in Gtk3. GtkStatusIcon iterates thru the built-in icon
    sizes to pick an appropriate icon to use, and as of 3.18 there
    are no sizes between 16px and 24px.
  * Preferred application settings: Set mimetypes more exhaustively.
- Rebase cinnamon-network-user-connections.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1468584000">- Update to version 3.0.7:
  * Fix power settings segfault.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.1:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase ../cinnamon-wheel-and-sbin-path.patch,
  cinnamon-settings-native.patch,
  cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.
- Add cinnamon-fix-typelib-false-positive.patch: Avoid any false
  positives in typelib detection.
- Add cinnamon-optional-ax-macros.patch: Make AX_ macros optional
  (commit 023c17f).
- Remove requirements in cinnamon-branding-upstream that belong in
  libcinnamon-desktop-branding-upstream.
- Replace cinnamon-branding with cinnamon-gschemas-branding:
  gschemas can be installed standalone from the main cinnamon
  package yet still have to be branded.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479988800">- Update to version 3.2.2:
  * build: Make AX_ macros optional.
  * [Xlet settings] Fix for icon choosers stuck dialogues.
  * [cinnamon-json-makepot] Add support for "title" key.
  * Ensure a default icon size of 16px if the icon-size is not set
    in the indicator icon theme class.
  * [workspace-switcher] Fix buttons' size Buttons didn't get
    proper height (or width in vertical mode) if the auto-scale
    font setting was not enabled.
  * Restore the ability to theme the menu applet menu separately
    from other menus.
  * cs_effects: Disable menu animations when turning of window
    effects.
  * [applet.js] Re add ability to display a separator on applets
    context menus.
  * [applet.js] Add a mechanism to highlight applets with open
    menus.
  * [menu-applet] Fix keynav issues with TAB and right.
  * Use the Gio library for establish the file permissions in
    replace of the spawnCommandLine usage.
  * panel-launchers: Close the menu before destroying when removing
    a launcher.
  * [Xlet settings] Add a translation mechanism to xlets settings
    windows.
  * cs_backgrounds.py: Fix thumb generation on Debian Jessie.
  * [sound-applet] Remove a show percentage label for slider option.
  * theme: Fix theming of the workspace switcher.
- Rebase cinnamon-no-gksu-requirement.patch.
- Remove cinnamon-optional-ax-macros.patch: fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Use the %license macro.
- Minor spec clean-up.</changelog>
</package>
<package pkgid="a1bb1da0524547aac71672934af64112b30903c427031b66eb295eededfc8ce0" name="clamav" arch="src">
  <version epoch="0" ver="0.100.0" rel="26.1"/>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
</package>
<package pkgid="eccdcd7be649ad009777f9e62c886b7286aeb3664f790225eb4387a69ee39319" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.0" rel="26.1"/>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
</package>
<package pkgid="8c41695468bb6a272b59261b9206872fe2d138e18976cfc76c5fc4449fbe262d" name="clamav" arch="src">
  <version epoch="0" ver="0.100.1" rel="29.1"/>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
  <changelog author="security@suse.com" date="1531828800">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="ad3802e0d27abf4e7f797bd8fb010a39eb9ad52113e692d59688b854d53313f4" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="29.1"/>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
  <changelog author="security@suse.com" date="1531828800">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="35e7914f829cb76d91a24ae64370c9ba3992e7ebf465591b08b032903113902e" name="clamav" arch="src">
  <version epoch="0" ver="0.100.2" rel="32.1"/>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
  <changelog author="security@suse.com" date="1531828800">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="max@suse.com" date="1535544000">- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048</changelog>
</package>
<package pkgid="c194579e08f328a9c1b93dd5ed418df91ca21b3ac5b52f08f5f75df2dfa4d10b" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="32.1"/>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
  <changelog author="max@suse.com" date="1525348800">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).</changelog>
  <changelog author="security@suse.com" date="1531828800">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="max@suse.com" date="1535544000">- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048</changelog>
</package>
<package pkgid="f3d9d154b2710e7af55328d0070da72203cafc737b2ecb8203ba666715636ee7" name="clamav" arch="src">
  <version epoch="0" ver="0.99.3" rel="20.1"/>
  <changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
  <changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
</package>
<package pkgid="99293a426af843dd76e25603bc04e87f65b8d5645a2b683a65b89b52f55819f1" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.99.3" rel="20.1"/>
  <changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
  <changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
</package>
<package pkgid="54b821a699e3e8b255c58ae8966489585113db760c8935043837db48486866f7" name="clamav" arch="src">
  <version epoch="0" ver="0.99.4" rel="23.1"/>
  <changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
</package>
<package pkgid="1dd5f655c2a39be38700e7e6d0ad05a93b0eda3290e751c3bb3308e17ddb36ba" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.99.4" rel="23.1"/>
  <changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
  <changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
  <changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
  <changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
  <changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
  <changelog author="max@suse.com" date="1416830400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files
    (bnc#906770, CVE-2014-9050)
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
  <changelog author="max@suse.com" date="1418644800">- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193).</changelog>
  <changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.</changelog>
  <changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
  <changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
  <changelog author="max@suse.com" date="1449144000">- Update to version 0.99 (bsc#957728)
  * Processing of YARA rules(some limitations- see
    signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See
    signatures.pdf for full details.
  * New and improved on-access scanning for Linux. See the recent
    blog post and clamdoc.pdf for details on the new on-access
    capabilities.
  * A new ClamAV API callback function that is invoked when a
    virus is found. This is intended primarily for applications
    running in all-match mode. Any applications using all-match
    mode must use the new callback function to record and report
    detected viruses.
  * Configurable default password list to attempt zip file
    decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML
    files.
  * A new sigtool option(--ascii-normalize) allowing signature
    authors to more easily generate normalized versions of ascii
    files.</changelog>
  <changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
  <changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="max@suse.com" date="1498219200">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Update clamav.keyring.</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- update upstream keys in the keyring</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706 (bsc#1045315)
  * CVE-2017-6419 (bsc#1052449)
  * CVE-2017-11423 (bsc#1049423)
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202 (bsc#1083915)
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch
  * clamav-sles9.patch</changelog>
</package>
<package pkgid="e2622db721785b2724f58214c741854cb12323817d2dcac191d1cf7a39caa36e" name="clang4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.3"/>
  <changelog author="msrb@suse.com" date="1504094400">- Use LLVM_BUILD_LLVM_DYLIB instead of BUILD_SHARED_LIBS to build
  single libLLVM library. This is the recommended way. The old way
  was causing various issues.
  * llvm-split-static-library-exports-into-their-own-export-file.diff
  * clang-split-static-library-exports-into-their-own-export-file.diff
  (bnc#1049703)
- Add lld, linker for Clang/LLVM
  (sr#517692)
- Include clang++-MAJOR.MINOR symbolic link
  (bnc#1012260)
- Remove unnecessary dependency on flex and bison.
- Make sure all binaries are managed by update-alternatives
- Add llvm-add_a_LLVM_USE_LINKER.patch and link using gold to
  prevent memory exhaustion on some build machines.
- Reduce debuginfo on x86 architecture. LLVM libraries are so big that they
  exhaust all memory on 32 bit machine if linked with full debuginfo.
- Speed up build by skipping parts that are not required in stage1.
- Build lldb in-tree as one of the llvm tools.</changelog>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
</package>
<package pkgid="ee7a36ac0040dd95fd526029a6ad199e6a30efb0fcc45c9ffd9a8a5ef531ae4a" name="clang4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="5.1"/>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
</package>
<package pkgid="319a21ef000b669e3b5c73c25eef5cd11297dd167efc4bccc2c87cfd786fc346" name="clang4-checker" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.3"/>
  <changelog author="msrb@suse.com" date="1504094400">- Use LLVM_BUILD_LLVM_DYLIB instead of BUILD_SHARED_LIBS to build
  single libLLVM library. This is the recommended way. The old way
  was causing various issues.
  * llvm-split-static-library-exports-into-their-own-export-file.diff
  * clang-split-static-library-exports-into-their-own-export-file.diff
  (bnc#1049703)
- Add lld, linker for Clang/LLVM
  (sr#517692)
- Include clang++-MAJOR.MINOR symbolic link
  (bnc#1012260)
- Remove unnecessary dependency on flex and bison.
- Make sure all binaries are managed by update-alternatives
- Add llvm-add_a_LLVM_USE_LINKER.patch and link using gold to
  prevent memory exhaustion on some build machines.
- Reduce debuginfo on x86 architecture. LLVM libraries are so big that they
  exhaust all memory on 32 bit machine if linked with full debuginfo.
- Speed up build by skipping parts that are not required in stage1.
- Build lldb in-tree as one of the llvm tools.</changelog>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
</package>
<package pkgid="15b9b73035895ed27bd4f36251841795c09b1c03aa9fbc4f70f0fedd4e90fa05" name="clang4-checker" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="5.1"/>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
</package>
<package pkgid="8da451773f8fee82e9b90e8761b78ff532a6ae10d2072e0cb3e40bc9ca824233" name="clang4-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.3"/>
  <changelog author="msrb@suse.com" date="1504094400">- Use LLVM_BUILD_LLVM_DYLIB instead of BUILD_SHARED_LIBS to build
  single libLLVM library. This is the recommended way. The old way
  was causing various issues.
  * llvm-split-static-library-exports-into-their-own-export-file.diff
  * clang-split-static-library-exports-into-their-own-export-file.diff
  (bnc#1049703)
- Add lld, linker for Clang/LLVM
  (sr#517692)
- Include clang++-MAJOR.MINOR symbolic link
  (bnc#1012260)
- Remove unnecessary dependency on flex and bison.
- Make sure all binaries are managed by update-alternatives
- Add llvm-add_a_LLVM_USE_LINKER.patch and link using gold to
  prevent memory exhaustion on some build machines.
- Reduce debuginfo on x86 architecture. LLVM libraries are so big that they
  exhaust all memory on 32 bit machine if linked with full debuginfo.
- Speed up build by skipping parts that are not required in stage1.
- Build lldb in-tree as one of the llvm tools.</changelog>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
</package>
<package pkgid="edd2f537f196c5a541aa14256c7a5968590148bcfafa011ecc337097dfec1f06" name="clang4-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="5.1"/>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
</package>
<package pkgid="c2b0d5560360e3a6cd31b4abbf2282dab9a2b040a482608264c86cf27b6d1085" name="clang4-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.3"/>
  <changelog author="msrb@suse.com" date="1504094400">- Use LLVM_BUILD_LLVM_DYLIB instead of BUILD_SHARED_LIBS to build
  single libLLVM library. This is the recommended way. The old way
  was causing various issues.
  * llvm-split-static-library-exports-into-their-own-export-file.diff
  * clang-split-static-library-exports-into-their-own-export-file.diff
  (bnc#1049703)
- Add lld, linker for Clang/LLVM
  (sr#517692)
- Include clang++-MAJOR.MINOR symbolic link
  (bnc#1012260)
- Remove unnecessary dependency on flex and bison.
- Make sure all binaries are managed by update-alternatives
- Add llvm-add_a_LLVM_USE_LINKER.patch and link using gold to
  prevent memory exhaustion on some build machines.
- Reduce debuginfo on x86 architecture. LLVM libraries are so big that they
  exhaust all memory on 32 bit machine if linked with full debuginfo.
- Speed up build by skipping parts that are not required in stage1.
- Build lldb in-tree as one of the llvm tools.</changelog>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
</package>
<package pkgid="b2e9d57d1b520afc10e8b5a0783a2277aa8ce913384dcc826a905420749169f4" name="clang4-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="5.1"/>
  <changelog author="msrb@suse.com" date="1507636800">- Drop llvm4-devel-static. llvm4-devel contains shared library with
  the same content.</changelog>
  <changelog author="msrb@suse.com" date="1507896000">- Disable all thread related tests in libcxx. Many of them use
  timeouts to detect failure. They can fail randomly if the machine
  is under heavy load (happens often in OBS).</changelog>
  <changelog author="msrb@suse.com" date="1508241600">- llvm-normally-versioned-libllvm.patch
  * Change libLLVM naming scheme to match our naming guidelines.
  * The reasons for the original naming scheme are no longer valid,
    more details in the patch.</changelog>
  <changelog author="msrb@suse.com" date="1509105600">- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1511265600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.</changelog>
  <changelog author="msrb@suse.com" date="1512129600">- Switch to python3.
  * clang-add-python-3-support-to-clang-cindex.patch
  * clang-bindings-allow-null-strings-in-python-3.patch</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Fix %check tests when used with python3.
  * llvm-lit-Make-util.executeCommand-python3-friendly.patch
  * llvm-lit-Re-apply-Fix-some-convoluted-logic-around-Unicod.patch
  * libcxx-fix-python3-syntax-error.patch
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm4-devel,
  clang4-devel-static and lldb4-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb4 so it can work with llvm
  meta package.</changelog>
  <changelog author="dmueller@suse.com" date="1515499200">- disable debuginfo for arm as well</changelog>
  <changelog author="msrb@suse.com" date="1515585600">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1520942400">- libcxx.glibc2.27.diff
  * Fix build with glibc &gt;= 2.27. Various locales in glibc 2.27
    started using narrow non-break space for thousand separators.
    libc++ tests must be adapted.</changelog>
  <changelog author="msrb@suse.com" date="1521028800">- Remove liblldb4 and lldb4-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1525262400">- Add appropriate Conflicts to make the package acceptable to Leap
  42.3. It is required as rust/Firefox dependency. (bnc#1091551)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
</package>
<package pkgid="1f6335fe21157fc523e8e57528717e5012db84e644283a96b52898999cfc953a" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.8" rel="31.1"/>
  <changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
  <changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
  <changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
  <changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
  <changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
  <changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
  <changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
  <changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
  <changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
  <changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
  <changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
  <changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
</package>
<package pkgid="31b73797f007ca2765d08f9f0b38d44d85bfa8dabb6470990967ee42ab3843f2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="31.1"/>
  <changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
  <changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
  <changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
  <changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
  <changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
  <changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
  <changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
  <changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
  <changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
  <changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
  <changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
  <changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
</package>
<package pkgid="c588e0c1e43618738e8edb925a7ed223016975b8ef6071155a66667c80855d69" name="cloud-init" arch="src">
  <version epoch="0" ver="17.1" rel="34.2"/>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dmueller@suse.com" date="1488196800">- add cloud-init-net-sysconfig-lp1665441.patch (lp#1665441)</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- On Tumbleweed we need net-tools-deprecated to setup the network</changelog>
  <changelog author="rjschwei@suse.com" date="1503748800">- Modify cloud-init-finalbeforelogin.patch (bsc#1047363)
  + Support user processes running in coud-init-final to consume a
    large number of threads.
- Modify cloud-init-service.patch (bsc#1055649)
  + Start after dbus.service, needed by hotnamectl
- Modify cloud-init-handle-not-implemented-query.patch
  + print needs () for Python3
- Add cloud-init-spceandtabs-clean.patch
  + Fix inconsistent use of spaces and tabs in various files
- Modify suseIntegratedHandler.patch
  + Fix mode setting passed to function for file writing
- Set packag up to build with Python 3 for distros later than SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Drop python-cheetah as requirement
  + Cheetah is no maintained and cloud-init switches to Jinja2 as
    templating engine if Cheetah is not available
- Drop argparse as dependency for Py3 build
  + argparse is built into Python</changelog>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
</package>
<package pkgid="39d129588bcc34e685b030eea511d61a645e5ab6a1296665edb45d69fcb00c59" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="17.1" rel="34.2"/>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dmueller@suse.com" date="1488196800">- add cloud-init-net-sysconfig-lp1665441.patch (lp#1665441)</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- On Tumbleweed we need net-tools-deprecated to setup the network</changelog>
  <changelog author="rjschwei@suse.com" date="1503748800">- Modify cloud-init-finalbeforelogin.patch (bsc#1047363)
  + Support user processes running in coud-init-final to consume a
    large number of threads.
- Modify cloud-init-service.patch (bsc#1055649)
  + Start after dbus.service, needed by hotnamectl
- Modify cloud-init-handle-not-implemented-query.patch
  + print needs () for Python3
- Add cloud-init-spceandtabs-clean.patch
  + Fix inconsistent use of spaces and tabs in various files
- Modify suseIntegratedHandler.patch
  + Fix mode setting passed to function for file writing
- Set packag up to build with Python 3 for distros later than SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Drop python-cheetah as requirement
  + Cheetah is no maintained and cloud-init switches to Jinja2 as
    templating engine if Cheetah is not available
- Drop argparse as dependency for Py3 build
  + argparse is built into Python</changelog>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
</package>
<package pkgid="834872e3f8cf443a813086e34d743ca895285b66f620e323b370f328887c69ef" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="37.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="043a166b74ce6daf1242590616d7b647bebac172030814b71e98ea8e1efe0380" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="37.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="c2c5d2fa5925341928d3ac84dfcbb1f14a591551bb59b6f1d255976e6d683606" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="31.1"/>
  <changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
  <changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
  <changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
  <changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
  <changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
  <changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
  <changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
  <changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
  <changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
  <changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
  <changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
  <changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
</package>
<package pkgid="e7d06720e9e678f835c73d3ddc39516066800e01cb6c49480fba64bbab0860c5" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="17.1" rel="34.2"/>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dmueller@suse.com" date="1488196800">- add cloud-init-net-sysconfig-lp1665441.patch (lp#1665441)</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- On Tumbleweed we need net-tools-deprecated to setup the network</changelog>
  <changelog author="rjschwei@suse.com" date="1503748800">- Modify cloud-init-finalbeforelogin.patch (bsc#1047363)
  + Support user processes running in coud-init-final to consume a
    large number of threads.
- Modify cloud-init-service.patch (bsc#1055649)
  + Start after dbus.service, needed by hotnamectl
- Modify cloud-init-handle-not-implemented-query.patch
  + print needs () for Python3
- Add cloud-init-spceandtabs-clean.patch
  + Fix inconsistent use of spaces and tabs in various files
- Modify suseIntegratedHandler.patch
  + Fix mode setting passed to function for file writing
- Set packag up to build with Python 3 for distros later than SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Drop python-cheetah as requirement
  + Cheetah is no maintained and cloud-init switches to Jinja2 as
    templating engine if Cheetah is not available
- Drop argparse as dependency for Py3 build
  + argparse is built into Python</changelog>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
</package>
<package pkgid="3e4410df95269f2ffaced9952a40eb515d89f1e0d5e867bf96fe635ee7dd5782" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="37.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="c1dedd6fd4789e59be64a607016cd64613a14570a8223ac0a0f8d7144d56643b" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="31.1"/>
  <changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
  <changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
  <changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
  <changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
  <changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
  <changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
  <changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
  <changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
  <changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
  <changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
  <changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
  <changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
</package>
<package pkgid="ba53469d6a5f3a444f47052e2adf893098782c5830aa329f2a1f5618db91ec69" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="17.1" rel="34.2"/>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
  <changelog author="dmueller@suse.com" date="1488196800">- add cloud-init-net-sysconfig-lp1665441.patch (lp#1665441)</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- On Tumbleweed we need net-tools-deprecated to setup the network</changelog>
  <changelog author="rjschwei@suse.com" date="1503748800">- Modify cloud-init-finalbeforelogin.patch (bsc#1047363)
  + Support user processes running in coud-init-final to consume a
    large number of threads.
- Modify cloud-init-service.patch (bsc#1055649)
  + Start after dbus.service, needed by hotnamectl
- Modify cloud-init-handle-not-implemented-query.patch
  + print needs () for Python3
- Add cloud-init-spceandtabs-clean.patch
  + Fix inconsistent use of spaces and tabs in various files
- Modify suseIntegratedHandler.patch
  + Fix mode setting passed to function for file writing
- Set packag up to build with Python 3 for distros later than SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Drop python-cheetah as requirement
  + Cheetah is no maintained and cloud-init switches to Jinja2 as
    templating engine if Cheetah is not available
- Drop argparse as dependency for Py3 build
  + argparse is built into Python</changelog>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
</package>
<package pkgid="b0df66c6cf9d59ad16643e8b331b9002697dcb2ad2e1d25c460ccf645ea23d47" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="37.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="3b75f793027245191b6c5bd44a40c8cb6eadf2bbfd43da2d886a27b1d83cf126" name="cloud-init-test" arch="x86_64">
  <version epoch="0" ver="0.7.8" rel="31.1"/>
  <changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
  <changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
  <changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
  <changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
  <changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
  <changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
  <changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
  <changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
  <changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
  <changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
  <changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
  <changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
  <changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
  <changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
  <changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
  <changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>
</package>
<package pkgid="e88f7a8aadf679321a611ec7a572ba9149cae4138d5b18f11f886692576a69d0" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.6" rel="4.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
</package>
<package pkgid="23698a9b9e3407e9e3b72edea784f443067fc00c7d84b21163be3962ee5ae17f" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="0.6" rel="4.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
</package>
<package pkgid="a07a5d23cfc8e326902040bae7a6c84c0dd4046402726a3950b6c4069a7d953f" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.7" rel="10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527595200">- Update to version 0.7:
  + no persistent names in Azure (bsc#1094271)</changelog>
</package>
<package pkgid="b844fe5b6416a957bfda8df45256a7e5cd196efb7b089c5c2a44ddeb690b82a7" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="0.7" rel="10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527595200">- Update to version 0.7:
  + no persistent names in Azure (bsc#1094271)</changelog>
</package>
<package pkgid="d9ed82799b1f518afc6b3b51b96f79d57b70b42c22829a17f27ae78e158f0eba" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.6" rel="4.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
</package>
<package pkgid="799b09a5861c8502280004ba44240d0430b64e62799ad3c196d7ee300f5cd55c" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="0.6" rel="4.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
</package>
<package pkgid="8e96d14a5c9c737d97cad74a1e2d05794404ba69df518410bb8e3ce3cd8bea03" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.7" rel="10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527595200">- Update to version 0.7:
  + no persistent names in Azure (bsc#1094271)</changelog>
</package>
<package pkgid="5f0e20323d765097823fd6c032f3763e27d4a278d0b73ec3ae7076becc67745a" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="0.7" rel="10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527595200">- Update to version 0.7:
  + no persistent names in Azure (bsc#1094271)</changelog>
</package>
<package pkgid="a95859b4ec8c47c52ba45acf06cca42c00a13bdda550c8ab35971ddd6f07b0b0" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1485976882.03d61cd" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1412942400">- high: hb_report: Collect logs from journald (boo#900654)
- Add patch: 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix using hb_report script with non-bash shells
- add patches:
  + cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1421841600">- undo: fix using hb_report script with non-bash shells due to
  bad logic
  * removed cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="coolo@suse.com" date="1424260800">- buildrequire the systemd macros before using them - and all
  the package wants is the macro anyway, so no need to buildrequire
  systemd libraries</changelog>
  <changelog author="rguenther@suse.com" date="1424779200">- Add cluster-glue-gcc5.patch to fix gazillions of -Wformat=2 warnings
  about signed/unsigned format vs. argument mismatches GCC 5 now emits.
  Fixes build with GCC 5.</changelog>
  <changelog author="kgronlund@suse.com" date="1431345600">- Low: stonith: external/ec2: update name in the short description
- High: stonith: external/ec2: new agent for aws/ec2
- Medium: hb_report: use faster zypper interface if available
- Medium: stonith: external/vcenter: replace experimental smartmatch (bnc#900353)
- Medium: ha_logd: prevent race caused by pid reuse (bsc#894272)
- fix syslogmsgfmt logging inconsistency for stderr/stdout
- Medium: clplumbing: don't abort on bad input
- upstream cs: 9da0680bc9c0</changelog>
  <changelog author="kgronlund@suse.com" date="1439553600">- high: hb_report: Prefer pacemaker.log if it exists (bsc#941681)
- Add 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440590400">- high: hb_report: Always prefer syslog if available (bsc#942906)
- low: hb_report: Increase time to wait for the logmark
- low: hb_report: Collect libqb version (bsc#943327)
- Add 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Add 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Add 0005-low-hb_report-collect-libqb-version-bsc-943327.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1443182400">- Dev: stonith: external/ec2: Be able to omit the "port" option. (bsc#947026) (fate#319008)
- Add 0006-ec2-instance-tag-bsc-947026.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1444996800">- Update to 1.0.12+hg2815
  + Medium: stonith: external/ec2: use target's uname as default for port (bsc#947026)
- Replace hb_report with script which calls crm report (bsc#950182) (bsc#950483)
- Remove 0006-ec2-instance-tag-bsc-947026.patch
- Remove 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch
- Remove 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch
- Remove 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Remove 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Remove 0005-low-hb_report-collect-libqb-version-bsc-943327.patch
- Remove bnc662816_cluster-glue_hb_report_abspath.patch
- Move libglue-devel to group Development/Libraries/C and C++
- Upstream cs: a10cd7cc13f5</changelog>
  <changelog author="kgronlund@suse.com" date="1454587200">- Update to 1.0.12+hg2816
  + Medium: stonith: external/libvirt: fix handling of hosts with uppercase letters in names
- upstream cs: 56f40ec5d37e</changelog>
  <changelog author="kgronlund@suse.com" date="1464004800">- Update to 1.0.12+hg2818
  + Fix addresses of FSF, point to gnu.org/licenses instead
- Fix build with GCC 6
  + Add remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * bug-1050908_cluster-glue-stonith-external-vcenter-RESETPOWERON=0.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Add bsc1059171-Enforce-en_US.UTF-8.patch</changelog>
</package>
<package pkgid="f8fd6e2aea17ad5c79e94d24b42df2f62c6e2b16fb96a924aded4c76186e05f0" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1485976882.03d61cd" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1412942400">- high: hb_report: Collect logs from journald (boo#900654)
- Add patch: 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix using hb_report script with non-bash shells
- add patches:
  + cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1421841600">- undo: fix using hb_report script with non-bash shells due to
  bad logic
  * removed cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="coolo@suse.com" date="1424260800">- buildrequire the systemd macros before using them - and all
  the package wants is the macro anyway, so no need to buildrequire
  systemd libraries</changelog>
  <changelog author="rguenther@suse.com" date="1424779200">- Add cluster-glue-gcc5.patch to fix gazillions of -Wformat=2 warnings
  about signed/unsigned format vs. argument mismatches GCC 5 now emits.
  Fixes build with GCC 5.</changelog>
  <changelog author="kgronlund@suse.com" date="1431345600">- Low: stonith: external/ec2: update name in the short description
- High: stonith: external/ec2: new agent for aws/ec2
- Medium: hb_report: use faster zypper interface if available
- Medium: stonith: external/vcenter: replace experimental smartmatch (bnc#900353)
- Medium: ha_logd: prevent race caused by pid reuse (bsc#894272)
- fix syslogmsgfmt logging inconsistency for stderr/stdout
- Medium: clplumbing: don't abort on bad input
- upstream cs: 9da0680bc9c0</changelog>
  <changelog author="kgronlund@suse.com" date="1439553600">- high: hb_report: Prefer pacemaker.log if it exists (bsc#941681)
- Add 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440590400">- high: hb_report: Always prefer syslog if available (bsc#942906)
- low: hb_report: Increase time to wait for the logmark
- low: hb_report: Collect libqb version (bsc#943327)
- Add 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Add 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Add 0005-low-hb_report-collect-libqb-version-bsc-943327.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1443182400">- Dev: stonith: external/ec2: Be able to omit the "port" option. (bsc#947026) (fate#319008)
- Add 0006-ec2-instance-tag-bsc-947026.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1444996800">- Update to 1.0.12+hg2815
  + Medium: stonith: external/ec2: use target's uname as default for port (bsc#947026)
- Replace hb_report with script which calls crm report (bsc#950182) (bsc#950483)
- Remove 0006-ec2-instance-tag-bsc-947026.patch
- Remove 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch
- Remove 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch
- Remove 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Remove 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Remove 0005-low-hb_report-collect-libqb-version-bsc-943327.patch
- Remove bnc662816_cluster-glue_hb_report_abspath.patch
- Move libglue-devel to group Development/Libraries/C and C++
- Upstream cs: a10cd7cc13f5</changelog>
  <changelog author="kgronlund@suse.com" date="1454587200">- Update to 1.0.12+hg2816
  + Medium: stonith: external/libvirt: fix handling of hosts with uppercase letters in names
- upstream cs: 56f40ec5d37e</changelog>
  <changelog author="kgronlund@suse.com" date="1464004800">- Update to 1.0.12+hg2818
  + Fix addresses of FSF, point to gnu.org/licenses instead
- Fix build with GCC 6
  + Add remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * bug-1050908_cluster-glue-stonith-external-vcenter-RESETPOWERON=0.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Add bsc1059171-Enforce-en_US.UTF-8.patch</changelog>
</package>
<package pkgid="bfb1fe6e82e90d96be9ec973b9d792e80803afe21562ecf0bb48c45049d5bd73" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1485976882.03d61cd" rel="2.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix using hb_report script with non-bash shells
- add patches:
  + cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1421841600">- undo: fix using hb_report script with non-bash shells due to
  bad logic
  * removed cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="coolo@suse.com" date="1424260800">- buildrequire the systemd macros before using them - and all
  the package wants is the macro anyway, so no need to buildrequire
  systemd libraries</changelog>
  <changelog author="rguenther@suse.com" date="1424779200">- Add cluster-glue-gcc5.patch to fix gazillions of -Wformat=2 warnings
  about signed/unsigned format vs. argument mismatches GCC 5 now emits.
  Fixes build with GCC 5.</changelog>
  <changelog author="kgronlund@suse.com" date="1431345600">- Low: stonith: external/ec2: update name in the short description
- High: stonith: external/ec2: new agent for aws/ec2
- Medium: hb_report: use faster zypper interface if available
- Medium: stonith: external/vcenter: replace experimental smartmatch (bnc#900353)
- Medium: ha_logd: prevent race caused by pid reuse (bsc#894272)
- fix syslogmsgfmt logging inconsistency for stderr/stdout
- Medium: clplumbing: don't abort on bad input
- upstream cs: 9da0680bc9c0</changelog>
  <changelog author="kgronlund@suse.com" date="1439553600">- high: hb_report: Prefer pacemaker.log if it exists (bsc#941681)
- Add 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440590400">- high: hb_report: Always prefer syslog if available (bsc#942906)
- low: hb_report: Increase time to wait for the logmark
- low: hb_report: Collect libqb version (bsc#943327)
- Add 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Add 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Add 0005-low-hb_report-collect-libqb-version-bsc-943327.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1443182400">- Dev: stonith: external/ec2: Be able to omit the "port" option. (bsc#947026) (fate#319008)
- Add 0006-ec2-instance-tag-bsc-947026.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1444996800">- Update to 1.0.12+hg2815
  + Medium: stonith: external/ec2: use target's uname as default for port (bsc#947026)
- Replace hb_report with script which calls crm report (bsc#950182) (bsc#950483)
- Remove 0006-ec2-instance-tag-bsc-947026.patch
- Remove 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch
- Remove 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch
- Remove 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Remove 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Remove 0005-low-hb_report-collect-libqb-version-bsc-943327.patch
- Remove bnc662816_cluster-glue_hb_report_abspath.patch
- Move libglue-devel to group Development/Libraries/C and C++
- Upstream cs: a10cd7cc13f5</changelog>
  <changelog author="kgronlund@suse.com" date="1454587200">- Update to 1.0.12+hg2816
  + Medium: stonith: external/libvirt: fix handling of hosts with uppercase letters in names
- upstream cs: 56f40ec5d37e</changelog>
  <changelog author="kgronlund@suse.com" date="1464004800">- Update to 1.0.12+hg2818
  + Fix addresses of FSF, point to gnu.org/licenses instead
- Fix build with GCC 6
  + Add remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * bug-1050908_cluster-glue-stonith-external-vcenter-RESETPOWERON=0.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Add bsc1059171-Enforce-en_US.UTF-8.patch</changelog>
  <changelog author="ygao@suse.com" date="1532606400">- High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
  * bsc-1088656-Dev-external-ec2-Clean-up-whitespace.patch
  * bsc-1088656-High-external-ec2-Avoid-unicode-errors-and-improve-p.patch
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="ygao@suse.com" date="1532606401">- Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
  * bsc-1098758-Fix-stonith-ibmhmc-Add-managedsyspat-and-password-as.patch</changelog>
</package>
<package pkgid="bf78b20d0e08528084c47f402e2edc2e043af3c2cb7b5b027a3f7c5e02d3d067" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1485976882.03d61cd" rel="2.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix using hb_report script with non-bash shells
- add patches:
  + cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1421841600">- undo: fix using hb_report script with non-bash shells due to
  bad logic
  * removed cluster-glue-fix-bashisms.patch</changelog>
  <changelog author="coolo@suse.com" date="1424260800">- buildrequire the systemd macros before using them - and all
  the package wants is the macro anyway, so no need to buildrequire
  systemd libraries</changelog>
  <changelog author="rguenther@suse.com" date="1424779200">- Add cluster-glue-gcc5.patch to fix gazillions of -Wformat=2 warnings
  about signed/unsigned format vs. argument mismatches GCC 5 now emits.
  Fixes build with GCC 5.</changelog>
  <changelog author="kgronlund@suse.com" date="1431345600">- Low: stonith: external/ec2: update name in the short description
- High: stonith: external/ec2: new agent for aws/ec2
- Medium: hb_report: use faster zypper interface if available
- Medium: stonith: external/vcenter: replace experimental smartmatch (bnc#900353)
- Medium: ha_logd: prevent race caused by pid reuse (bsc#894272)
- fix syslogmsgfmt logging inconsistency for stderr/stdout
- Medium: clplumbing: don't abort on bad input
- upstream cs: 9da0680bc9c0</changelog>
  <changelog author="kgronlund@suse.com" date="1439553600">- high: hb_report: Prefer pacemaker.log if it exists (bsc#941681)
- Add 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440590400">- high: hb_report: Always prefer syslog if available (bsc#942906)
- low: hb_report: Increase time to wait for the logmark
- low: hb_report: Collect libqb version (bsc#943327)
- Add 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Add 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Add 0005-low-hb_report-collect-libqb-version-bsc-943327.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1443182400">- Dev: stonith: external/ec2: Be able to omit the "port" option. (bsc#947026) (fate#319008)
- Add 0006-ec2-instance-tag-bsc-947026.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1444996800">- Update to 1.0.12+hg2815
  + Medium: stonith: external/ec2: use target's uname as default for port (bsc#947026)
- Replace hb_report with script which calls crm report (bsc#950182) (bsc#950483)
- Remove 0006-ec2-instance-tag-bsc-947026.patch
- Remove 0001-high-hb_report-Collect-logs-from-journald-boo-900654.patch
- Remove 0002-high-hb_report-Prefer-pacemaker.log-if-it-exists-bsc.patch
- Remove 0003-high-hb_report-Always-prefer-syslog-if-available-bsc.patch
- Remove 0004-low-hb_report-increase-time-to-wait-for-the-logmark.patch
- Remove 0005-low-hb_report-collect-libqb-version-bsc-943327.patch
- Remove bnc662816_cluster-glue_hb_report_abspath.patch
- Move libglue-devel to group Development/Libraries/C and C++
- Upstream cs: a10cd7cc13f5</changelog>
  <changelog author="kgronlund@suse.com" date="1454587200">- Update to 1.0.12+hg2816
  + Medium: stonith: external/libvirt: fix handling of hosts with uppercase letters in names
- upstream cs: 56f40ec5d37e</changelog>
  <changelog author="kgronlund@suse.com" date="1464004800">- Update to 1.0.12+hg2818
  + Fix addresses of FSF, point to gnu.org/licenses instead
- Fix build with GCC 6
  + Add remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * bug-1050908_cluster-glue-stonith-external-vcenter-RESETPOWERON=0.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Add bsc1059171-Enforce-en_US.UTF-8.patch</changelog>
  <changelog author="ygao@suse.com" date="1532606400">- High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
  * bsc-1088656-Dev-external-ec2-Clean-up-whitespace.patch
  * bsc-1088656-High-external-ec2-Avoid-unicode-errors-and-improve-p.patch
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="ygao@suse.com" date="1532606401">- Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
  * bsc-1098758-Fix-stonith-ibmhmc-Add-managedsyspat-and-password-as.patch</changelog>
</package>
<package pkgid="72659681e00d6681f8ed4f5d1d36dc39e01c01469f51135378b2f41979dfd634" name="clustershell" arch="noarch">
  <version epoch="0" ver="1.8" rel="2.1"/>
  <changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
  <changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
  <changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
  <changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
  <changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
  <changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
  <changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
  <changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
  <changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
  <changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
  <changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>
</package>
<package pkgid="74d70dc7f528cd22a0a0134bc9357bac3ca6c3cb70085e69e5ee03a58cba2ef2" name="clustershell" arch="src">
  <version epoch="0" ver="1.8" rel="2.1"/>
  <changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
  <changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
  <changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
  <changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
  <changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
  <changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
  <changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
  <changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
  <changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
  <changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
  <changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
  <changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>
</package>
<package pkgid="0f1f8732b7a2fda40a07d7d5e069aa686feb636293b24b160463c8be77bb8837" name="cobbler" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="11.1"/>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
</package>
<package pkgid="09b5730ff64677ff0f7b99c1854196e6abaa83fd33000761861483953d4e8da5" name="cobbler" arch="src">
  <version epoch="0" ver="2.6.6" rel="11.1"/>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
</package>
<package pkgid="d28ae090d717e746d68f88e27fd9cb2ad2779f3fa496473a421a0a739a96d4da" name="cobbler" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="14.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)</changelog>
</package>
<package pkgid="591abad83fa986cffd2c915022256945d991426428813c7dccba2c46c9bd9dc6" name="cobbler" arch="src">
  <version epoch="0" ver="2.6.6" rel="14.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)</changelog>
</package>
<package pkgid="2a0787e27e0e9c86a6f7c4d8c69cf9ce7e645811dd3b56323a733ea6991d0e32" name="cobbler" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="17.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
</package>
<package pkgid="d61d0c04734fc9f5e30290184068fb829df40083bd57a554a00d3b4a5603f9db" name="cobbler" arch="src">
  <version epoch="0" ver="2.6.6" rel="17.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
</package>
<package pkgid="bcc7a70cf3c64653cfe5742d8f682b70084007ffc299ed0f9d07f096997ae81e" name="cobbler" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="20.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
  <changelog author="mantel@suse.de" date="1542628800">- fix service restart after logrotate for cobblerd (bsc#1113747)
- rotate cobbler logs at higher frequency to prevent disk fillup
  (bsc#1113747)</changelog>
</package>
<package pkgid="80b5657b04dbc252a61c344ee91306d6003af2d184758ea2bb77a78772697c23" name="cobbler" arch="src">
  <version epoch="0" ver="2.6.6" rel="20.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
  <changelog author="mantel@suse.de" date="1542628800">- fix service restart after logrotate for cobblerd (bsc#1113747)
- rotate cobbler logs at higher frequency to prevent disk fillup
  (bsc#1113747)</changelog>
</package>
<package pkgid="8cbe07cf0a871ef09d641fae909f9ef7c4e220593af7a632316ac11ada8c1084" name="cobbler" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="8.2"/>
  <changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
  <changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
</package>
<package pkgid="180bd35e031c885df4d79c31c693a935c2fc5934a577b414cbb6d858523c1c40" name="cobbler" arch="src">
  <version epoch="0" ver="2.6.6" rel="8.2"/>
  <changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
  <changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
</package>
<package pkgid="c6b5c6b1d27200ddfd02aeb1f70db0cf559613f80b80f74c0242e61db22a34be" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="11.1"/>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
</package>
<package pkgid="e9b45a1c6b67671dc42409a4e7f78b401628a423b15489ed61fb7639b0c2c7ea" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="14.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)</changelog>
</package>
<package pkgid="8cfdfca150c993b8690c72ae664a85ff4ebf7c298d284bacb50460079411286a" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="17.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
</package>
<package pkgid="695ea318e822c9b75fef321618a249433e1192b2e1856dbf38e320caec0db6ae" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="20.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
  <changelog author="mantel@suse.de" date="1542628800">- fix service restart after logrotate for cobblerd (bsc#1113747)
- rotate cobbler logs at higher frequency to prevent disk fillup
  (bsc#1113747)</changelog>
</package>
<package pkgid="7621291f97d16f07108bd922c99eeda459cb04967f0f3bc9030b50da1cdd7af1" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="8.2"/>
  <changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
  <changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
</package>
<package pkgid="c37d53afd6bb4ddcbd1fce3edf4c26d1ef15212e4f222f825e0b42595fcff11c" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="11.1"/>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
</package>
<package pkgid="8e3d7f378d4dd1c98afd137cf1c3a1108dad532d3643b64a63f41889588721b7" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="14.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)</changelog>
</package>
<package pkgid="abe5ee75f1c21d5786a914475a9b660feb9243b9d507e08218ff2a0c762f31a1" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="17.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
</package>
<package pkgid="fcec55b29c57c530fdf3b0a3fe31c6f4d00038406dbc9f3ef0050db074b98248" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="20.1"/>
  <changelog author="mantel@suse.de" date="1489579200">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
  <changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
  <changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>
  <changelog author="mantel@suse.de" date="1512043200">- require tftp(server) instead of atftp</changelog>
  <changelog author="mantel@suse.de" date="1512043201">- build server wants explicite package in BuildRequires; use tftp
- Fix koan shebang
- Add:
  * fix-usr-bin-env-bash-koan.diff</changelog>
  <changelog author="mantel@suse.de" date="1512475200">- cleanup: cobbler is noarch, so arch specific requires do not make
  sense</changelog>
  <changelog author="mantel@suse.de" date="1520942400">- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use
  this one for checking also
- Add:
  * sles15.patch</changelog>
  <changelog author="mc@suse.de" date="1524225600">- add sles15 distro profile (bsc#1090205)
- Add:
  * add-sles15-distro.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1524744000">- Escape shell parameters provided by the user for the
  reposync action (CVE-2017-1000469) (bsc#1074594)
- Added:
  * escape-shell-parameters-provided-by-user-on-reposync.patch</changelog>
  <changelog author="mantel@suse.de" date="1525780800">- detect if there is already another instance of "cobbler sync"
  running and exit with failure if so (bsc#1081714)
- Add:
  * detect-parallel-cobbler-sync.patch</changelog>
  <changelog author="mantel@suse.de" date="1526472000">- fix signature for SLES15 (bsc#1075014)
- Updated:
  * add-sles15-distro.patch</changelog>
  <changelog author="mantel@suse.de" date="1530014400">- do not try to hardlink to a symlink. The result will be a
  dangling symlink in the general case (bsc#1097733)
- Added:
  * cobbler-symlink.diff</changelog>
  <changelog author="mc@suse.com" date="1532692800">- fix kernel options when generating bootiso (bsc#1101670)
- Added:
  * cobbler-buildiso-list-to-string.patch
- Refreshed:
  * cobbler-symlink.diff</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1533902400">- Forbid exposure of private methods in the API (CVE-2018-10931)
  (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)
- Check access token when calling 'modify_setting' API endpoint
  (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)
- Added:
  * check-access-token-when-calling-modify_setting-api-e.patch
  * cve-2018-10931-forbid-exposure-of-private-methods-in.patch</changelog>
  <changelog author="mantel@suse.de" date="1542628800">- fix service restart after logrotate for cobblerd (bsc#1113747)
- rotate cobbler logs at higher frequency to prevent disk fillup
  (bsc#1113747)</changelog>
</package>
<package pkgid="f1b3b6f084cf21453e95d62d06696ecd77a8698b10e61ed84c4d1e389656346f" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="8.2"/>
  <changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
  <changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
  <changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
  <changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
  <changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
  <changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
  <changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
  <changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
  <changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
  <changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
  <changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
  <changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
  <changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
  <changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
  <changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
  <changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
</package>
<package pkgid="ded7a0616259a72d9dcf95a6699b87226c2091d52c09c09f45b2214565179ebf" name="codec2" arch="src">
  <version epoch="0" ver="0.6" rel="2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="ad21cedbf13c5bc56fa32a0504e67ffdacdf2f3ddec04b3c5500342aea3d0033" name="codec2" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="7c0bce51ec4157fab7b411cfc840e4b4efb93efa073956b83ba0212a9a0ae28c" name="codec2-devel" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="26995bf510e0215e7c77d59939359e3fea78dfca52239d1fea423871dd27f030" name="codec2-examples" arch="noarch">
  <version epoch="0" ver="0.6" rel="2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="21b0a40e84149bfe0f42deb2026ad815ac2f0e6d368c36ce7c1bc658490512c6" name="colcmp" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
  <changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>
</package>
<package pkgid="c8bfaa50ea2e8b9893bc18868138bf64733c610cf4840587a2960b3212d94aa8" name="collectl" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="7.3.1"/>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="abd46e6be8406f99f4d9e7717862e5cec7b427cdc2e2fb23b6055d5655185c07" name="collectl" arch="src">
  <version epoch="0" ver="4.0.2" rel="7.3.1"/>
  <changelog author="hvogel@suse.de" date="1215086400">- Initial package, Version 2.6.4</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="bfabe88c9006f3194c85cf06dc5815bb4fd83181a820f4fddf928906989152e4" name="command-not-found" arch="noarch">
  <version epoch="0" ver="0.1.1+20180103.0595254" rel="6.1"/>
  <changelog author="prusnak@suse.cz" date="1237809600">- command-not-found:
  * create cnf as symlink to command-not-found
  * print info line before the search</changelog>
  <changelog author="prusnak@suse.cz" date="1250596800">- don't advise to use sudo when running as root
- fix manpages in packages
- fixed typos in cnf manpage
- escape the term before creating regexp
- suppress KeyboardInterrupt traceback after Ctrl+C
- refine text messages
- modify the search term before query</changelog>
  <changelog author="prusnak@suse.cz" date="1252497600">- print message when inside midnight commander, don't just quit</changelog>
  <changelog author="prusnak@suse.cz" date="1253880000">- added translations to scout:
    da es fi fr hu it ja km ko nl pl pt_BR ru uk zh_TW
- added translations to c-n-f:
    da es fi fr gl hu it ja km ko nl pl pt_BR ru uk wa zh_TW</changelog>
  <changelog author="prusnak@suse.cz" date="1268654400">- update repositories list</changelog>
  <changelog author="prusnak@suse.cz" date="1272456000">- also check the file name, not only the package name while testing
  whether the package is installed
- add TEXTDOMAINDIR
- fix localization of one msg</changelog>
  <changelog author="prusnak@opensuse.org" date="1275480000">- update translations</changelog>
  <changelog author="ke@suse.de" date="1333627200">- scout.spec: minor cleanup.</changelog>
  <changelog author="mls@suse.de" date="1393848000">- port from libsatsolver to libsolv [fate#316955]
- fix bnc#714558: support utf-8 chars in solvable names</changelog>
  <changelog author="mls@suse.de" date="1397131200">- adapt to Dataiterator changes in libsolv-0.6.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1443182400">- Update to version 0.1.0+20150925:
  + Update translations based on https://svn.opensuse.org/svn/opensuse-i18n/trunk/lcn/ - REV 92845
    (boo#906691).
- Change to source service (disabled), checking out from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1445601600">- Update to version 0.1.0+20151023:
  + adapt to Dataiterator changes in libsolv-0.6.0 (boo#951977)
  + Updated translations.</changelog>
  <changelog author="tchvatal@suse.com" date="1464609600">- Cleanup a bit to have the spec readable and point to proper url</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1464609601">- Update to version 0.1.0+20160523.472154b:
  * Translated using Weblate (German)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Norwegian Nynorsk)
  * Translated using Weblate (German)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (French)
  * Translated using Weblate (Korean)
  * Translated using Weblate (Swedish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498737600">- Update to version 0.1.1+20170629.b80f023:
  * update translations using Weblate (Swedish, Chinese, French, Greek, Polish,
    Indonesian, Persian, Italian, Bulgarian, Lithuanian, Danish, Spanish)
  * zsh: avoid cnf being triggered on every false result
  * zsh: improve handler hooking
  * zsh: expect command to be quoted
  * zsh: define function with two names
  * detect if we have no repos configured (bsc#1037101)
  * call zypper refresh when solv file missing (bsc#1037101)
  * Version 0.1.1</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498824000">- Update to version 0.1.1+20170630.f55550e:
  * drop outdated DBs</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1514980800">- Update to version 0.1.1+20180103.0595254:
  * allow for multiple repos to be in one .repo file
  * Parse repo files for repo name (boo#980393)
  * Updated translations (Spanish, Norwegian Nynorsk)</changelog>
</package>
<package pkgid="ecc4073fe227621697f112b2c8bf3ab5b540480f690614ab723b577222388558" name="compat-openssl098" arch="src">
  <version epoch="0" ver="0.9.8j" rel="21.2"/>
  <changelog author="vcizek@suse.com" date="1423051200">- fix a memory leak in ssl_lib.c (CVE-2009-5146) (bnc#915976)
  * added openssl-CVE-2009-5146.patch</changelog>
  <changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0292 (bnc#922501)
  - Base64 decode
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0292.patch
  openssl-CVE-2015-0293.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429185600">- add ECC ciphersuites to DEFAULT (bnc#879179)
  * modified openssl-enable-ecdh.patch</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
  <changelog author="vcizek@suse.com" date="1434369600">- disable EXPORT ciphers by default (bnc#931698, comment #3)
  * added openssl-disable_EXPORT_ciphers_by_default.patch</changelog>
  <changelog author="vcizek@suse.com" date="1434369601">- remove libopenssl0_9_8-hmac from baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
  <changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
  <changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
  <changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
  <changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
  <changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
  <changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
  <changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
  <changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
</package>
<package pkgid="ee311544c5f0d137fa855cd53e19d52962a9323711966a327e829a059b72c786" name="compat-openssl098" arch="src">
  <version epoch="0" ver="0.9.8j" rel="24.1"/>
  <changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
  <changelog author="vcizek@suse.com" date="1434369600">- disable EXPORT ciphers by default (bnc#931698, comment #3)
  * added openssl-disable_EXPORT_ciphers_by_default.patch</changelog>
  <changelog author="vcizek@suse.com" date="1434369601">- remove libopenssl0_9_8-hmac from baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
  <changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
  <changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
  <changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
  <changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
  <changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
  <changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
  <changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
  <changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
- add openssl-CVE-2018-0739.patch</changelog>
  <changelog author="vcizek@suse.com" date="1533816000">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
    (bsc#1089039)
  - add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534161600">- OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  - add openssl-CVE-2018-0732.patch
  * blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  - add openssl-add-blinding-to-ecdsa.patch and
    openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="17095566b0a339f9cd24f7ee31d0eb0474f126d8fb0f12cc8defdb5b88a2fe37" name="compat-openssl098" arch="src">
  <version epoch="0" ver="0.9.8j" rel="27.1"/>
  <changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
  <changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
  <changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
  <changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
  <changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
  <changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
  <changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
  <changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
  <changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
  <changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
- add openssl-CVE-2018-0739.patch</changelog>
  <changelog author="vcizek@suse.com" date="1533816000">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
    (bsc#1089039)
  - add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534161600">- OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  - add openssl-CVE-2018-0732.patch
  * blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  - add 0001-Add-blinding-to-a-DSA-signature.patch and
    0001-Add-blinding-to-an-ECDSA-signature.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch
  * 0001-DSA-Address-a-timing-side-channel-whereby-it-is-possible.patch
  * 0002-ECDSA-Address-a-timing-side-channel-whereby-it-is-possible.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542196800">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543406400">- Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)
  * modify openssl-CVE-2016-8610.patch</changelog>
</package>
<package pkgid="aa26d5a40a296779109d2a831e27db5c955e4d7978bb817c720400fc4567c654" name="conky" arch="src">
  <version epoch="0" ver="1.10.6" rel="12.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
  <changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
  <changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
  <changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
  <changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
  <changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
  <changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
  <changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
  <changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
  <changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
  <changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
  <changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>
</package>
<package pkgid="48f2c9ed8afc6b2d335264170de65627198b0f57a2bbd50bd29f712c8b2f201b" name="conky" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="12.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
  <changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
  <changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
  <changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
  <changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
  <changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
  <changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
  <changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
  <changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
  <changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
  <changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
  <changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>
</package>
<package pkgid="a3fdd2277d10d5d6e74db47f3c729beea2b6a9f682a039d8519e081c63ba5023" name="conky-doc" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="12.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
  <changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
  <changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
  <changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
  <changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
  <changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
  <changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
  <changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
  <changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
  <changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
  <changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
  <changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>
</package>
<package pkgid="c6989480efc1e16af79f06366c7191d24e9d69593bebe1ee5ef9ff22e3f5f11f" name="containerd" arch="src">
  <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
</package>
<package pkgid="a4723ba96f4c51b85fa2c50a119ec8d6b22b49b35e1de9e71d1c43c00abcf272" name="containerd" arch="x86_64">
  <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
</package>
<package pkgid="6cd907d100989707a9d2b6be23de69fca2844b2a62a410cc2d3e30bf85507780" name="containerd" arch="src">
  <version epoch="0" ver="0.2.9+gitr706_06b9cb351610" rel="16.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="63f134ea110b7919bd7bb2211b47c2515a569887ab8f47942d60b63e8d1ad5ec" name="containerd" arch="x86_64">
  <version epoch="0" ver="0.2.9+gitr706_06b9cb351610" rel="16.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="2a424a08a058be0e1fb4fa0888bf833f9410414220bda51aca70971751240817" name="containerd" arch="src">
  <version epoch="0" ver="1.1.2" rel="19.2"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="6cad4309c0bcb562d1495e96f14657863845bb3e1d9bdee3291d940e8b88459a" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="19.2"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="f2ad5164e58bcf040f567f6891e810e50c9e1e50c3f7a26c1e3b746a58b4eb43" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
</package>
<package pkgid="3df97bc2e2b7024aa3ffc882a074c48d6526fdf1d6e10dcfe7fb91c1ad69cb12" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="0.2.9+gitr706_06b9cb351610" rel="16.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="86ffb123c2b2da1c5bdda6d3c291da816978c407b22cd08f4f2ffc474e58c07a" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="19.2"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="9a5670888febba965bd0929d57f20190a14b84e278a2803444eca566281a3964" name="containerd-test" arch="noarch">
  <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
</package>
<package pkgid="f23d9957763b6c2a67eed2da610ae61bfe438754a68d22edf7332996d2df19c4" name="containerd-test" arch="noarch">
  <version epoch="0" ver="0.2.9+gitr706_06b9cb351610" rel="16.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1479988800">- fix runc version
  fix bsc#1009961</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="6512465a3a6189643c8d898460675a29bd0b82d388079c8f758b4dfb0d000d6d" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="19.2"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="ff41e2558d15d223939ed0d34c77a00c4659883385225afab7956d67f32a66f5" name="coolkey" arch="src">
  <version epoch="0" ver="1.1.0" rel="156.1"/>
  <changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
  <changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
</package>
<package pkgid="398adc2b5fdb6fbd1f2fac0dceb3747a67f1a1fa5d3e599dc77f76d9c34f0133" name="coolkey" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="156.1"/>
  <changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
  <changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
</package>
<package pkgid="440aa3d7d19e4ec95a1b03cc339b785f9b5b87e7611e646a701bda5205f8c08d" name="coolkey-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="156.1"/>
  <changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
  <changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
</package>
<package pkgid="ba365e459f5490a4e11116c3fd839d0e1f4ffa89883e00a0ced818ba41009323" name="coolkey-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="156.1"/>
  <changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
  <changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
</package>
<package pkgid="7e2a95b436aad130fb8716b1726bcce48a2305c5dc7c7f305e094e6d05336f68" name="coreutils" arch="src">
  <version epoch="0" ver="8.25" rel="5.1"/>
  <changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
  <changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
  <changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
  <changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
  <changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
  <changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
  <changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
  <changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
  <changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
  <changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
  <changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
  <changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>
</package>
<package pkgid="81d837ac64404bf5b41228e09de411c1837ec0ed201be6f2dd783129415d4c1b" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.25" rel="5.1"/>
  <changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
  <changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
  <changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
  <changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
  <changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
  <changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
  <changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
  <changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
  <changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
  <changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
  <changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
  <changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>
</package>
<package pkgid="ea9b1a693e5ea69c3bd7b52cc02f34835b95514111a4a7fbf5eecdc4922b5da5" name="coreutils-lang" arch="noarch">
  <version epoch="0" ver="8.25" rel="5.1"/>
  <changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
  <changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
  <changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
  <changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
  <changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
  <changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
  <changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
  <changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
  <changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
  <changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
  <changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
  <changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>
</package>
<package pkgid="b6fe0889bf555e6ec1d1ce2a053633e84553fc540cf80342c7d45f893048077d" name="coreutils-testsuite" arch="src">
  <version epoch="0" ver="8.25" rel="5.1"/>
  <changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
  <changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
  <changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
  <changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
  <changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
  <changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
  <changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
  <changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
  <changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
  <changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
  <changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
  <changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>
</package>
<package pkgid="2f64dfd1910e972bc344fe3d8e6dd4814df263b7633cc111c86324d2e7c59868" name="coreutils-testsuite" arch="x86_64">
  <version epoch="0" ver="8.25" rel="5.1"/>
  <changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
  <changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
  <changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
  <changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
  <changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
  <changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
  <changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
  <changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
  <changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
  <changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
  <changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
  <changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>
</package>
<package pkgid="7a501f72705e82ad4e6667bada497b0c2ef5330ae9371d01e34dd95eae8975c0" name="corosync" arch="src">
  <version epoch="0" ver="2.3.6" rel="10.1"/>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0008-do-not-convert-empty-uid-gid-to-0.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle12/sle15(bsc#1083561)
    The configuration files are different from SLE11 and SLE12/SLE15, this patch will
    remove uncompitable contents.
    Added: 0009-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523880000">- VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto:authenticate_nss_2_3() (bsc#1089346)
    Added: 0010-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
</package>
<package pkgid="70f99442cd5b53f1b40044c1ef53460fd5a9abd2f342f9edf5b2b5d459753aae" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="10.1"/>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0008-do-not-convert-empty-uid-gid-to-0.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle12/sle15(bsc#1083561)
    The configuration files are different from SLE11 and SLE12/SLE15, this patch will
    remove uncompitable contents.
    Added: 0009-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523880000">- VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto:authenticate_nss_2_3() (bsc#1089346)
    Added: 0010-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
</package>
<package pkgid="5ee8b260fc5cb9565f9630427639da7b9c32cf4105a40436a61f41324cd67a49" name="corosync" arch="src">
  <version epoch="0" ver="2.3.6" rel="7.1"/>
  <changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
  <changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
  <changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
</package>
<package pkgid="34bedf9411dee97557d2aa61153b75b3770a26489d638b8e7aea1391029775d8" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="7.1"/>
  <changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
  <changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
  <changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
</package>
<package pkgid="cd63e2dab2c51984cccad8d83f960f9aa40b8c6f103e55bd64c6493999855a72" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="10.1"/>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
  <changelog author="bliu@suse.com" date="1509969600">- coroparse: uidgid with empty uid or gid results into add uid 0(bsc#1066585)
    Added: 0008-do-not-convert-empty-uid-gid-to-0.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle12/sle15(bsc#1083561)
    The configuration files are different from SLE11 and SLE12/SLE15, this patch will
    remove uncompitable contents.
    Added: 0009-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523880000">- VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto:authenticate_nss_2_3() (bsc#1089346)
    Added: 0010-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
</package>
<package pkgid="f47630243dfbd90a9b155802d9000a77e67a3e5c571bb4d022de5f130dc18702" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="7.1"/>
  <changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
  <changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
  <changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
  <changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
  <changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
  <changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
  <changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
  <changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
  <changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
  <changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
  <changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
  <changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
  <changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
  <changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
  <changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
  <changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
  <changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
  <changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>
</package>
<package pkgid="b62e792ff528282248f29d8cf0ce42ccb76c724c8afd78d108c910ca36a543ea" name="cpio" arch="src">
  <version epoch="0" ver="2.11" rel="38.3.1"/>
  <changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
  <changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
  <changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
  <changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
  <changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
  <changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
  <changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch
- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add cpio-2.11-always_use_32bit_crc.patch to always use 32 bit CRC
  and to prevent checksum errors for files greater than 32MB
  [bsc#1020108]
- add cpio-2.11-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.11-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="kstreitova@suse.com" date="1518696000">- drop cpio-dir_perm.patch that is no longer needed since cpio 2.11
  and it caused troubles [bsc#1076810], [bsc#889138]</changelog>
</package>
<package pkgid="5db357fc5b5520bb1293701eba1ad4704a0541dab192b356a810dbf29180b49e" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.11" rel="38.3.1"/>
  <changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
  <changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
  <changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
  <changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
  <changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
  <changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
  <changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch
- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add cpio-2.11-always_use_32bit_crc.patch to always use 32 bit CRC
  and to prevent checksum errors for files greater than 32MB
  [bsc#1020108]
- add cpio-2.11-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.11-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="kstreitova@suse.com" date="1518696000">- drop cpio-dir_perm.patch that is no longer needed since cpio 2.11
  and it caused troubles [bsc#1076810], [bsc#889138]</changelog>
</package>
<package pkgid="94f36e74d1fe1c7dfe8b39911a2677ef6f4c2242a9aa9a5f49712adbc476d5cf" name="cpio-lang" arch="noarch">
  <version epoch="0" ver="2.11" rel="38.3.1"/>
  <changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
  <changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
  <changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
  <changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
  <changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
  <changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
  <changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch
- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1485518400">- add cpio-2.11-always_use_32bit_crc.patch to always use 32 bit CRC
  and to prevent checksum errors for files greater than 32MB
  [bsc#1020108]
- add cpio-2.11-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.11-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="kstreitova@suse.com" date="1518696000">- drop cpio-dir_perm.patch that is no longer needed since cpio 2.11
  and it caused troubles [bsc#1076810], [bsc#889138]</changelog>
</package>
<package pkgid="87d9f57d89e1debda78d88a8104f612d3a87356021a3fa6559155b64844b1c20" name="cpp48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b231616b143353ba712d5f449619552ea12e98b1b56f7a951efb2be36e36960f" name="cpp48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="9aa4b1bf33be605598f3dd0c7844353071869a9d0ee7d4a09f9fe56bb165e100" name="cpp48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="b8fae1e1a081872802cd077a0baa9c1d1f80ba28c74e54faa0b9226cb6b8b2bd" name="cpp48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="bdcc76a4f062b0b442b64acead15ec64f66ed265645c27ab73d090bc2ae4f5ff" name="cpp48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="932de931a6577b3799bdf1b0fd8eb3f73b184f4fe7d4af796f1bcf47a78f8af4" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="9fa876f4cb7513a302c8c7038670c302a967890caedd17337b295d144c8fa687" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="fbccfdee299d1ad29e2d9a7c7363cd6cccfc69004760f1325be19e60a881c874" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="b52097937e7af1aaac8cf3d3e9ef90a4eb7b6de6cdc314b49aea948d2f98b8e3" name="cpp8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="58d16ecc4cfd74b889e6dcefed3764ba59ac283163d6583b8fab9b1eb7337833" name="cppunit" arch="src">
  <version epoch="0" ver="1.14.0" rel="8.3"/>
  <changelog author="ro@suse.de" date="1092312000">- added libpng to neededforbuild (for doxygen)</changelog>
  <changelog author="adrian@suse.de" date="1100606400">- do not package debug dir
- translate suse help desktop file</changelog>
  <changelog author="pth@suse.de" date="1102420800">- Fix quoting in AC_DEFUN</changelog>
  <changelog author="dmueller@suse.de" date="1123848000">- actually apply the quoting patch</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1177243200">- don't install devel files as executable</changelog>
  <changelog author="adrian@suse.de" date="1183550400">- update to version 0.12.0
  - minor bugfixes
  - now generated with doxygen 1.4.7 new 'tabs' style.
- rename package to follow lib package name scheme</changelog>
  <changelog author="aj@suse.de" date="1184500800">- Use libcppunit-devel to follow lib package name scheme</changelog>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="jengelh@medozas.de" date="1321185601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Add missing "make" call in %build</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Simply regeneration of autotools scripts</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1334923200">- Build cppunit 1.12.1
- Passed  the spec file through spec-cleaner</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1353672000">- Fixed SLE build replaced make_install makro by
  make DESTDIR=\%{buildroot} install</changelog>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
</package>
<package pkgid="c2c900f6df1154ec0e2b32d26d6957c4e07f08835addb508bc6d39f86264a0a3" name="cppunit-devel" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3"/>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="jengelh@medozas.de" date="1321185601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Add missing "make" call in %build</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Simply regeneration of autotools scripts</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1334923200">- Build cppunit 1.12.1
- Passed  the spec file through spec-cleaner</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1353672000">- Fixed SLE build replaced make_install makro by
  make DESTDIR=\%{buildroot} install</changelog>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
</package>
<package pkgid="d3c2e12e59fd6a15f5c24ca72c1ddb2661b10815f8d2c89dafee1f0c701ade6b" name="cppunit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3"/>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="jengelh@medozas.de" date="1321185601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Add missing "make" call in %build</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Simply regeneration of autotools scripts</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1334923200">- Build cppunit 1.12.1
- Passed  the spec file through spec-cleaner</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1353672000">- Fixed SLE build replaced make_install makro by
  make DESTDIR=\%{buildroot} install</changelog>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
</package>
<package pkgid="c7085ea8bbe7e0e8f50c0783e251686878b786540769133bd47a37f36ebe1000" name="cppunit-devel-doc" arch="noarch">
  <version epoch="0" ver="1.14.0" rel="8.3"/>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="jengelh@medozas.de" date="1321185601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Add missing "make" call in %build</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Simply regeneration of autotools scripts</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1334923200">- Build cppunit 1.12.1
- Passed  the spec file through spec-cleaner</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1353672000">- Fixed SLE build replaced make_install makro by
  make DESTDIR=\%{buildroot} install</changelog>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
</package>
<package pkgid="65d5d40a15ba5a41f7bf53dc7dc4ee6eed27c4ebcf6fd066134be22e51443cf7" name="cpupower" arch="src">
  <version epoch="0" ver="4.10" rel="4.1"/>
  <changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
  <changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
  <changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
  <changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
</package>
<package pkgid="0db2fcb0aa9173232b96fc7cb9668f2392feb91dd76693a9628fdd550267c030" name="cpupower" arch="x86_64">
  <version epoch="0" ver="4.10" rel="4.1"/>
  <changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
  <changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
  <changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
  <changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
</package>
<package pkgid="31c0fdaf6d09258623a8cab6667b10f8d6be44dee56af73109381545e710faf7" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="4.10" rel="4.1"/>
  <changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
  <changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
  <changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
  <changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
</package>
<package pkgid="ecc3853641f4e79b29ff7cf6907d7f317e0a9737b64aa84ec9f887281b8a70be" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="4.10" rel="4.1"/>
  <changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
  <changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
  <changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
  <changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
</package>
<package pkgid="0f873e87fc55c3d463c043df96b95cc3cf8a8097976ca0fdbb79e7381db23671" name="crash" arch="src">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="1fddd45acbe4cd6f1acbf81f803a12bf9a95bfe5971c5fe1d73b831e786a6069" name="crash" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="4bd5c5efd8292d9e3b42ffe15c213f47121181d7f9fc9ea3c7f6bda0ae15d661" name="crash" arch="src">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="46bfc00b0a44c620bb01b4f1010ef1ac718f53dceb5da6c9ddac59d30dc296c1" name="crash" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="7c40af09cd585cfb525cf9a977e95e72ccd3b1d382e9d75e870a493289354ed9" name="crash" arch="src">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="a8b532509511d0bcc81454a6ba489c08d402cd97c20a6de30d20fc428276d6fb" name="crash" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="2a590111a6dee9f29b7d93d2cda0cb5ca0548824491ecd4665e4f9ab9b971b18" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="e2d42196746e8109eec582e49f55588e63ae0a2c485af85b760e6fb8467068fc" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="f217470d6570c4ffa6f1a9cf9ecf57b295a9f36e0c2c2b83a878ba2136038758" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="fe7d616ccea0912ccc8ef0c72343635f894b3d8c5ece44f0f59f62351ac61b15" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="d3d471ae24e131074d51b3d9bd4d49370ba3b9413f958f2bfb21821d73bf33ff" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="22931ddeca09a012d89eaadf9a25881fa2982344f19bda2a5ea19c0921ae8b6a" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="c32d129bfacc76a98c70f54d17c3662e015c2ab9c1893bc6ffe79df2d42ffa9a" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="d4b22cb05c8635a82e02c56ae61e79375141aaa2a218879031a72bcb01414774" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="cde8988577c0753de44c83a00eebffdde4cb18d2837dc108513aacf2a88eaacc" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="e727db228647d08aeb842c2965dd58a2a63cbeeb760cb0e8c66ecc1946d9f997" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="693df67e63fd8f530907658c523a7960b556b472677453cca26e0792b7911f5a" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="f70e42849258833d12e1da4b940aacb26385a80aed23defc7f2e255ea21cb725" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.1.8" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="42a0dc2767adae846690c7f56d26e34aa90f9f73dae31f4ce3a77a49696e82d7" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.1.8_k4.4.104_39" rel="4.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="f8001c2c1a8a840065ea06fd4836ed830ffe5e3858deb2ab06599a8b0115c3f4" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.1.8_k4.4.114_42" rel="6.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="834060b4de3653263a4bfe93cb10f13ba33ec47fa6da785c519065ace68d0d3a" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.1.8_k4.4.132_53" rel="8.1"/>
  <changelog author="dmair@suse.com" date="1442923200">- Update to 7.1.3 (bsc#946458)
  o Introduction of "dis -f &lt;address&gt;" which disassembles from the
    address to the end of the function
  o Introduction of "dis -s &lt;address&gt;" which displays the filename
    and line number associated with the specified text location,
    followed by a source code listing if available.
  o Addition of a new "--src &lt;directory&gt;" command line option for
    use by the "dis -s" option if the kernel source is not located
    in the standard location.
  o Do not search for a panic task in s390x dumpfiles that are
    marked as a "live dump"
  o Fix unnecessary error messages when a directory is used as a
    command line argument
  o See http://people.redhat.com/anderson/crash.changelog.html for
    the complete changelog
- Removed these patches obsoleted by mainline:
  crash-x86_64-nested-nmi.patch
  crash-keep-file-orig-with-name-on-select.patch
  crash-kmem_cache-downsize.patch
  crash-s390x-add-vector-support.patch
- Refreshed patches</changelog>
  <changelog author="dmair@suse.com" date="1443700800">- For 7.1.3 ppc64le the following patches are obsoleted by mainline
  crash-gdb-7.6-add-powerpc64le-linux.patch
  crash-gdb-7.6-bound_minimal_symbol.patch
  crash-gdb-7.6-floatformat.patch
  crash-gdb-7.6-ppc64-ELFv2-trampoline-match.patch
  crash-gdb-7.6-ppc64_sysv_abi_push_float.patch
  crash-gdb-7.6-ppc64le.patch
  crash-gdb-7.6-ppc_insns_match_pattern.patch
  crash-gdb-7.6-update-autoconf-2013-04-24.patch
  crash-gdb-7.6-update-autoconf-2013-06-10.patch
  crash-gdb-7.6.series
  crash-patch-gdb.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1444219200">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1509105600">- Rebuild on top of latest kernel update to fix unresolvable
  symbols on s390x. (bsc#1053915)</changelog>
  <changelog author="msuchanek@suse.com" date="1512388800">- crash-ppc64-book3s-update-hash-page-table-geometry.patch: Kernel commit
  f6eedbba7a26 ("powerpc/mm/hash: Increase VA range to 128TB") updated hash page
  table geometry. A modified version of this commit is included in SLES12 SP3.
  Make the corresponding changes in crash utility for analyzing dump
  appropriately. (bsc#1068477)</changelog>
</package>
<package pkgid="01c92190354ecb3b41c402bc07d2287eb58426621ed5c5a42a68e7998952d0d5" name="crmsh" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.3.1"/>
  <changelog author="kgronlund@suse.com" date="1464782400">- Update to version 2.2.0+git.1464769043.9e4df55:
  * medium: tmpfiles: Create temporary directory if non-existing (bsc#981583)</changelog>
  <changelog author="kgronlund@suse.com" date="1469880000">- Update to version 2.2.0+git.1469918297.1b801f6:
  * high: hb_report: Skip lines without timestamps in log correctly (bsc#989810)
  * high: hb_report: Don't collect logs from journalctl if -M is set (bsc#990025)
  * high: parse: Use original _TARGET_RE
  * low: Fix a setting example of the alert to become the error
  * low: scripts: Fix use of non-relative import for ra</changelog>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
</package>
<package pkgid="9b41f05322103f89e8bb12646dbf3ed8bf0ac280dcae0337a75c6edcd2da00d8" name="crmsh" arch="src">
  <version epoch="0" ver="3.0.3" rel="10.3.1"/>
  <changelog author="kgronlund@suse.com" date="1464782400">- Update to version 2.2.0+git.1464769043.9e4df55:
  * medium: tmpfiles: Create temporary directory if non-existing (bsc#981583)</changelog>
  <changelog author="kgronlund@suse.com" date="1469880000">- Update to version 2.2.0+git.1469918297.1b801f6:
  * high: hb_report: Skip lines without timestamps in log correctly (bsc#989810)
  * high: hb_report: Don't collect logs from journalctl if -M is set (bsc#990025)
  * high: parse: Use original _TARGET_RE
  * low: Fix a setting example of the alert to become the error
  * low: scripts: Fix use of non-relative import for ra</changelog>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
</package>
<package pkgid="751ffe8f5b471c99ff2d554a534708c159cd3fcd0c319228d537b1d12009ab24" name="crmsh" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.6.1"/>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
  <changelog author="kgronlund@suse.com" date="1539172800">- Fix missing argument in RAInfo's constructor. (bsc#1111202)
  * Add 0001-Fix-missing-argument-in-RAInfo-s-constructor.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * Add 0003-high-cibconfig-Normalize-to-_-in-param-names-bsc-111.patch
- medium: ra: Handle obsoletes attribute (bsc#1111579)
  * Add 0002-medium-ra-Handle-obsoletes-attribute-bsc-1111579.patch</changelog>
</package>
<package pkgid="867a7032e335685395a7654d8696aca7550603a1ab13edaa9bbe23dcff2f2327" name="crmsh" arch="src">
  <version epoch="0" ver="3.0.3" rel="10.6.1"/>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
  <changelog author="kgronlund@suse.com" date="1539172800">- Fix missing argument in RAInfo's constructor. (bsc#1111202)
  * Add 0001-Fix-missing-argument-in-RAInfo-s-constructor.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * Add 0003-high-cibconfig-Normalize-to-_-in-param-names-bsc-111.patch
- medium: ra: Handle obsoletes attribute (bsc#1111579)
  * Add 0002-medium-ra-Handle-obsoletes-attribute-bsc-1111579.patch</changelog>
</package>
<package pkgid="a872910c88220785d365906dad81eec8f1620dca841768e09d3e769248095f08" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.3.1"/>
  <changelog author="kgronlund@suse.com" date="1464782400">- Update to version 2.2.0+git.1464769043.9e4df55:
  * medium: tmpfiles: Create temporary directory if non-existing (bsc#981583)</changelog>
  <changelog author="kgronlund@suse.com" date="1469880000">- Update to version 2.2.0+git.1469918297.1b801f6:
  * high: hb_report: Skip lines without timestamps in log correctly (bsc#989810)
  * high: hb_report: Don't collect logs from journalctl if -M is set (bsc#990025)
  * high: parse: Use original _TARGET_RE
  * low: Fix a setting example of the alert to become the error
  * low: scripts: Fix use of non-relative import for ra</changelog>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
</package>
<package pkgid="e8fdb8c25aca1e984122c978ef55f2e9e08574343766cb7d572763408d426035" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.6.1"/>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
  <changelog author="kgronlund@suse.com" date="1539172800">- Fix missing argument in RAInfo's constructor. (bsc#1111202)
  * Add 0001-Fix-missing-argument-in-RAInfo-s-constructor.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * Add 0003-high-cibconfig-Normalize-to-_-in-param-names-bsc-111.patch
- medium: ra: Handle obsoletes attribute (bsc#1111579)
  * Add 0002-medium-ra-Handle-obsoletes-attribute-bsc-1111579.patch</changelog>
</package>
<package pkgid="d38549651f4c168e54a8bc03a508a2ff271977824783b4ab1ca8495ad27ea2a6" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.3.1"/>
  <changelog author="kgronlund@suse.com" date="1464782400">- Update to version 2.2.0+git.1464769043.9e4df55:
  * medium: tmpfiles: Create temporary directory if non-existing (bsc#981583)</changelog>
  <changelog author="kgronlund@suse.com" date="1469880000">- Update to version 2.2.0+git.1469918297.1b801f6:
  * high: hb_report: Skip lines without timestamps in log correctly (bsc#989810)
  * high: hb_report: Don't collect logs from journalctl if -M is set (bsc#990025)
  * high: parse: Use original _TARGET_RE
  * low: Fix a setting example of the alert to become the error
  * low: scripts: Fix use of non-relative import for ra</changelog>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
</package>
<package pkgid="c7d0eb0e8b978163c56206f06d3dc6fe9f83ce41c95b4aa94b0daa9d24a8ac8b" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="10.6.1"/>
  <changelog author="kgronlund@suse.com" date="1470744000">- Update to version 2.2.0+git.1470743271.64d1a40:
  * medium: constants: Add missing alerts constants (#150) (bsc#992789)</changelog>
  <changelog author="kgronlund@suse.com" date="1472817600">- Update to version 2.3.1+git.1472802925.a4a4041:
  * Require Python 2.6+, not 2.7 (bsc#995611)</changelog>
  <changelog author="kgronlund@suse.com" date="1473940800">- Update to version 2.2.0+git.1473924149.8abc212:
  * high: history: Quote archive tarball name if it contains spaces (bsc#998959)
  * high: history: Prefer /var/log/messages over ha-log.txt (bsc#998891)</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.2.0+git.1476084519.a000372:
  * high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683)
  * high: parse: Support target pattern in fencing topology
  * medium: ui_configure: option to obscure passwords
  * medium: cibconfig: Remove from tags when removing object
  * medium: scripts: Better corosync defaults (bsc#1001164)
  * medium: scripts: Drop logrotate check from cluster health
  * medium: corosync: Fix missing variable in del-node
  * low: cmd_status: Highlight plural forms (bsc#996806)</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 3.0.0:
  * high: bootstrap: Add bootstrap commands (fate#321114)
  * high: logparser: Update transition RE (#168)
  * medium: hb_report: don't use backticks in local
  * medium: hb_report: Make sure this never expands to rm -rf /
  * medium: ui_history: Avoid ugly wrapping of diff output
  * medium: ui_cluster: Fix broken cluster remove command
  * low: cibconfig: Clearer error for duplicate ID (bsc#1009748)
  * low: crm_pssh: Fix nodenum envvar name
  * low: cmd_status: More detail in verify output
  * low: ui_cluster: start/stop don't touch corosync, just pacemaker
  * low: ui_script: Fix script list all/names argument handling
  * low: ui: Fix vim highlightning support.
  * low: ui_cluster: No need to check the cluster stack in requires
  * low: completers: give the op's hint when type tab after 'op'</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Allow empty fencing topology (bsc#1025393)
- Add 0001-Allow-empty-fencing_topology-bsc-1025393.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- low: bootstrap: Fix warning for formatting SBD device (bsc#1028704)
- medium: ui_cluster: Fix init with no arguments (bsc#1028735)
- low: utils: Use /proc for process discovery
- Add 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
- Add 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
- Add 0004-low-utils-Use-proc-for-process-discovery.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- medium: scripts/health: Make health script available as wizard (fate#320848) (fate#320866)
- Add 0005-medium-scripts-health-Make-health-script-available-a.patch</changelog>
  <changelog author="bliu@suse.com" date="1492776000">- low: remove bindnetaddr for unicast(bsc#1030437)
- Add 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493035200">- low: bootstrap: Update fix for formatting SBD device (bsc#1028704)
- medium: bootstrap: Set expected votes based on actual node count (bsc#1033288)
- Add 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493294400">- high: cibconfig: Graph file output option was reversed (bsc#1036595)
- Add 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1493812800">- doc: geo-join requires --clusters argument (bsc#1037442)
  * Add 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
- medium: bootstrap: Check required arguments to geo-join (bsc#1037421)
  * Add 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
- medium: bootstrap: Handle failure to fetch config gracefully (bsc#1037423)
  * Add 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
- medium: bootstrap: Enable "help geo-init" etc. (bsc#1037417)
  * Add 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- medium: bootstrap: Make arbitrator argument optional (bsc#1038386)
  * Add 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- medium: history: Revert preference of messages over ha-log.txt (bsc#1031138)
  * Add 0014-medium-history-Revert-preference-of-messages-over-ha.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498132800">- high: bootstrap: Add option to enable diskless SBD mode to cluster init (bsc#1045118)
  * Add 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
- medium: ui_cluster: Add --force to ha-cluster-remove (bsc#1044071)
  * Add 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1498219200">- medium: bootstrap: Fix watchdog SBD envvars (bsc#1045118)
  * Add 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch
- medium: scripts: Relax broadcast IP validation (bsc#1044233)
  * Add 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
- medium: scripts: Clarify help text for NFS wizard (bsc#1044244)
  * Add 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Update to version 3.0.2:
  - medium: bootstrap: fix UnboundLocalError: local variable 'nodename' referenced before assignment
  - low: ui_cluster: when use help option, do not exit, just print help messages and return
  - low: ui_cluster: when have an error for optparse, just return and stay at shell
  - Release 3.0.1
  - Fix SBD configuration when using SBD device (Fixes #235)
  - low: bootstrap: Improve message when sbd is not installed (bsc#1050427)
  - medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)
  - low: ra: Don't require deprecated parameters (#321)
  - Fix is_program(dmidecode) error (bsc#1070344)
  - fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)
  - low: ui_node: normal is deprecated in favor of member
  - test: Update tests for previous fix
  - medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  - Parse /32 route entries
  - Fix: TypeError in logparser.py(bsc#1093433)
  - high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  - high: ra: Support Pacemaker 2.0 daemon names
- Remove merged patches:
  * 0001-Allow-empty-fencing_topology-bsc-1025393.patch
  * 0002-low-bootstrap-Fix-warning-for-formatting-SBD-device-.patch
  * 0003-medium-ui_cluster-Fix-init-with-no-arguments-bsc-102.patch
  * 0004-low-utils-Use-proc-for-process-discovery.patch
  * 0005-medium-scripts-health-Make-health-script-available-a.patch
  * 0006-remove-bindnetaddr-for-unicast-bsc-1030437.patch
  * 0007-medium-bootstrap-Set-expected_votes-based-on-actual-.patch
  * 0008-high-cibconfig-Graph-file-output-option-was-reversed.patch
  * 0009-medium-bootstrap-Enable-help-geo-init-etc.-bsc-10374.patch
  * 0010-medium-bootstrap-Handle-failure-to-fetch-config-grac.patch
  * 0011-medium-bootstrap-Check-required-arguments-to-geo-joi.patch
  * 0012-doc-geo-join-requires-clusters-argument-bsc-1037442.patch
  * 0013-medium-bootstrap-Make-arbitrator-argument-optional-b.patch
  * 0014-medium-history-Revert-preference-of-messages-over-ha.patch
  * 0015-medium-ui_cluster-Add-force-to-ha-cluster-remove-bsc.patch
  * 0016-high-bootstrap-Add-option-to-enable-diskless-SBD-mod.patch
  * 0017-medium-scripts-Clarify-help-text-for-NFS-wizard-bsc-.patch
  * 0018-medium-scripts-Relax-broadcast-IP-validation-bsc-104.patch
  * 0019-medium-bootstrap-Fix-watchdog-SBD-envvars-bsc-104511.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530187201">- Update to version 3.0.3:
  * low: bootstrap: suppress the error message (bsc#1087248)
  * high: bootstrap: expected votes wouldn't update in unicast mode (bsc#1087248)
  * medium: bootstrap: run "csync2_update" for all files after new joining node call csync2_remote (bsc#1087248)
  * medium: utils: Avoid crash on missing process id (bsc#1084730)</changelog>
  <changelog author="kgronlund@suse.com" date="1539172800">- Fix missing argument in RAInfo's constructor. (bsc#1111202)
  * Add 0001-Fix-missing-argument-in-RAInfo-s-constructor.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * Add 0003-high-cibconfig-Normalize-to-_-in-param-names-bsc-111.patch
- medium: ra: Handle obsoletes attribute (bsc#1111579)
  * Add 0002-medium-ra-Handle-obsoletes-attribute-bsc-1111579.patch</changelog>
</package>
<package pkgid="520afc863c5cd1c100f03a1bd730962c8d380e5f3b1324b42fa55dddee7d9411" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="61.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
  <changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
  <changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
  <changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
  <changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
  <changelog author="vdziewiecki@suse.com" date="1380110400">- Update to 1.4.11
- I removed these patches: cronie-1.4.8-bug_756197.diff
  bug-786096_cronie-fdleak.diff, since those issuas appear to have
  been addressed upstream.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382270400">- Remove old sysvinit hacks; none target distributions use sysvinit</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Leave /usr/sbin/rccron in as link to /sbin/service</changelog>
  <changelog author="vdziewiecki@suse.com" date="1391083200">-Restart the service if it crashes</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Add an option to manually reload cron.</changelog>
  <changelog author="vcizek@suse.com" date="1406894400">- add cron.sysconfig that used to be provided by aaa_base (bnc#860058)</changelog>
  <changelog author="kstreitova@suse.com" date="1424692800">- add cronie-1.4.11-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>
  <changelog author="kstreitova@suse.com" date="1520942400">- add cronie-1.4.11-check_user_existence.patch to properly check
  the existence of the user at the time the job is run and do not
  ignore jobs for users that were not existing at database reload.
  This prevents cron from ignoring jobs in user crontab for users
  that changed group meanwhile [bsc#1077979]</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- add cronie-1.4.11-pidfile_locking.patch to prefer flock locking
  instead of fcntl locking that has different semantics.
  It caused a bug where it was possible to run more than one cron
  process as the locking wasn't successful [bsc#1017160]</changelog>
</package>
<package pkgid="ae796d0fbbe577484bffd9544efe4af5984eaea8c48ff28dedb9225042514d84" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="61.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
  <changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
  <changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
  <changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
  <changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
  <changelog author="vdziewiecki@suse.com" date="1380110400">- Update to 1.4.11
- I removed these patches: cronie-1.4.8-bug_756197.diff
  bug-786096_cronie-fdleak.diff, since those issuas appear to have
  been addressed upstream.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382270400">- Remove old sysvinit hacks; none target distributions use sysvinit</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Leave /usr/sbin/rccron in as link to /sbin/service</changelog>
  <changelog author="vdziewiecki@suse.com" date="1391083200">-Restart the service if it crashes</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Add an option to manually reload cron.</changelog>
  <changelog author="vcizek@suse.com" date="1406894400">- add cron.sysconfig that used to be provided by aaa_base (bnc#860058)</changelog>
  <changelog author="kstreitova@suse.com" date="1424692800">- add cronie-1.4.11-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>
  <changelog author="kstreitova@suse.com" date="1520942400">- add cronie-1.4.11-check_user_existence.patch to properly check
  the existence of the user at the time the job is run and do not
  ignore jobs for users that were not existing at database reload.
  This prevents cron from ignoring jobs in user crontab for users
  that changed group meanwhile [bsc#1077979]</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- add cronie-1.4.11-pidfile_locking.patch to prefer flock locking
  instead of fcntl locking that has different semantics.
  It caused a bug where it was possible to run more than one cron
  process as the locking wasn't successful [bsc#1017160]</changelog>
</package>
<package pkgid="ac0400ebad9bd87d3fddb2b9d54adeac3c5b2d7732457f53091a42455bd9c968" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="61.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
  <changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
  <changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
  <changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
  <changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
  <changelog author="vdziewiecki@suse.com" date="1380110400">- Update to 1.4.11
- I removed these patches: cronie-1.4.8-bug_756197.diff
  bug-786096_cronie-fdleak.diff, since those issuas appear to have
  been addressed upstream.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382270400">- Remove old sysvinit hacks; none target distributions use sysvinit</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Leave /usr/sbin/rccron in as link to /sbin/service</changelog>
  <changelog author="vdziewiecki@suse.com" date="1391083200">-Restart the service if it crashes</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Add an option to manually reload cron.</changelog>
  <changelog author="vcizek@suse.com" date="1406894400">- add cron.sysconfig that used to be provided by aaa_base (bnc#860058)</changelog>
  <changelog author="kstreitova@suse.com" date="1424692800">- add cronie-1.4.11-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>
  <changelog author="kstreitova@suse.com" date="1520942400">- add cronie-1.4.11-check_user_existence.patch to properly check
  the existence of the user at the time the job is run and do not
  ignore jobs for users that were not existing at database reload.
  This prevents cron from ignoring jobs in user crontab for users
  that changed group meanwhile [bsc#1077979]</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- add cronie-1.4.11-pidfile_locking.patch to prefer flock locking
  instead of fcntl locking that has different semantics.
  It caused a bug where it was possible to run more than one cron
  process as the locking wasn't successful [bsc#1017160]</changelog>
</package>
<package pkgid="880f97c5c5b74a35bae30bb5b5e327eb7e8223be018dbf74a0bdc53749f7783c" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="61.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
  <changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
  <changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
  <changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
  <changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
  <changelog author="vdziewiecki@suse.com" date="1380110400">- Update to 1.4.11
- I removed these patches: cronie-1.4.8-bug_756197.diff
  bug-786096_cronie-fdleak.diff, since those issuas appear to have
  been addressed upstream.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382270400">- Remove old sysvinit hacks; none target distributions use sysvinit</changelog>
  <changelog author="aj@ajaissle.de" date="1390478400">- Leave /usr/sbin/rccron in as link to /sbin/service</changelog>
  <changelog author="vdziewiecki@suse.com" date="1391083200">-Restart the service if it crashes</changelog>
  <changelog author="vdziewiecki@suse.com" date="1402920000">-Add an option to manually reload cron.</changelog>
  <changelog author="vcizek@suse.com" date="1406894400">- add cron.sysconfig that used to be provided by aaa_base (bnc#860058)</changelog>
  <changelog author="kstreitova@suse.com" date="1424692800">- add cronie-1.4.11-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>
  <changelog author="kstreitova@suse.com" date="1520942400">- add cronie-1.4.11-check_user_existence.patch to properly check
  the existence of the user at the time the job is run and do not
  ignore jobs for users that were not existing at database reload.
  This prevents cron from ignoring jobs in user crontab for users
  that changed group meanwhile [bsc#1077979]</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- add cronie-1.4.11-pidfile_locking.patch to prefer flock locking
  instead of fcntl locking that has different semantics.
  It caused a bug where it was possible to run more than one cron
  process as the locking wasn't successful [bsc#1017160]</changelog>
</package>
<package pkgid="222ae3a3eabeca866c88fb1182ab3011d9f9547f579a29918294bcdab89bd7e2" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="ee30b1ecd5488d8093960d04284044f2911ebe9084421ae3a954934ca5d0fd31" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="0cee6ca49f5da2646e9be50cfecaf3c2ae077c59d98ef39c0a4d2f1ff7c2f92a" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="c77fe2a3393a3bd87d55e4634f43b99c942627d147c9d388648d141f41284598" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="1ba14aac0a5c0ac5041f819b63817a00bf24cde09609d5b370294a767201538e" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="9c783f248634d329427b616a9d5bbbb5f69e76e437aec9a363de1fb9010c6d6c" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b796fbec398c5aae19cc3c367dd7ed722fddca6819e9fb9790520918e0f25c0d" name="cross-aarch64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="9615f6071cf47a060a65bcc12ebfaf9bd376bea2a784f144191fb9d135d2e2c5" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="a4e3f7a68c622a62751924f3ce5301e600afcab31144bfc3af76c4ff92599441" name="cross-aarch64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="9151970277f39b79cd70a28b0d22df813bbc21edf06ee919edced0595339da49" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="91c5c566f3eb4a10ff2732dad1025d17f4cdc49390ebc7f699822a2fdbf2001d" name="cross-aarch64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="d357e72f53d85d69c1391af2a7e1ac345e4cd4671faf996c8090c634bfe3bcfc" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="be6ca8a30c2c81de968bdd25a1659cb8c01c3719bd06c6aae351ec020d5754f7" name="cross-aarch64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="3c40ddc665d3eaa7d7f7f4faa664a7d5bfe5854ac95095587fcac9e8774f597d" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="3e2cdf5bfdd8a10e935afb9d113588019b002fb8f09ba2ebda8637f089e011bf" name="cross-aarch64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="2c788108ad18f8739d41f464761269e21534d9fcca564a5b7e243ce3907adcf7" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="cd38e3288e799d3bd95c1689c9f2d4659529eb3f824b733b7978da888a68722b" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="d8b18f5e5f194c04bef94b59d4b1fd0b958417c10959ab16ac5c5ec4acd26403" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="b65fc05c40da6908bcd1a1cab4db449760ff8897eacef04fe92cc6b787cc969f" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="494fee3e5a87a33fd8d269286464dca5e1d53dc08ffbd16fcad4c409bbf1c954" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="aaf8f41d88a222eb5f63bd5b0470feb7d684db95afd6101f762ab396f73587be" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="902b8cba43362b3881f98efe27d71763edfff2068ed77141b3d10bbd0e295823" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="5530fdc46fd18296a3f4a0c78fbde8f5d521e5826f4e418d6de78659fbfc58d5" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b7b3c03d9bc53aa7d9f6a19709fce3a76e1386dd1d8004817b6f22ee57b7a60f" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="04e3d25a880b9449c60f5f9427b97c8526aab297853293a58a276b0c436a7dfa" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="24c69231302b6ad517df6c5dda9311c1da78b854e68a6296eaa05c80bd4e6ccf" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="51714eafd344dd2f22e9801480abdeac2aa0a78f7d6bdaa938f6ef7c95675ef2" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="1107d0ae8906e87af2298cbc86bc503b885ab62a626ea937756089a29afe6dea" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="2aad6d61646bc323e871030c8e46fd2d6b252c03bdf200219ef2eeee61d04665" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="9a82a6e56c037386e8697cf6a5287838555106e1ed9e58a0a50e2e527df63f80" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="a9d9433dfde3c1c674d95fea36f8146a081f1d83a624289d521abea57498824e" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="4984e6af202545e6bdaef14d4d5d8d7bdc01dfce3711db2698e384ae11578236" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="497795a98dd76ae5434de7f056762f497484cf10bc8ff6f5e3b8b5df1f686b40" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b34a7d18064a273b18b6107ee8bf77d6e56ac9cae924032b3649c2e84e22f139" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b7471b6742c09744b93d6d520f878191bded591b87c0e9fc841d74bcf4189f4f" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="7ce055a25122ba658587ab12562d44d3769c114d3f974d1c156064677045f2a2" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="bd669ff1b53782ac8e09969a3a72315c231f11c64beb6262a914df26c5bfe8cb" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="764a3005cd2c7b57a2588ed1d819bcc321787c1335f8f05e75120df4c3c1e35f" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="22e4b9bc1f33c1a9668dc848368ba4bdadfa4d11d7b7205a88a16e76eb1a8c46" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="ec303f5692d1eeaa4a070f25193a296f6c7a7aa4a65cbcb618c3b5807cc9fdfe" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="97de5386ad8722ff20a57a6f8da50d2c1055c6507d89ea43151ea0beb0e17384" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="19aafc96e3b0c4909ff13c753c14d34244172cdc5582a7a0c075e8c6dbf4ef87" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="d522335b2fd97ec4c98bf8922fe8ce3137141f4cbf0cb8901ad687defb8a7a38" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="967f5d0266f05aba3c2481171d870ebbde20f9100b39edb5c20506cf7f60330f" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="87b8689456722313571f40b799932d09735f2b7af20a7664294655382660e697" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="c79dd36ade2fe2a6d9d7680ff690082000fa6022cc9711030e1f30b04ce1aa27" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="8fa10e060a36ac01bb97e449d90502c60be9927a25ed2c026ec098b2c113ff6d" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="d1944eb485083acd95ec19fe2a2d9481a3793eade952e2b9c19dd295f1472069" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b54bc177d7ca0df75734f07bc6947e45f2a1abd58e6e907c6ab5ddf98babbb79" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="37db17ed9377a1f33edd1aac3e0a2ee0c84f0fdd1c5225ba94ce8985b077d71b" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="c458a16f2f284f425d20bdc646eeca258570fcd6f0973b026422eacd64ab9b80" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="4f7eb7ad9fab6c9147b39a40486aaf148dbd0d2d1fd113a98ce9e26b0dce5a9a" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="cf008e8cfd1da76c66ac0fd00b1de19c203f1bade3f2965aa864bbb0717d551f" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="65ddf2d4f953eb392c6d297acd5616d5acfd9d17a1ffa6082fa8ceec199e7435" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="21ec8d35674054d6521333039c5745b10784b9a64423c5cc51c2002535f918a6" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="65736595800dc62a5f4696976d70c42f3b078a5ad7f0cdfbbd329fad353cabf8" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="413f9f05ca539c730e615e02d35d21f66720c4f573b75803e114439b6b6276a8" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="abccfff937aa8eb983aac71bb1e6605415b5a5f3f46c3e5578f9e08edbf17cd5" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="edaf265402a5e7cc8f3019bc68df62f5d65b1a36a1839982fb94704a61d75e97" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6a1311a8cd994507cbabb25afd24302d17771843117626eabe23300991798f9e" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6a4e45d457b64fb17eee3b0831c0748a839312f553042eec1ac6da6ee964f5e7" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="069c9c0e8472ba8b4541246495009dd345432a2305c35d332a1c930b1609bdf3" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="3a9790d37f65fa4ef6c88576bee56561fac83f9eeb7964c7575c0cdd3a049055" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="e4fcb9b0db1a418371156a0ce14bc801bb85d92b225b1c3b187d0814d03b8d1d" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="17588681c71f722b4a962b33f16f75838af875075e1e5c63385b487e2f42d8ae" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="a8b25aba59ff08345cc061f74a68306e3b7b7efcee0f1f9562a49950f1f34885" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="c6357ef55076a2663ef798373e4d3ff1322bb9ecb7130bfb2357381118ab3c53" name="cross-i386-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="7f50ed43cd2fe5974ebcde554cda396a8fd00cf1f9df929ae3f4b2649a094df6" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c9f03c72f0905d18a98f54f6dca7fe95655b8db89a3033b8ebf73771374b5537" name="cross-i386-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="38ae4a0ccf3ea35337fb5e9c6ae0a07a761b0074d0c0a581060727276f632ea3" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="cab241bcc345ede1ae038c05afa0a29ddb6fb0203a334fd7b8546a193f637506" name="cross-i386-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="0a7bc22d800499e7746ce54e662306598d2341f297ca2008bec205acb539ba99" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="1dcc4d8ba6c6263afd112f02aec857dea3b6ae4b8dc0627fb53aa630106cb90a" name="cross-i386-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="ecb71b8576bce215249744f99eb6a801ead33ffa2e3f4d624a49a1807bf7dd87" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="8234019030398b21898cdf1f264226c71396f54090cbe96eda110807c89875c8" name="cross-i386-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="a4a110f739f13a5304e596eaa6af5410239d7339800160b4619fe84f90ec0bd7" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="5528502139c41098a58cb3c55f3ac185ef39e849dd1f9dd0719b49dfe35b1c11" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="fc4d1020a66f399d3f0bcb5544d0da3c5ecc1a9a81c9f28f6ffa8a23a2640339" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="2ac584940a8af76048d0cc3a02a7a8d5500bdda4c143973fd40983fa7110eae3" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="3cbea2e8d29abf83a7454846246fc2a43e54ca04f4852141ee179aae0ae22f69" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="d754e50b45419c320219ef00fcd32cc7ce163beb39d86b718f5c671192329de4" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="00bd61cf27e618e4cdd38041d6898760e63a80516293c7ccf30ed6c014464260" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="4100f105f3e70d16ed97441d945169b667525e2eed23738a81b0cbe1f83079fc" name="cross-ia64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="ecb8a9aa486e0e5d580f4960805e6f58d15da6f16db4e652b58beafc99c969ae" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="2d49ff469d7710f271fee164954c5a4f5134fedb080ec0a8e40b9bfec3173379" name="cross-ia64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="2d8d05280222c612313f5df19f4587d0dd6a3a86c97542c34187629c6dd8ad23" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b1acfae34c5f1dc80e0dc450943b63dc2e44bc472cd6ab0b51b940c6773eccf7" name="cross-ia64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="1031d125073d233feeab88e38eb8e77d71600ed051233c226a7bfe2594488816" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="fb6f0474bd449040e0e260977cb61d4c13e3fa474ab6c3be30e2e9dc87ec3902" name="cross-ia64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="84dd11690fcab95356b0f543e69f6094e28ede7693aaef5415cd560ee4fd08a7" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="eefe49a250454a001bc9fca5b0e9e56a59eeb69dcfcc4cffbcecdbe65b03be06" name="cross-ia64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="543dea58ebe72c95a56b4f5c50eb7026b568fd0080794783fd3f21ab246fb83e" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="d3a5976664a8737613a88be9fa5220c5fe313af338d7384b037f2c84f257e1c7" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="add47c1de023788f9fc397bcea56a64fdfc9e3aa8580ec31fbe7ef42f9c0b2db" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="d3226051808fbaefad41b5ef0d729dbc38dca2c90115e7dbc54fd10163ebb767" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="1d9017ea4cd20d8df4e6839f84bd7b55d28941278074f7b0888c4a35f15111bc" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="5e5e5e6683fed1d11e741b275b5121b88530a3b7fab59d45094dacd8c439cc51" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="3aa55565736ce79509ebd04c21dedd0ec1ec174482d23c4492a735208e1932f6" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="037d045507ab696e61cb50196ce5879f61478fe1152753e70f112ae112e0256d" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="b14cbb24110699b8dcdc5b34b6dc2170584f0604f7521575cde78c6492b1aa82" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="39ffdc3f2a28bf3704fcdddfb25eaf7c76f3a31aaf90adb62751b3f872045936" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="96e46957aa79081307150760ae6342c89aab30de18b0a1175b365bf42c63c3e5" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="aa9ad61404a56f1961ed62ca00f11efa20838974a1ecd18726224d6b13452c9e" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="bc3d67bc0ce3fe883d119d9059afa1ab763b011bdc074d00a9b13d4139fee709" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="959e0096374a38038e567e341228496b436a0659c99ed1e2230315a7fbb46da5" name="cross-nvptx-gcc7" arch="src">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="d14bf24db4d88b42ccd300f696cfdc3bd081218ea2914398770dcc0c2dc48fce" name="cross-nvptx-gcc7" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="33d6322547d4668a4dd75885711e77dc1d42954861ae0c8fb367415298fad3a5" name="cross-nvptx-gcc7" arch="src">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="d5520e7bc0812b430f6e5957fc992dfdd41e9bad51b7731504d61b6e605fc90f" name="cross-nvptx-gcc7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="e37f11b5fce0d6b3ffe176cb8e0de23beaf635ec586b8be988ff6a8d8de03503" name="cross-nvptx-gcc7" arch="src">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="3f65d6ea8cc96e0e9232f8944b4ff46e2ddc3b52761bca0ed4823e3c465e5a64" name="cross-nvptx-gcc7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="94b92555f33b054e388861e10d8cea863e44ccdbf422a7000dad2ad03e176e9b" name="cross-nvptx-gcc8" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="2.1"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="2e52996328124247ddf83af81b4d8e8163b08a53c548c2d5cc082cca3bba9f38" name="cross-nvptx-gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.1"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="92b8236471e309b27fb408518c7289380981e6376e8381f225be9c905d5f8eb9" name="cross-nvptx-newlib7-devel" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="b438c5cbbdbc64209a89db04508f23de6e9339ac2579ee5e325dbbcce9d36b75" name="cross-nvptx-newlib7-devel" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="6e26d20cbaba9d68d0b460f2a1ba7cbd9c97ffda35032debb3809414a462dd08" name="cross-nvptx-newlib8-devel" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.1"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="116c9f4c293d518a2e7864de89963fdbc4c4717210f03dbd54bd71dd00a998c1" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="8527e30098bfab223eaff916ea1ccca68fea055388c6e98fcfd53d2d4b34970b" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="5ba82840295c88604a851e1df716a131414dd95abbb8972fdbdddafb4699c429" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="c4a9c9e234ff4d7150263d73639ccc0eb12314d736d780d208ff7053d05929f7" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="c9e56abfc593e9515d14ae4cc0be6c3777f08316686978d5478ab7335fa12118" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="850164cb4b1d46dc7ca9cfd2e450ddddd9e4ec3dbb0ecff8f3c91b7305c17850" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="5e954e16e6e233d46002033f870cc475103dd3d6b331c9eb4c255c631cb66173" name="cross-ppc-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="6e33626f56cffd084540a913fa7e806e7c34c97ec9357180183351543f29e1de" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="a77a606bf40e7c78725129a1bb457ddb6865a4855deec5cfdc7cd002a14ef3d8" name="cross-ppc-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="0ae958cee837086e8329af9f7146834ed36e809ecc7579503d77f9b11b34f429" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c410db230315017c5edea76a2a3bd078f026d80aaa169728272c065ee4cfed72" name="cross-ppc-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="5100524503f3ca723f4106d3a6634dd3c6ff82f0c813f4e054dcbc04200e97a6" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="5cfc806a3e0b673a935c3c0a0cc7466a8d9bb9f1c6dcc73f7342f9066f68fac7" name="cross-ppc-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="3543b2fa7e9bf2d1bd89c02034260c7fdf68bca9123f5741722e77d0b7d34bbf" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="21d691915916e80d6dc35d1bae402d2439d6751c00d62ef565aa1e3b9755e5e1" name="cross-ppc-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="1087c38ef75638e5a01a07b031a2a1a454199434f32ef2597d994231774772f5" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="207b71c0620135aa1ead85bef442e53db1d3b776bd6197b1a5cf7938cafea7a3" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="6571f6b23c61e9d99d4159fcfc5e4128636cb7d98f444b3e483171b0c6b8b66a" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="83c8530502d7928b24bdece15de4c0043b640e997921f00e97602e4a65aae6d9" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="3871abdafc3828b2facb1218858690468248c82f05c3128c7b11d5fdf66c5626" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="fa8c306b520212af524b25aafc6bc525f13fccf09260b417243a7ab048b68a10" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b4be8c131a65e1d3a064a5b68749ca0b27bb777b6190ad093e664cc2a4ce6f57" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="8e9327b95f2e9d05998d56c28c4b13ae8b6c4fb38542f67958c5907108e86a84" name="cross-ppc64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c9a943322ad58330deab36db7026915acd705b66ae01075a5c3b8734598ed06d" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="1ab863e62909d7f92ab9dd05ace9a9fd6fed79289f8e1cf500bd19ae340c5f1d" name="cross-ppc64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="4ac5b0a1b1f2961e5181b11207185a761ecbfd7d7975cd65995bb03f5e951d9f" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="83f6c63ad7c5d319371910d858a2f57de7c4df09a0b7a2778d9d1c4cfb2d0eb6" name="cross-ppc64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="e44b00b96001cc75abe3cd6eb68e5474a66d13f07636a58ffcdb28330fbc1c5f" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="ddcd00fcf3c2c899e06e90d9f2a7243351cdab9ca528bb8cec6869fdce43447f" name="cross-ppc64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="b3249c8a34f67b25bdf695ca8090449e8ed000942c65ef2f5cf8690bbd1af15c" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="f38e20c8ad540af04beb917ad4a667c82a1a27841ec59e49c209cf5430c7f6d0" name="cross-ppc64-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="2dd40622c5966e48fc461b80cbe12b1a88ceef3d746b502b9ce9cc87a522cb13" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="b2755afc56f625a3d0e16581648de98b2c17583a9e0569b346079e7e143ea9a9" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="6d747ee3424de8f6ac451d4efd59d03a961e09540108702ab41e06c3936635b2" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="11e4322acfb5251fc910f48b4de41eb8d9c37c5ad51d2c2ea12e71a399d7e492" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="b9fe5badd565353f124b88e71f0d5d00001eeb355b32be3894fe0f9cc10cf42d" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="8e3fcd1aeda24ee0c57b081e7f7353f88f05fdea3ed6a7e8b3841bcad55a3cf9" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="0d6724a20b391c7d112a676a6a61366cb08d407fb656d984960403314158b578" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="64c61ca635a6c98e8fd9db1ffae4bb115ca06796b4436d5c552fb1e491d0be24" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="4f1669cce3d4b518800834a7dd886d4e5efcae958524fedf7310964ade7ae6e8" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="d71f3f319a65117204403a88c5cd806271a22a74befb4a1309221147c4bd07e0" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="6204e8c24aca04538b269e9bf5495f83c9250755c97ff6eb550d1a5f06116c93" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="14cdc944e679b8c3739b344ce140ea8d8fd08f2740fe97beb579584e05c353d0" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="cc6ad266d6977be97608fb942d420b43a66618922130bfece374952bd155a6ba" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="bba793919bf44a7557ac0327e68f3d040475068f7c58b6aa68fe693a6d7fc423" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="457ac83a231aa3b2ba025cec00ef75fd1ce30ad103cb317bc2d50c76c827058b" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="4584691ca42b3cee8fc010ea19d44bab79933e0f83eef16d59dfed587d6b3ee6" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="d000d69f924cc0b0865252bdc82b9b8a2048a92bf06452695cdb7b9ff3af534b" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="d0217f30523bf9bd72d0adbf8f9b36f9e710d353ce449bc1ad883f12f620a93c" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="e9897a3d29d2461d4889824f621d32d7e5572a47471289fcc9aab380c7f25402" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="93daa44215b1c231b8641237925da5d1e27b2ebe32dd34d660146c76a3d13ae5" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="e56bab0a453a8435042c91d18cee88dc8726d1637ff7b28c775a9be22a563f20" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="0c3530d77d133bd21af1152068f16786748520c4e55fdba35444b254b06048df" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="6154d7dd52a3875e546f7ba2821d62ae04d2405c0b184e1352866b5dac98d00f" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="822344c6ebc1c3ac51052ce2a2428c069a29f5193daf119d7a25a2eb0cde2b24" name="cross-s390-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="e95a8c99a9cd23f07864f1c83db1b301c424752d858bdf863fde17e401b55608" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="6ec899c773117d504c435d636664217d657bafacaf4a1ddeaf68d31e75e6732d" name="cross-s390-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="a339eddd986db675ae415e1fdc31b423ca59aebd9e87522a782a9652873ef323" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="61d3893f17e200279d3ba80d7880be1c2437dff9779fca791507bb77749a9d37" name="cross-s390-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="4d68edb0beb00c993e17c92a44134419a7c4e6c3139685463ee98493f92d1941" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="ba2f3a2a19abb010fab1870b3d7313f7f12444ae05b9f1470c25467ebf1737bc" name="cross-s390-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="f1453b6d96b1fbe6cacac4fa5c4b4546b93f405e23c60fca62cdba164f9faa5c" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="b68192662d96b43d29fc0ff3b80ab1395f1e17e026ee1b4795ff709a37220073" name="cross-s390-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="8818fd6519db674fb936ba1dfa5f2990e422a8e32f4e9149f19025800f88419e" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="6327e4d98edca0186c680c61f4579bc6487bf150280d8801f795b5ad7460d040" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="bab7116ccb8dc80e133cba83d585226d71b33979624ba8681fe19fcefb8d76ef" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="1a2f645b6aa5e56d58993a5fb9822fa1718fac9c24e7c305a3ff66c7d6524ae8" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="a7bb41ecb40bd886dedc972dc283bf72c598ef894118779b4f2de4dd5dd2f49f" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="03af19cf25737b76d8e459d8afe2e16bb472607418853ba5d969704198c567e0" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="bf1720859022b1f24c34886a73c2bc455f43ee7cb75acb0725888cd7bce54b88" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="848830a654ec393e7ddeede457b1145cef4dc28adb7532d81e75645d439e4ab5" name="cross-s390x-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="5a98bd970ef490c933619ea1f07a122a9e780e3ee83af2bf866636f672625cbb" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="98aa1cf41bd64780d253065e26e84954030d37063a09c45b8dc6a35ee479b1dc" name="cross-s390x-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="8801922afa81a4d7220967bfd03fb778495d1c69d38ead8f59f97647e31eab21" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="72de0831ae7f625a2dbe523f160fe7785f7ce0fa349c5b018c6d6db7bde894b2" name="cross-s390x-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="1faf5a2dfe0b0e4a8ef7d167b22f62770d17668bc550e39c2d0a0638b364081b" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="7485b0a830c6f2860cc94804322fc5ab2008c792a1a25038aaf5dad04721d4b9" name="cross-s390x-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="770085117defb376d6a0f2c060195fcfcd10152275c6753194867c929089c49c" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="4011b919d4e6be244396b4210b8c3bb27036855350df131eb8903d658671a3aa" name="cross-s390x-gcc48-icecream-backend" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="90e8ebabcdc5517fb9f4e578069042fa7e98ef568bd76ee5f2008faa9397fdf1" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="bd4e863711998a4b4c6d3d2b7fe32259104a25e0b91f85cd3a36d0bcf68dffe9" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="4756ab3940151d6cec790c7a219ef442f450d149179ca6b907779e9056d19e02" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="bcc77d932e44bd7b931fde0b03dec5b073c331814886414303ee49efae1c960a" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="d434e028689c8ee9c6a046f385b84d4ab1901e6dc04a24e38c49a00b1a50dbb0" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="2f1f3bff524c8d22a5da34148e8095f61f5cd258c629469c25da7b839e98d23e" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="eb7c1e8f6a2362f0e01ebd2b8153cf56ad846e8a178a6882a77cd536055e05be" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="a1f67f1a4594e71a37f4d14a80879568e1d7321d1cd26eda17865273df881e84" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="751e31a364d6b8dbbc8c9c08ad0dfdcfe1fb8ae0f7c3f04075f8af47f791adfd" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="a3cefe9acbbe8060df173a139e191f24053e2ab8cc1608cedb3ce5a5d0ccfc6e" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="b1810a8b3e66d0836c70733e27540e84b464a9c53afae47971710690f5edbb5c" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="8dc70ea0f491d8437a6e5bf6fb9c44a6a36337c4fe7ba3ff14d8c9e742e4eaa5" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="7064cf07a8984b75d86deafda82d6e9f44cc443a4ffee5538a3991400269e6b1" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="75bffcbfa98b539855a5a9eb768f6871cce3467c4376bc1ed5615c402ff9a6f0" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="02c2f5de6e7b77f3dae9128446adcc66903f028bed5cf1a8adc72398963c91fb" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="785c0d6e47007999bc71d8c1af2c5135f070df1245aaec47a53730d7e178b651" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="551f97ab467f4ae66daea0dfd5a56f0d2111574c9f7e6e8c40fbaf737fa53251" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="43cc69d073190edb08eb10dac7465cfe726d178da3a0e50cba04c222ca3d0a58" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="029506e57829120067e132c68dcb7b0c1d2e703f338099f859eb5c95167c639b" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="adec97198b7d0d73eeb42f231809dcc9736ece88d62d77efbfff2957579bbf82" name="cross-x86_64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="13.1"/>
  <changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
</package>
<package pkgid="f7d523c310c60983fe189ff23a9fca52efd0057dc5cd5d1577e22e046814cf76" name="cross-x86_64-binutils" arch="src">
  <version epoch="0" ver="2.29.1" rel="16.1"/>
  <changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
  <changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
  <changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
  <changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
  <changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
  <changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
  <changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
  <changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
  <changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .</changelog>
</package>
<package pkgid="4b3415dd8c17561e7000bb18f4ac12f6532291b815b64f3e57f92bc35e392d08" name="cross-x86_64-binutils" arch="src">
  <version epoch="0" ver="2.31" rel="19.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="04c14557964594334b2f01ce97efcb33d43b2bb2c8e68d5ecce140a181c6c4fd" name="cryptctl" arch="src">
  <version epoch="0" ver="2.3" rel="3.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
</package>
<package pkgid="8595ddb54e5f277f50cd79aadcec737fe50f814fa1e9c7cb26928170136d175f" name="cryptctl" arch="x86_64">
  <version epoch="0" ver="2.3" rel="3.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
</package>
<package pkgid="5e704bb7bbac45a8fe52ac1a10e97306eef52db662ab457e1814e4b0a4b3614f" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.13+git.72.2a684235f41" rel="12.1"/>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
</package>
<package pkgid="05bb2ae3cb6f15c4d56f65e372792495488a22efab321cd943959387684c500b" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.14+git.150.1540e575faf" rel="15.1"/>
  <changelog author="ddiss@suse.com" date="1493121600">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
</package>
<package pkgid="ca95bdb8a78d2f56dbfa7cadc51a63384e3cb88aafbf2da87d7ed5a28dd6f566" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.14+git.157.c2d53c2b191" rel="18.1"/>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
  <changelog author="scabrero@suse.de" date="1533124800">- CVE-2018-10858: Insufficient input validation on client directory
  listing in libsmbclient; (bso#13453); (bsc#1103411);
- s3: winbind: Fix 'winbind normalize names' in wb_getpwsid();
  (bso#12851);
- winbind: honor "winbind use default domain" with empty domain;
  (bso#13294); (bsc#1087303);
- winbind: do not modify credentials in NTLM passthru; (bso#13126);
  (bsc#1068059);
- net: fix net ads keytab handling; (bso#13166); (bsc#1067700);
- fix vfs_ceph flock stub; (bso#13506).</changelog>
</package>
<package pkgid="139ef16baef2c864785ca2799dcdbb6824f89b4574ede0a55c4f489b0beec744" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.16+git.124.aee309c5c18" rel="21.1"/>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
  <changelog author="scabrero@suse.de" date="1533124800">- CVE-2018-10858: Insufficient input validation on client directory
  listing in libsmbclient; (bso#13453); (bsc#1103411);
- s3: winbind: Fix 'winbind normalize names' in wb_getpwsid();
  (bso#12851);
- winbind: avoid using fstrcpy in _dual_init_connection;
  (bso#13294); (bsc#1087303);
- Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); (bsc#1068059);
- net: fix net ads keytab handling; (bso#13166); (bsc#1067700);
- fix vfs_ceph flock stub; (bso#13506).</changelog>
  <changelog author="ddiss@suse.com" date="1534766400">- Update to 4.6.15
  + Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230);
  + Allow idmap_rid to have primary group other than "Domain Users";
    (bsc#1087931).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1539000000">- Update to 4.6.16; (bsc#1110943);
  + CVE-2018-10919: Fix unauthorized attribute access via searches;
    (bso#13434);</changelog>
</package>
<package pkgid="61233220412836c7d2c840d43269629c5fcb620dc4fdf757c3900e7a9f8bada8" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>
  <changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
  <changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
  <changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
  <changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
  <changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
</package>
<package pkgid="20146ed2f5cf06c30e259992da1fedad8e60fa75e6f46ca57e939c379aa81af4" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>
  <changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
  <changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
</package>
<package pkgid="dac7864ad4e2e8d59831a291f49f77d53eab4fa99275907d30541217070f462b" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
</package>
<package pkgid="9ff139179e6e3e9e2ed0337e80979c529e212ed1a7baf981c4c33e64314b12c8" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.13+git.72.2a684235f41" rel="12.1"/>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
</package>
<package pkgid="3ab775a8b9984341896bf406f1ec14eee5b0edb6afe1c0b30e67a3e47d9cd46d" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.14+git.150.1540e575faf" rel="15.1"/>
  <changelog author="ddiss@suse.com" date="1493121600">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
</package>
<package pkgid="92d1e0d6e8016a7d289a6a07a6513d763774325ff5d2ed98b026c6a2cc764678" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.14+git.157.c2d53c2b191" rel="18.1"/>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
  <changelog author="scabrero@suse.de" date="1533124800">- CVE-2018-10858: Insufficient input validation on client directory
  listing in libsmbclient; (bso#13453); (bsc#1103411);
- s3: winbind: Fix 'winbind normalize names' in wb_getpwsid();
  (bso#12851);
- winbind: honor "winbind use default domain" with empty domain;
  (bso#13294); (bsc#1087303);
- winbind: do not modify credentials in NTLM passthru; (bso#13126);
  (bsc#1068059);
- net: fix net ads keytab handling; (bso#13166); (bsc#1067700);
- fix vfs_ceph flock stub; (bso#13506).</changelog>
</package>
<package pkgid="cd6aeab4faffa5d3f6b593951115f760d0e5dc45011e9295c1a1b98949db0677" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.16+git.124.aee309c5c18" rel="21.1"/>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
  <changelog author="scabrero@suse.com" date="1512043200">- Update to 4.6.11; (bsc#1084191)
  + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091);
  + s3: smbclient: Ensure we call client_clean_name() before all
    operations on remote pathnames; (bso#13093);
  + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load; (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + smbd: Move check for SMB2 compound request to new function; (bso#13047);
  + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + s4:pyparam: Fix resource leaks on error; (bso#13101);
  + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);</changelog>
  <changelog author="ddiss@suse.com" date="1520337600">- Update to 4.6.13; (bsc#1084191)
  + ceph_statx configure time check doesn't work with a non-default
  - -with-libcephfs path; (bso#13250).
  - follow up fix for libceph-common detection; (bso#13277).
  + Fail to copy file with empty FinderInfo from Windows client to Samba
    share with fruit; (bso#13181).
  + vfs_ceph uses a local statvfs() call to determine FS capabilities;
    (bso#13208).
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193).
  + smbd panic when chdir returns error during exit; (bso#13189).
  + ctdb_recovery_helper crashes if recovery process times out; (bso#13188).
  + POSIX ACL support is broken on hpux and possibly other big-endian OSs;
    (bso#13176).
  + Kerberos: PKINIT: Can't decode algorithm parameters in
    clientPublicValue; (bso#12986).
  + g_lock conflict detection broken when processing stale entries.;
    (bso#13195).
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132).</changelog>
  <changelog author="jmcdonough@suse.com" date="1520424000">- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
  (bso#11343); (bsc#1081741);</changelog>
  <changelog author="ddiss@suse.com" date="1527076800">- Fix vfs_ceph with "aio read size" or "aio write size" &gt; 0;
  (bsc#1093664).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425).
  + Fix memory leak in vfs_ceph; (bso#13424).
- Update to 4.6.14
  + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection;
    (bso#13294).
  + s3:smb2_server: correctly maintain request counters for compound
    requests; (bso#13215).
  + s3: smbd: Unix extensions attempts to change wrong field in fchown
    call; (bso#13375).
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338).
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297).
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270).
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we
    don't own it here; (bso#13244).
  + s3:libsmb: allow -U"\\administrator" to work; (bso#13206).
  + CVE-2018-1057: s4:dsdb: fix unprivileged password changes;
    (bso#13272); (bsc#1081024).
  + s3:smbd: Do not crash if we fail to init the session table;
    (bso#13315).
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310).
  + smbXcli: Add "force_channel_sequence"; (bso#13215).
  + smbd: Fix channel sequence number checks for long-running requests;
    (bso#13215).
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on
    expired sessions; (bso#13197).
  + s3:smbd: return the correct error for cancelled SMB2 notifies on
    expired sessions; (bso#13197).
  + samba: Only use async signal-safe functions in signal handler;
    (bso#13240).
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).</changelog>
  <changelog author="scabrero@suse.de" date="1533124800">- CVE-2018-10858: Insufficient input validation on client directory
  listing in libsmbclient; (bso#13453); (bsc#1103411);
- s3: winbind: Fix 'winbind normalize names' in wb_getpwsid();
  (bso#12851);
- winbind: avoid using fstrcpy in _dual_init_connection;
  (bso#13294); (bsc#1087303);
- Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); (bsc#1068059);
- net: fix net ads keytab handling; (bso#13166); (bsc#1067700);
- fix vfs_ceph flock stub; (bso#13506).</changelog>
  <changelog author="ddiss@suse.com" date="1534766400">- Update to 4.6.15
  + Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230);
  + Allow idmap_rid to have primary group other than "Domain Users";
    (bsc#1087931).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1539000000">- Update to 4.6.16; (bsc#1110943);
  + CVE-2018-10919: Fix unauthorized attribute access via searches;
    (bso#13434);</changelog>
</package>
<package pkgid="8a9a87b107862f51763689909cc8b409ab42cd4028e20e54ad1d1d848cb4b07f" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>
  <changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
  <changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
  <changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
  <changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
  <changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
</package>
<package pkgid="fc162ac710cb147507ba0a0c62fdb94ed9041ad5fc1216aaabd57d6dd8b45bb9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>
  <changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
  <changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
</package>
<package pkgid="5cede84d4dcd357749a005908625df53ed491376ace9c540970e1bb94ed0f9ab" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>
  <changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
  <changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
  <changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
  <changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
  <changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
  <changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
  <changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
  <changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
  <changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
  <changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
  <changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
  <changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
  <changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
  <changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
  <changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>
</package>
<package pkgid="2bfebfc0ff56f50c18c3c5b0e4028bf2ba351dbce596af3eb1a5808ec2476139" name="cups" arch="src">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="50a747e3516426bb06d33a4bb58fc4d4f949bd6d5f026cafbdef4ae38e8a2653" name="cups" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="d7da60c82ca592a2c5b78a6889f5d0b29ee62d7550df3a6a146ea2c7c17ed573" name="cups" arch="src">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="09a43e2d87eb11f372e60b6cf06e3c212f0af5f05cb527911e3c65811dd0b9c0" name="cups" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="2e49f5c8f833b70823b6242a3a097bbf1372a11f4e73e540bf47aafc543f3542" name="cups" arch="src">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="b1036dae97b10ccd02a2f315e94d24e759efcf123b129eee935f32a493cde09f" name="cups" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="21fd5c295772d95b5331836ba6756c18b714327ec6eaf5a82d686bd5b2320a17" name="cups-client" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="e6eb290f0d99bbcffda151560adb8f992a72b3a256decd3474062620aab0bdd9" name="cups-client" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="710e97db418ae4f8b35f5efb86d2a07a680a3122eae9179eec27d3ab2c8cee25" name="cups-client" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="5baa8fe3ef1b87aa19fba3576f0de2181768227475f921546b617add92d2b3a4" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="7cfaf628b964aecbaf93dcd85f2adaaa3cf5862ce317c51f2865b862a69ee0ae" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="ae9a25c15ea0bfd4df92781937c784c12eae9bf01e46594fbd31fa59a287a31d" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="24900491260bba30f8abf071154bab215386dc2fa8bf1f761e950561ddd2fbd9" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="ec64c6f2c9e5319a0ab78ce3f2e463988928e919a01d09d471e2b8526dde9e85" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="64767d08f24fef82831d98b784bfbef1800fad0c67f6f7befd76826ae80fb90b" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="40cdc370e9ce2be83c7df31e13acb2770eba42ba152944b98d1ba1ffd89402f8" name="cups-filters" arch="src">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="a4980fbd1782681de5f4334251693dce46a61c256373f27259e2563ed4f85aa0" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="6078f25ba4d4f5c3368914e144e48c927baaee49ab0c27e44b80c9b514261293" name="cups-filters-cups-browsed" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="71336d9466447ddea1192da3af13a2877312c4822d67f2d119d9c474d91f32b8" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="02d1c3e492514024f4018347d8288c79ac74db16d19b371ef140d9194ff91eec" name="cups-filters-foomatic-rip" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="01858882989505c27e78f4cdd44a033c2d9b87e0febac977c235c0f5e7d08cf8" name="cups-filters-ghostscript" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="4.2.1"/>
  <changelog author="jsmeix@suse.de" date="1402488000">- Version upgrade to 1.0.54
  Changes in 1.0.54 (excerpt):
  * pdftoraster: Support for output in the color spaces 18
    (CUPS_CSPACE_SW, sGray), 19 (CUPS_CSPACE_SRGB, sRGB), and 20
    (CUPS_CSPACE_ADOBERGB, Adobe RGB). No color management
    appropriate to these color spaces is added yet.
  * rastertopdf: Added new filter to convert PWG Raster input
    into a PDF file (using QPDF). This filter makes CUPS
    supporting the PWG Raster input format which is required to
    be supported by IPP Everywhere printers, making a shared
    CUPS queue emulating an IPP Everywhere printer. This is a
    first implementation which supports the black, RGB, CMYK,
    sGray, sRGB, and Adobe RGB color spaces (all mapped to
    DeviceGray, DeviceRGB, and DeviceCMYK resp. in the PDF
    output) with 1, 8, and 16 bits per component color
    depth. sGray, sRGB, and Adobe RGB are currently also mapped
    to DeviceGray and DeviceRGB and do not have the correct
    color management yet, so color output is not absolutely
    correct. Note that mime.types of CUPS up to 1.7.2 has a bug
    which prevents PWG Raster to be recognized, the
    "priority(100)" of the rule needs to be changed to
    "priority(150)".
  * cups-browsed: Create local queues also to access classes on
    remote CUPS servers (Ubuntu bug #1313741).
  * cups-browsed: Let a newly discovered printer not only
    overtaking an existing printer entry if it is from the same
    host (usually IPP -&gt; IPPS) or without host entry
    (unconfirmed local queue from previous cups-browsed session)
    but also if it is marked disappeared. So printer entries get
    correctly migrated when things like a host name change of
    the remote server happen.
  * cups-browsed: Always do case-insensitive comparing of
    strings, as CUPS queue names and URIs are case-insensitive
    (CUPS STR #4411).
  For details see the NEWS file.</changelog>
  <changelog author="jsmeix@suse.de" date="1402574400">- Have different header texts for the PDF-BANNER printouts
  (same headers as on the CUPS &lt;= 1.5.4 banner pages):
  Provide PDF template files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf and
  modify the matching /usr/share/cups/banners/ template files
  accordingly to use those PDF templates
  (see https://bugs.linuxfoundation.org/show_bug.cgi?id=1209).</changelog>
  <changelog author="jsmeix@suse.de" date="1406721600">- Version upgrade to 1.0.55
  Changes in 1.0.55 (excerpt - for details see the NEWS file):
  * pdftopdf: Fixed manual duplex by adding a blank page to even
    pages if the total number of pages of the document is odd.
    Otherwise the last page of the document would stay in
    the input tray. This fixes also a side effect as the set of
    even pages reducing to a zero page job if the job consists
    of only one page, making Poppler's pdftops error out
    (Ubuntu bug #1340435).
  * cups-browsed: Do not mark a discovered printer as already
    provided by another server when the other server's queue has
    "disappeared" status. This queue can be from the same server
    before it changed its name.
  * cups-browsed: Do not create a local queue pointing to a
    remote raw queue (Ubuntu bug #1335211).
  * foomatic-rip, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf: Added colord "device_inhibit" support for
    color-managed filters.
  * bannertopdf: Fixed "Printer Location" and "Driver Version"
    entries on test page/banners (linuxfoundation.org bug #1209).
  * bannertopdf: Added new PDF template files which contain the
    text strings appropriate to the banners, before the banners
    were all equal, without text (linuxfoundation.org bug #1209).
  * pstopdf: Use "grep -E" instead of "grep -P" as the latter
    generates executable code and executes it, requiring
    "execmem" privileges which could be not available in some
    security policies. Thanks to Tim Waugh from Red Hat for the
    patch (Red Hat bug #1079534).
  * pdftoraster: Fixed segfault caused by introduction of
    "no-color-management" option (linuxfoundation.org bug #1214).
  * libcupsfilters: Let cupsRasterParseIPPOptions() also accept
    "pwg-raster-document-type" settings with hyphen between
    color space name and color depth.
- Our separated source files classified.pdf confidential.pdf
  secret.pdf standard.pdf topsecret.pdf unclassified.pdf (see
  the entry below dated "Thu Jun 12 17:27:56 CEST 2014") are
  no longer needed because it is now provided in the upstream
  sources (see "linuxfoundation.org bug #1209" entries above).
- Added CVE-2014-4336 CVE-2014-4337 bnc#883543 and
  CVE-2014-4338 bnc#883536 to the matching entry below
  dated "Mon Apr 28 10:49:21 CEST 2014" because those CVEs
  and bncs have not been known at that time (cf. bnc#871327
  therein comment#47 and bnc#883307 therein comment#2).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.0.58
  Changes in 1.0.58 (excerpt - for details see the NEWS file):
  * pdftoraster: Changed ICC profile get function to accept a
    PPD fallback profile.
  * pdftoraster: Fixed handling of cupsColorSpaces 18,19,20.
  * rastertopdf: Grayscale color conversion now properly inverts
    bits.
  * rastertopdf: Implemented basic 8bit-&gt;8bit color space
    conversions.
  * rastertopdf: Added black point compensation.
  * rastertopdf: Added handling of color rendering intent.
  * gstoraster, imagetoraster, pdftoraster, rastertopclx,
    rastertopdf, foomatic-rip: Use color management functions in
    libcupsfilters.
  * libcupsfilters: Modified code formatting and documentation in
    the color management functions.
  * libcupsfilters: Fixed string handling and added debug log
    messages in the color management functions.
  * libcupsfilters: Fixed Adobe RGB matrix for proper rendering
    (transpose)
  * libcupsfilters: Moved color management functions from the
    individual filters to the libcupsfilters library.
- Version upgrade to 1.0.57
  Changes in 1.0.57 (excerpt - for details see the NEWS file):
  * Build system: Explicitly link to libm as -lm was dropped
    from cups-config --libs.
  * libcupsfilters, foomaticrip, gstoraster, imagetoraster,
    pdftoraster, rastertopclx, rastertopdf: Handle absence of
    colord or D-Bus gracefully (Ubuntu bug #1356405).
- Version upgrade to 1.0.56
  Changes in 1.0.56 (excerpt - for details see the NEWS file):
  * Major regression fix in cups-browsed (introduced in 1.0.55
    by no longer creating a local queue pointing to a remote
    raw queue that causes no longer creating local queues for
    traditional CUPS Browsing remote CUPS queues):
    Do not consider a remote CUPS queue as raw if the TXT record
    is NULL as for queues broadcasted by the legacy CUPS method
    the TXT record does not exist. Now  consider a queue with
    NULL TXT record only as raw if the domain entry is not empty
    which tells that the queue is Bonjour-broadcasted
    (linuxfoundation.org bug #1223).
  * cups-browsed: Do also not mark a discovered printer as
    already provided by another server when the other server's
    queue has "unconfirmed" status. Mark the other queue with
    "disappeared" or "unconfirmed" status as duplicate of the
    discovered printer so that the new queue for the discovered
    printer does not get removed when the entry for the other
    queue times out.
  * rastertopdf: Some code polishing and removal of now unneeded
    functions
  * rastertopdf: Reduced color space handling to only
    PWG-supported color spaces
  * rastertopdf: Added colorspace calibration function; included
    optional "/Alternate" PDF key for ICC profile embedding
  * rastertopdf: Colorspace sRGB now embeds srgb icc profile;
    implemented ICC Profile embedding (PDF 1.3 spec)
  * rastertopdf: Added basic color calibration
  * rastertopdf: Implemented ICC Profile creation code for IPP
    Everywhere (from PWG raster)
  * pdftoraster: Added colord handling of ICC profiles</changelog>
  <changelog author="jsmeix@suse.de" date="1408968001">- A /usr/bin/foomatic-rip -&gt; /usr/lib/cups/filter/foomatic-rip
  symlink is added to the cups-filters-foomatic-rip sub-package
  to make our lsb RPM installable again (bnc#892604).
  LSB currently requires /usr/bin/foomatic-rip but future LSB
  will require /usr/lib/cups/filter/foomatic-rip see
  https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3900</changelog>
  <changelog author="jsmeix@suse.de" date="1415620800">- During installation of a whole openSUSE system
  cups-filters-ghostscript can be installed before cups
  and then there is no /usr/share/cups/mime/ directory
  so that it is created if needed (bnc#904652).</changelog>
  <changelog author="tchvatal@suse.com" date="1425729600">- Version bump to 1.0.66:
  * Many fixes in cups-browsed in particular a SECURITY FIX:
    Fixed a bug in the remove_bad_chars() failing to reliably
    filter out illegal characters if there are two or more
    subsequent illegal characters, allowing execution of arbitrary
    commands with the rights of the "lp" user, using forged print
    service announcements on DNS-SD servers
    (CVE-2015-2265, boo#921753, linuxfoundation.org bug #1265).
  * Compat code for new poppler.
  * For detailed listing see NEWS file in documentation.
- Use .xz for tarball, bit smaller, adds dep on xz, no biggie</changelog>
  <changelog author="tchvatal@suse.com" date="1425729601">- Do no longer create foomatic-rip symlink that is now done
  by make install command (see linuxfoundation.org bug #1255
  and the entry dated "Mon Aug 25 15:30:37 CEST 2014" below).
- Fix postun call on cups-browsed to call right rpm macro</changelog>
  <changelog author="jsmeix@suse.de" date="1426161600">- Version upgrade to 1.0.67
  Changes in 1.0.67:
  * cups-browsed: Use g_source_remove() instead of
    g_source_destroy() for killing auto shutdown timers
    (Ubuntu bug #1427344).</changelog>
  <changelog author="tchvatal@suse.com" date="1426161601">- Reenable threads, seems to work fine. If there are thread
  related issues assign the bug to me.</changelog>
  <changelog author="jsmeix@suse.de" date="1426852800">- fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff
  makes it compile again without errors also for CUPS &lt;= 1.5.4
  by excluding code that uses CUPS &gt;= 1.6 specific stuff,
  in particular by skipping create_local_queue for non-CUPS
  printer broadcasts for CUPS &lt;= 1.5.4, see the upstream bug
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1268</changelog>
  <changelog author="jsmeix@suse.de" date="1426852801">- For SLE12 build it with traditional CUPS 1.5.4 to ensure
  it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1431604800">- Version bump to 1.0.68:
  * cups-browsed: Numeric IDs for GSources of the glib event
    loop must be positive integers greater than zero according
    to the documentation of the g_source_get_id() function.
    Taken care of this at all places.
  * cups-browsed: Added conditionals so that it also builds with
    CUPS 1.5.x (but then withou support for automatically creating
    queues for IPP network printers). Thanks to Johannes Meixner
    from SUSE for the patch (Bug #1268).
  * Ricoh-PDF_Printer-PDF.ppd: Added PPD file for Ricoh's PDF
    printers (experimental). Thanks to Ulrich Wehner from Ricoh
    for the file.
- Remove upstream merged patch:
  * fix-create_local_queue-ifndef-HAVE_CUPS_1_6.diff</changelog>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    (CVE-2015-3258, thanks to Stefan Cornelius fro Red Hat
    for the patch).
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking: lower-bounds
    for CVE-2015-3258 and upper-bounds for CVE-2015-3279
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking (CVE-2015-3279).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint (CVE-2015-8560).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    (CVE-2015-8327).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
</package>
<package pkgid="c1b966e88f21a25d14dbea73430d8ec0307a3b4b8270e58ded98e99bc5dbb14d" name="cups-libs" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="5b93dbb72221b820ee7f54722c046848e600c886ebd5f8951d7660372c72ebf1" name="cups-libs" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="0269c4671d8735a88b3a2219bd4f1c695b17a3c7e9898eaf31bd881a3d7461b9" name="cups-libs" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="aa4d1662439449c83ec7b021f623d089c44090b465c9a4b2209bec51b4397f37" name="cups-libs-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.3.1"/>
  <changelog author="jsmeix@suse.de" date="1354104000">- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
  adapts the defaults in cupsd.conf for SUSE.
  It replaces cups-1.3.6-access_conf.patch that
  added 'Allow 127.0.0.2' to cupsd.conf to allow access
  for the loopback IP address 127.0.0.2 which is set for
  the hostname by SUSE in /etc/hosts at least up to
  SLE10 products.
  It also replaces cups-1.5-additional_policies.patch
  that added the 'allowallforanybody' policy to cupsd.conf
  see https://fate.novell.com/303515
  Furthermore it fixes some issues with the CUPS upstream
  defaults i.e. removal of no longer supported keywords
  BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
  prints error messages of the form "Unknown directive
  BrowseOrder on line 22").
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
  reverts the incompatible change in CUPS 1.6
  that makes IPP version 2.0 default
  (see https://www.cups.org/str.php?L3929)
  back to using IPP version 1.1 by default.
  Otherwise CUPS 1.6 on clients cannot talk to older CUPS
  servers in particular not to CUPS 1.3.9 on SLE11.
  E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
  would fail on the client with "lpstat: Bad Request" and
  the CUPS 1.3.9 server logs in /var/log/cups/error_log the
  lines "E ... cupsdReadClient: ... IPP Read Error!"
  and "D ... cupsdSendError: ... code=400 (Bad Request)".</changelog>
  <changelog author="jsmeix@suse.de" date="1363694400">- Version upgrade to 1.6.2.
  CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
  For details regarding incompatible changes in CUPS 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  For details what is new in CUPS 1.6 see the CHANGES.txt file.
  Excerpt:
  * Security: All file, directory, user, and group settings
    are now stored in a separate cups-files.conf configuration
    file that cannot be set through the CUPS web interface
    or APIs (STR #4223).
  * The IPP backend could crash if the printer disconnects
    early (STR #4284).
  * cupsGetPPD did not work with statically-configured CUPS
    shared queues (STR #4178).
  * Bad IPP responses could crash ipptool (STR #4262).
  * Updated USB quirk rules for various printers
    (STR #4217, STR #4263, STR #4286).
  * Added USB blacklisting for printers that require a custom
    backend (STR #4218).
  * The CUPS library did not always detect a timed out connection
    to the server which could cause temporary loss of printing
    from applications (STR #4187).
  * The IPP backend now stops queues when the server configuration
    prevents successful job submission (STR #4125).
  * CUPS 1.6 clients using the ServerName directive in client.conf
    did not work with CUPS 1.3.x or older servers
    (STR #4231, STR #4291).
  * The scheduler could crash when using Avahi
    (STR #4183, STR #4192, STR #4200, STR #4213).
  * The IPP backend could get stuck in an endless loop on certain
    network errors (STR #4194).
  * The scheduler no longer allows job-name values that are
    not valid network Unicode strings (STR #4072).
  * The network backends now support disabling of SNMP supply
    level queries via the "snmp" URI option (STR #4106).
  * The IPP backend did not specify the compression used
    (STR #4181).
  * The scheduler did not recognize dnssd: or ipps: URIs as
    Bonjour shared queues (STR #4158).
  * Applications could not get the PPD file for
    statically-configured Bonjour-shared print queues (STR #4159).
  * Fixed a USB backend compatibility issue on systems using
    libusb (STR #4155, STR #4191).
  * Some Bonjour features were not available on systems
    with Avahi (STR #4156).
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
  obsolete because it is fixed upstream (STR #4231, STR #4291).
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
  replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
- Adapted cups-client.conf template file for CUPS 1.6.</changelog>
  <changelog author="jsmeix@suse.de" date="1373976000">- Version upgrade to 1.7rc1 only for testing purpose.
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  After a version upgrade to CUPS &gt;= 1.6 printing in the network
  would no longer work as it did up to CUPS 1.5.
  For details regarding incompatible changes in CUPS &gt;= 1.6 see
  https://bugzilla.novell.com/show_bug.cgi?id=735404
  and follow the links therein.
  The 1.7 series is primarily a "polish" release with improved
  support for paid, PIN, and release printing, expanded support
  for IPP Everywhere, automatic support for data compression,
  and improved CUPS APIs.
  CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
  and includes the fixes from CUPS 1.6.3, adds a new
  ippfind utility, fixes some issues in the ipptool utility,
  and fixes some general printing bugs.
  For details what is new in CUPS 1.7 see the CHANGES.txt file.
  Excerpt:
  * Printer xxx-default values were not reported by
    Get-Printer-Attributes or lpoptions (&lt;rdar://problem/14401795&gt;)
  * Added a new ippfind tool for finding IPP printers and
    other Bonjour services (&lt;rdar://problem/13876199&gt;)
- Version upgrade to 1.6.3
  CUPS 1.6.3 fixes some compatibility issues with servers
  running CUPS 1.3.12 or older, fixes some general printing bugs,
  and fixes some minor security issues.
  For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
  Excerpt:
  * The lp, lpq, lpr, and lpstat now display an error message
    advising the use of the /version=1.1 ServerName option
    (&lt;rdar://problem/14290628&gt;)
  * Added documentation about the /version=1.1 option to ServerName
    in client.conf (&lt;rdar://problem/14216262&gt;)
  * The lp, lpq, lpr, and lpstat commands incorrectly ignored
    the default printer set in the lpoptions file
    (&lt;rdar://problem/14216472&gt;)
  * Printing using "ipps" URIs was not encrypted.</changelog>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
</package>
<package pkgid="9d872db2c48cf9e6179532aacc491dc5d4840b7a0e13f4a79e9df4859b724b3c" name="cups-libs-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.6.1"/>
  <changelog author="jsmeix@suse.de" date="1383134400">- Version upgrade to 1.7.0
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS 1.5.
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  Changes since 1.7rc1 include (excerpt):
  * The lpadmin command did not send the PPD name from
    the "-m" option (&lt;rdar://problem/15264697&gt;).
  * The scheduler did not respond using the hostname
    specified by the client (&lt;rdar://problem/14583574&gt;).
  * Fixed a couple memory leaks in ippfind that were
    reported by Clang.
  * Fixed a compile issue on 64-bit Linux with Clang - need
    to use the -pie option instead of -Wl,-pie now
    (&lt;rdar://problem/14480938&gt;).
  * The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
    environment variable to the filters or backend
    (&lt;rdar://problem/14355011&gt;).
  For details see the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
</package>
<package pkgid="028f286f46e9ffdf0e72245e06e2f64af5d9fb481b906fc0c7cf93ea58065f33" name="cups-libs-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="12.9.1"/>
  <changelog author="jsmeix@suse.de" date="1393416000">- Version upgrade to 1.7.1 (fate#314630):
  CUPS &gt;= 1.6 has major incompatible changes compared to CUPS
  up to version 1.5.4 in particular when printing via network:
  * The IPP protocol default version increased form 1.1 to 2.0.
    Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
    reject IPP 2.0 requests with "Bad Request" (STR #4231).
    By adding '/version=1.1' to ServerName in client.conf
    (e.g. ServerName older.server.example.com/version=1.1)
    or the CUPS_SERVER environment variable value or by
    adding it to the server name value of the '-h' opion
    (e.g. lpstat -h older.server.example.com/version=1.1 -p)
    the older IPP protocol version for older servers
    must be explicitly specified.
  * CUPS Browsing is dropped in CUPS but the new package
    cups-filters provides the cups-browsed that provides
    basic CUPS Browsing and Polling functionality.
    The native protocol in CUPS for automatic client discovery
    of printers is now DNS-SD.
  * Some printing filters and backends are dropped in CUPS
    but the new package cups-filters provides them so that
    cups-filters is usually needed (recommended by RPM)
    but cups-filters is not strictly required.
  * The cupsd configuration directives are split into two files
    cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
    and cups-files.conf (can only be modified manually by root)
    to have better default protection against misuse of privileges
    by normal users who have been specifically allowed
    by root to do cupsd configuration changes
    (STR #4223 CVE-2012-5519 bnc#789566).
  See the entries below for more information.
  For details see the openSUSE Bugzilla bnc#735404 issue.
  CUPS 1.7.1 improves network and USB printing, fixes some
  scheduler issues, and addresses a minor security issue
  in the lppasswd program.
  Changes since 1.7.0 include (excerpt):
  * Security: the lppasswd program incorrectly used settings
    from ~/.cups/client.conf (STR #4319)
  * ATTR messages could cause string pool memory corruption
    in the scheduler (&lt;rdar://problem/15382819&gt;)
  * Printing to a raw queue could result in corrupt output
    due to opportunistic compression (&lt;rdar://problem/15008524&gt;)
  * Japanese PPDs using with the Shift-JIS encoding
    did not work (&lt;rdar://problem/15427759&gt;)
  * The libusb-based USB backend incorrectly used write
    timeouts (&lt;rdar://problem/15564888&gt;)
  * The IPP backend did not wait for a busy printer
    to become available before attempting to print
    (&lt;rdar://problem/15465667&gt;)
  * Using "@IF(name)" in an Allow or Deny rule
    did not work (STR #4328)
  * The D-BUS notifier did not remove its lockfile (STR #4314)
  * CUPS incorrectly used the USER environment variable when
    the name did not match the user ID (STR #4327)
  For details see the CHANGES.txt file.
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
  policy to cupsd.conf (fate#303515) and replaces
  cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
- Clean up of systemd unit files (bnc#857372):
  Make it working again as simple and secure as it worked
  all the time in the past by providing only one single
  systemd unit file cups.service. In particular currently YaST
  cannot manage services with additional other systemd unit files.
  Furthermore systemd socket activation is currently insecure
  in case of IPv6 (CVE-2012-6094 bnc#795624).
- Clean up how cupsd is launched (via SysVinit or systemd)
  by maintaining strictly separated sections in cups.spec:
  Either for launching cupsd via systemd (if have_systemd is set)
  or for launching cupsd via SysVinit (if have_systemd is not set).
  SysVinit support cannot be removed because CUPS 1.7.1 still
  builds and can be used even for SLE11.
- The default group of users who are allowed to do cupsd
  configuration changes via requests to the running cupsd
  (i.e. the SystemGroup directive in cupsd.conf) is set
  to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
  In this context a general security advice:
  When root allows normal users to do system administration tasks
  (in particular when root allows normal users to administer
  system processes - i.e. processes that run as root), then
  this or that kind of privilege escalation will be possible.
  Only trustworthy users who do not misuse their privileges
  may get allowed to do specific system administration tasks.</changelog>
  <changelog author="jsmeix@suse.de" date="1393502400">- str4351.patch from CUPS upstream fixes
  https://www.cups.org/str.php?L4351
  "STR #4351 cups-lpd hugh jobs (&gt;2G) fail"
  (bnc#864782).</changelog>
  <changelog author="jsmeix@suse.de" date="1397217600">- In case of systemd use --with-rundir=/run/cups
  instead of --with-rundir=/run (bnc#871640).</changelog>
  <changelog author="jsmeix@suse.de" date="1398254400">- Version upgrade to 1.7.2:
  CUPS 1.7.2 addresses a web interface redirection security issue,
  some scheduler crashed on Linux, and other general bug fixes.
  Changes since 1.7.1 include (excerpt):
  * CVE-2014-2856: The scheduler now blocks URLs containing
    embedded HTML (STR #4356 and bnc#873899).
  * cupsDoIORequest could miss the server status, causing failed
    lpadmin and other administrative commands (STR #4386).
  * Fixed a D-BUS threading issue that caused the scheduler
    to crash (STR #4347).
  * The scheduler now automatically reconnects to Avahi
    as needed (STR #4370, STR #4373).
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (&gt;2G) fail
  is obsolete because it is fixed upstream since CUPS 1.7.2.
- Removed the CUPS banner files in /usr/share/cups/banners/ and
  the CUPS testpage /usr/share/cups/data/testprint (which is also
  a CUPS banner file type) because they do no longer work
  since CUPS &gt;= 1.6 (see http://www.cups.org/str.php?L4120)
  because there is no longer a filter for Linux that can convert
  the CUPS banner files. Since CUPS &gt;= 1.6 only the banner files
  and testpage in the cups-filters package work via the
  cups-filters PDF workflow and the cups-filters package also
  provides the matching bannertopdf filter (bnc#873376).</changelog>
  <changelog author="jsmeix@suse.de" date="1401710400">- Version upgrade to 1.7.3:
  CUPS 1.7.3 includes a number of general bug fixes.
  Changes since 1.7.2 include (excerpt):
  * Fixed mapping of OutputBin values such as "Tray1".
  * Several ippGet* functions incorrectly returned -1
    instead of 0 on error.
  * Fixed an authentication race condition in
    cupsSendRequest (STR #4403).
  * The scheduler did not add the "job-hold-until-specified"
    reason when holding a job using the lp command (STR #4405).
  * Auto-typing of PWG Raster files did not work (STR #4417).
  * IPP queues using hardcoded credentials would ask
    for credentials (STR #4371).</changelog>
  <changelog author="jsmeix@suse.de" date="1405425600">- Version upgrade to 1.7.4:
  CUPS 1.7.4 fixes several networking and build issues,
  and addresses a symlink security issue CVE-2014-3537.
  Changes since 1.7.3 include (excerpt):
  * Security: The web interface incorrectly served symlinked files
    and files that were not world-readable, potentially leading to
    a disclosure of information (CVE-2014-3537, STR #4450,
    and bnc#887240).
  * The "snmp" option did not work with the network backends
    (STR #4422).
  * The User directive in client.conf did not override the USER
    environment variable (STR #4426).
  * The web interface now properly shows a "Go" button for
    all text-based browsers (STR #4425).
  * The MaxJobTime directive now properly supports time
    values (STR #4434).
  * Fixed an "IPP read error" race condition issue (STR #4440).</changelog>
  <changelog author="jsmeix@suse.de" date="1406635200">- str4455-1.7.patch complements the incomplete fix for
  CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
  to fix the subsequent CVE-2014-5029 CVE-2014-5030
  CVE-2014-5031 STR#4455 (bnc#887240).</changelog>
  <changelog author="jsmeix@suse.de" date="1408968000">- Version upgrade to 1.7.5:
  CUPS 1.7.5 addresses some minor issues and expands upon the
  symlink security protection. Changes include (excerpt):
  * Security: Addressed some more situations where symlinked
    files would be served by the web interface (CVE-2014-5029
    CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
  * The LPD backend did not work with some versions
    of glibc (STR #4452)
  * CGI scripts did not work (STR #4454)
- str4455-1.7.patch (see the previous entry below)
  is obsolete because it is fixed upstream since CUPS 1.7.5.
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
  avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
  because since CUPS 1.7.4/1.7.5 the cupsd web server does
  no longer follow symlinks to avoid the security issues
  mentioned in the previous two entries below
  (fixes bnc#892587 a regression of bnc#887240).</changelog>
  <changelog author="ro@suse.de" date="1411473600">- change BuildRequires for systemd to pkgconfig(systemd)
  and pkgconfig(libsystemd-daemon) to avoid build-cycles</changelog>
  <changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.7.5.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
  <changelog author="jsmeix@suse.de" date="1429704000">- str4609.CERT-VU-810572.CUPS-1.7.5.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  plus possible bad ld.so interaction via dynamic linker variables
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
  and cf. the entries about CVE-2012-5519 below.</changelog>
  <changelog author="jsmeix@suse.de" date="1463054400">- add_gziptoany_filter_when_raw_printing_multiple_files_GitHub4782.patch
  is the upstream patch part for scheduler/job.c from
  https://github.com/apple/cups/commit/f62664600159820a136a6e726a01a598b9ea292e
  adapted to fit exactly for CUPS-1.7.5
  that fixes raw printing multiple files by adding the gziptoany
  filter, see https://github.com/apple/cups/issues/4782
  (bsc#968706).
- cups-lpd_remove_adding_docname_GitHub4790.patch is an excerpt
  from the upstream patch part for scheduler/cups-lpd.c from
  https://github.com/apple/cups/commit/4cc64a80fd01016eb5c3b62b754fc684d87bfb89
  that avoids warnings in error_log of the form "Unexpected
  'document-name' operation attribute in a Create-Job request"
  see https://github.com/apple/cups/issues/4790
  (SUSE Service Request 10994025138)</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432 and
  fate#322052, submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432 and fate#322052.</changelog>
  <changelog author="jsmeix@suse.de" date="1495108800">- cups-scheduler_logs_jobs_at_loglevel_info.patch
  (made on Tue Jan 24 2017 by jcejka@suse.de)
  is based on the upstream patch
  https://github.com/apple/cups/commit/75c86da7a721554caea2dcc22a2f84b2fff465e8
  so that the scheduler now also logs messages for jobs at
  LogLevel "info", see https://github.com/apple/cups/issues/4815
  and bsc#1021133 and bsc#990045</changelog>
  <changelog author="kbabioch@suse.com" date="1519041600">- Add CVE-2017-18190.patch: Removed localhost.localdomain from list
  of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
  command execution in conjunction with DNS rebinding.
  (CVE-2017-18190 bsc#1081557)</changelog>
  <changelog author="jsmeix@suse.de" date="1522152000">- DBUS-notifications-could-crash-the-scheduler-Issue-5.patch
  ipp-The-scheduler-now-substitutes-default-values-for-inv.patch
  ipp-additional-changes-for-the-scheduler-to-substitute-d.patch
  fix
  * bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
  * bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
  which are the CUPS upstream issues
  * https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
  * https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
  * https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
  see also
  * bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks</changelog>
  <changelog author="jsmeix@suse.de" date="1529409600">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954-for-cups-1.7.5-stripped.diff
  is derived from
  'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  and stripped down to only what is needed for CUPS 1.7.5
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="scabrero@suse.de" date="1529582400">- 0004-Fix-authorization-check-for-kerberos-local-connectio.patch
  Fixes authorization check for clients (like samba) connected through the
  local socket when Kerberos authentication is enabled (bsc#1050082)</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch from SLE15 also applies to
  cups-1.7.5 in SLE12 and fixes CVE-2018-4700: session cookie
  is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="fcae7d5ce4f5f06639fc39fd24d4d2e2bd1b4f7cd25fcf796db868c0c53a5d26" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="20.1"/>
  <changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
  <changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
  <changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
  <changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
  <changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
  <changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
</package>
<package pkgid="a035bfd2e6038c4a172f3c77ad0f900878211833f352b24a069573ed76ce778a" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="20.1"/>
  <changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
  <changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
  <changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
  <changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
  <changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
  <changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
</package>
<package pkgid="3a0807074129f0da1b39a4de426f1cb4341d8ba31606854b6768010b7f3891b6" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="23.1"/>
  <changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
  <changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
</package>
<package pkgid="a5ff46b08e50fe2252c5adbca7aa0b86b5cbf41c37fe1306831bf9f030f49842" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="23.1"/>
  <changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
  <changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
</package>
<package pkgid="7fba60c5605d0c693611b0b3946b6987c348cf681795f2785590697659c05d64" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="27.1"/>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
</package>
<package pkgid="01ec4e2aa8600ba457481f591113e86de1bf5fd4d0d0246a50820d109ba2235e" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="27.1"/>
  <changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
</package>
<package pkgid="a2a3ff678eb8de039ff3957dedba6cc9f9fba3245378fa15f8cae0edf6b4fccd" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="30.1"/>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
</package>
<package pkgid="4f36c9f8326ce948f763c644021a9cbbfb29ce6fb8f20d9c7b5374403bdae9b0" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="30.1"/>
  <changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
  <changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
</package>
<package pkgid="f8963f947b7eaf6f999e0b6dc5a6a51b7fb6803791a0475737897cbe2badadf9" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="33.1"/>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
</package>
<package pkgid="5406c63f4504c82fcbe67a40fcae7a62d9e2b026ce01414077026529f5648831" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="33.1"/>
  <changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
</package>
<package pkgid="b41211c535fc4f0d13192b4671a74a9a9b5c14553770d137a1bfbd770ca99448" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="36.1"/>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
</package>
<package pkgid="a5b953e66719a15c6c5b99788f46d23088dfcc56d22494ce18452eba98c8ab55" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="36.1"/>
  <changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
  <changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
</package>
<package pkgid="2be4cbbf2382320150a6ef4153728e738bfcff5d1e7c24ff737ccc921eb6c613" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="39.1"/>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="8229b5853e1dee7090caa5f48cd338cdcd981508439e9ba716a215c91c9c105d" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="39.1"/>
  <changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
  <changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="8c91ccf074c5c6d4b001a8124b1e383a437315d73cf17b0b6ca0598856b074e5" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="42.1"/>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-7.37.0-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="6259f8c579d65763f0f99f78efea042a3d8945d9257779fda2c8e6f2ff040362" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="42.1"/>
  <changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-7.37.0-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="8aeff9f6117bd6ce4f970c48a89502105126b88cb6a7f990896a6e9384167a9e" name="curl" arch="src">
  <version epoch="0" ver="7.37.0" rel="45.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-7.37.0-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
</package>
<package pkgid="09de2285f321ea11d92686ad7aa6eb05d7f2e7e01c578cd3839122d7da29ffa2" name="curl" arch="x86_64">
  <version epoch="0" ver="7.37.0" rel="45.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438400">- Security fix [bsc#1069226, CVE-2017-8816]
  * Buffer overrun flaw in the NTLM authentication code.
  * Added patch curl-7.37.0-CVE-2017-8816.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511438401">- Security fix [bsc#1069222, CVE-2017-8817]
  * Read out of bounds flaw in the FTP wildcard function.
  * Added patch curl-7.37.0-CVE-2017-8817.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516622400">- Security fix [bsc#1077001, CVE-2018-1000007]
  * HTTP authentication leak in redirects
  * Added patch curl-7.37.0-CVE-2018-1000007.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596800">- Security Fix [bsc#1084521, CVE-2018-1000120]
  * FTP: reject path components with control codes
  * FTP path trickery leads to NIL byte out of bounds write
  * Added curl-7.37.0-CVE-2018-1000120.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596801">- Security Fix [bsc#1084524, CVE-2018-1000121]
  * openldap: check ldap_get_attribute_ber() results for NULL
  * LDAP NULL pointer dereference
  * Added curl-7.37.0-CVE-2018-1000121.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1520596802">- Security Fix [bsc#1084532, CVE-2018-1000122]
  * readwrite: RTSP RTP buffer over-read
  * Added curl-7.37.0-CVE-2018-1000122.patch
  * Modified curl-disable_failing_tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522152000">- If the DEFAULT_SUSE cipher list is not available use HIGH.
  * Added curl-HIGH-cipher-fallback.patch [bsc#1086825]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525694400">- Security Fix [bsc#1092098, CVE-2018-1000301]
  * RTSP bad headers buffer over-read
  * Added curl-CVE-2018-1000301.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976000">- Fixed erroneous debug message when paired with OpenSSL
  * Added curl-openssl-skip-trace-outputs.patch [bsc#1089533]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1535976001">- Security Fix [bsc#1106019, CVE-2018-14618]
  * NTLM password overflow via integer overflow
  * Added curl-7.37.0-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-7.37.0-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
</package>
<package pkgid="c87ff7366ca249aaf37d28774eea8c27b5f1e388f4173a6c02b18fc28e864c3d" name="cvs" arch="src">
  <version epoch="0" ver="1.12.12" rel="188.1"/>
  <changelog author="rguenther@suse.de" date="1158753600">- reference existing file in desktop file</changelog>
  <changelog author="rguenther@suse.de" date="1173268800">- use vitmp as default editor</changelog>
  <changelog author="rguenther@suse.de" date="1174564800">- add zlib-devel and gdbm-devel BuildRequires</changelog>
  <changelog author="coolo@suse.de" date="1178107200">- remove support for susehelp - as cvs is a base pack and susehelp
  isn't really used anymore</changelog>
  <changelog author="mkoenig@suse.de" date="1182254400">- adjust path to vitmp [#264909]</changelog>
  <changelog author="pth@suse.de" date="1194609600">- Make rcs2log request the installation of the rcs package if
  /usr/bin/rlog isn't found (#331967).
- Install man page for rcs2log.
- Use rpm macros for path names.
- Fix printf format strings.
- Resync patches.
- Give every patch a cvs- prefix.
- Recompress additional sources with bzip2.</changelog>
  <changelog author="schwab@suse.de" date="1214568000">- Fix gnulib macros.
- Fix printf format strings.</changelog>
  <changelog author="schwab@suse.de" date="1219060800">- Fix buggy AC_FUNC_MKTIME reimplementation.</changelog>
  <changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
  <changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>
</package>
<package pkgid="cea1ef859e5f76808b7c1271f6d998883054535b91b0c395032925fbdef9c373" name="cvs" arch="x86_64">
  <version epoch="0" ver="1.12.12" rel="188.1"/>
  <changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
  <changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>
</package>
<package pkgid="99adaf630adc4e246bfcea7302bfe1ca016158f84069b2fd5ad745d93fef76c0" name="cvs-doc" arch="noarch">
  <version epoch="0" ver="1.12.12" rel="188.1"/>
  <changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
  <changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>
</package>
<package pkgid="4611846a73b46c8ea90b1727741c953154a0d44ba46ec81da3e31f7d14f42b43" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="63468aeb937b674671633a4035ff512e2a98dec9e37f13f029e75df2f40be1ef" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="c1ad6ac32aa01480440371c07c61b05dfc805c73db5cb51819a8be0083a7942d" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="42430576e34ed82486f0147e55244076d49e5ab4efd57bcf7df3b5e1467abefc" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="893a5f23a4f9d630e91b17a11ac49ecb32f198fdeb1330b80fd0c8d0d62d6d47" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="68e27de9c235cecb42ac81bb45adf83002ebb95d969c519f050568c34e8407d9" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="8935b14e4e1aa7f422386cc63b042d566a0d882bdc16806b38b12163ffd68411" name="cyrus-sasl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="fa7f9a3bdad82fcda6cd7c5851d9b44fed5a8bfa9e59658e592e888602a58d1b" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="08ae92f7d7715951d8cd975035df60dafc4a2ce2173e136b7368bdc5a8b9c168" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="d797772688cb9348dadaeb2841bff8efd88fe775630ad1792cf215af6357df0f" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="eec10adf6a9a399c6d4b09525bcf9f7bb3b7337db459fc372612f70eb433fab8" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="04608d15db0102ad666cca409b765bc80fab9eb7abca8d05c79f0523f4f7b9ad" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="1dbfcbf095d197923dd98bf2780be60fb3388fcfefa50c31558661ec2c111013" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="6873fa6cc303659b11b6da0146e471214716f436e9923a873bbd430306a55499" name="cyrus-sasl-ldap-auxprop-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="c0ba05bbbf45bd8fbd8cd3606bd856b96efbad53aee8eb1e7cbdd6b24e773ebb" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="a9c1844562f363189232aa5d28c9de1fc428c53575bd9c997f4f1abb5df5e051" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="5546a7ac05b8960ccf79c3b06be9c0dc97509be3dcb780995608731c02f7a030" name="cyrus-sasl-otp-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="65ea03b215846d8ab24a762134fd876128e35feda5e0221cc3c7c142da3b0978" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="89ceaabab7f18233ee0bd84d176528c989b8de67e7a1ed3f3584c8bd40f260fa" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="2e7d8576eec1cb6845023c33f6e8be637b60cf73725f791d07e7462a7bb327fd" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="c50ff13a6e48592ff276e6336f9594ce4e8e684c40a525546ce3740fb07be29f" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="990e4514fd64ad6abdc81afd2601f7a1551dfc02b40dada1757dddd12cd4ca50" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="0ed3e8f38371bc2bcf565a3ec20d2228791af60dc06d20a47faf0360c97f7b19" name="cyrus-sasl-sqlauxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="be00d6a1751bc32c0a85931eb7b259c42dfcef0ac6aec25e226587d6a3a5f4ae" name="cyrus-sasl-sqlauxprop-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="14.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>
</package>
<package pkgid="acdeb6b7c56f8893a595f650a03bb718308697c3d9dd649a36b59ba4b74444bb" name="datovka" arch="src">
  <version epoch="0" ver="4.10.1" rel="5.1"/>
  <changelog author="tchvatal@suse.com" date="1433332800">- Version bump to 4.3.0:
  * No obvious changelog apart from mentioning bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1441454400">- Version bump 4.3.1:
  * Few small bugfixes see ChangeLog for details
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
</package>
<package pkgid="902512d8bd7e6c106a05526ff98e08eb2d039334b9ace18b75a892ef50ae67db" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.10.1" rel="5.1"/>
  <changelog author="tchvatal@suse.com" date="1433332800">- Version bump to 4.3.0:
  * No obvious changelog apart from mentioning bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1441454400">- Version bump 4.3.1:
  * Few small bugfixes see ChangeLog for details
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
</package>
<package pkgid="7e2091248a498008dd0e4bc398a38c894d53c349e7de92dc04797e68296965d4" name="datovka" arch="src">
  <version epoch="0" ver="4.10.3" rel="8.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="46466e255048c4ba5752408a88a8f1aec5ce38b6ef94b1f92a1078f3a182c5bc" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.10.3" rel="8.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="b48433145a64bae8bce5bdbc5c5803c757e7c746d954ab408d3c3d43fbf29171" name="datovka" arch="src">
  <version epoch="0" ver="4.12.0" rel="11.1"/>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Version update to 4.11.0:
  * Few feature enhancements in mesage composing</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540296000">- Use %license macros</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547640000">- Update to 4.12.0 bsc#1104620:
  * Bigger attachments allowed (50MB)
  * HiDPI icons
  * Minor fixes</changelog>
</package>
<package pkgid="deafd24c8ff7fb85bf6b8efc7de384a661c3d464dd1166657e8585cda523b1a5" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.12.0" rel="11.1"/>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Version update to 4.11.0:
  * Few feature enhancements in mesage composing</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540296000">- Use %license macros</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547640000">- Update to 4.12.0 bsc#1104620:
  * Bigger attachments allowed (50MB)
  * HiDPI icons
  * Minor fixes</changelog>
</package>
<package pkgid="8ffcbc6596a346a511a7a1e4996af52de054d94757dbf03f666a685819c1cc2c" name="db45-doc" arch="noarch">
  <version epoch="0" ver="4.5.20" rel="135.3.1"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="jengelh@medozas.de" date="1260100800">- Enable parallel building for libdb-4_5 package</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">* Preparing update to libdb-4.8:
  - Removed generic db provides
  - Fixed Requires of -devel subpackage
  - renamed db-utils, db-doc and db-utils-doc to db45-utils,
    db45-doc and db45-utils-doc</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324900800">- Remove redundant tags/sections</changelog>
  <changelog author="aj@suse.de" date="1332763200">- Drop check-build.sh, no need to check for at least kernel 2.6.4.</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="werner@suse.de" date="1371729600">- Let libdb-4_5-devel explicit conflict with libdb-4_8-devel</changelog>
  <changelog author="kpetsch@suse.com" date="1390478400">- Enabled part of the testsuite</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1498564800">- Added patch libdb-4_5-DB_CONFIG.patch [bsc#1043886]
  * DB_CONFIG file in the current working directory allows local
    users to obtain sensitive information via a symlink attack
    involving a setgid or setuid application.</changelog>
</package>
<package pkgid="02cb7f21c596cdaa8798ca41149cb72d00d6a90c056dbd77f22a728df368ad01" name="db45-utils" arch="x86_64">
  <version epoch="0" ver="4.5.20" rel="135.3.1"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="jengelh@medozas.de" date="1260100800">- Enable parallel building for libdb-4_5 package</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">* Preparing update to libdb-4.8:
  - Removed generic db provides
  - Fixed Requires of -devel subpackage
  - renamed db-utils, db-doc and db-utils-doc to db45-utils,
    db45-doc and db45-utils-doc</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324900800">- Remove redundant tags/sections</changelog>
  <changelog author="aj@suse.de" date="1332763200">- Drop check-build.sh, no need to check for at least kernel 2.6.4.</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="werner@suse.de" date="1371729600">- Let libdb-4_5-devel explicit conflict with libdb-4_8-devel</changelog>
  <changelog author="kpetsch@suse.com" date="1390478400">- Enabled part of the testsuite</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1498564800">- Added patch libdb-4_5-DB_CONFIG.patch [bsc#1043886]
  * DB_CONFIG file in the current working directory allows local
    users to obtain sensitive information via a symlink attack
    involving a setgid or setuid application.</changelog>
</package>
<package pkgid="a4dcc6e3e76f7036be0e5f12242d853a05571fcc8293178bd352cc8b8a26ceac" name="db45-utils-doc" arch="noarch">
  <version epoch="0" ver="4.5.20" rel="135.3.1"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="jengelh@medozas.de" date="1260100800">- Enable parallel building for libdb-4_5 package</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">* Preparing update to libdb-4.8:
  - Removed generic db provides
  - Fixed Requires of -devel subpackage
  - renamed db-utils, db-doc and db-utils-doc to db45-utils,
    db45-doc and db45-utils-doc</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324900800">- Remove redundant tags/sections</changelog>
  <changelog author="aj@suse.de" date="1332763200">- Drop check-build.sh, no need to check for at least kernel 2.6.4.</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="werner@suse.de" date="1371729600">- Let libdb-4_5-devel explicit conflict with libdb-4_8-devel</changelog>
  <changelog author="kpetsch@suse.com" date="1390478400">- Enabled part of the testsuite</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1498564800">- Added patch libdb-4_5-DB_CONFIG.patch [bsc#1043886]
  * DB_CONFIG file in the current working directory allows local
    users to obtain sensitive information via a symlink attack
    involving a setgid or setuid application.</changelog>
</package>
<package pkgid="ddfd79f73ccfcf81d114d4e330c80f40397ef80085ec1dacec47cdd0fecaeb1c" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="34.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260100800">- Enable parallel building for libdb-4_5 package</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="rhafer@novell.com" date="1285156800">- Updated to db-4.8.30. Important changes since 4.7:
  * Improved scalability and throughput when using BTree databases
    especially when running with multiple threads that equal or
    exceed the number of available CPUs.
  * Berkeley DB has added database partitioning. BTree or Hash
    databases may now be partitioned across multiple directories.
    Partitioned databases can be used to increase concurrency and to
    improve performance by spreading access across disk subsystems.
  * Berkeley DB now supports bulk insertion and deletion of data.
    Similar to the bulk get interface, the bulk put and bulk delete
    allow the developer to populate a buffer of key-value pairs and
    then pass it to the BDB library with a single API call.
  * Berkeley DB now supports compression when using BTree.
  * Berkeley DB introduces a new utility named db_sql which replaces
    db_codegen. Similar to db_codegen, db_sql accepts an input file
    with DDL statements and generates a Berkeley DB application
    using the C API that creates and performs CRUD operations on
    the defined tables. The developer can then use that code as a
    basis for further application development.
  * The Replication Manager now supports shared access to the Master
    database environment from multiple processes. In earlier
    versions, multiple process support on the Master required use
    of the Base Replication API.
  * Foreign Key Support has been added to Berkeley DB.
  * for a more detailed changelog see the changelog_4_8.html file
    in db-doc package.
- Removed db-utils-doc subpackage the utils documentation is now
  integrated with the API documentation.</changelog>
  <changelog author="rhafer@suse.de" date="1306152000">- Fixed summary of the -devel subpackage (bnc#694826)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1313236800">- Do not build static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="ro@suse.de" date="1353153600">- fix check-build.sh for kernel &gt; 3.0</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Rename db_ binaries to db48_ to make room for libdb-6_0
- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="werner@suse.de" date="1371556800">- Try to change baselibs.conf to fit coolo's comment hopefully</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1498564800">- Added patch libdb-4_8-DB_CONFIG.patch [bsc#1043886]
  * DB_CONFIG file in the current working directory allows local
    users to obtain sensitive information via a symlink attack
    involving a setgid or setuid application.</changelog>
</package>
<package pkgid="ac2d9cfe80b5a8f0b03a50a55390788da8ab3ba1427ab4a61b438f9cada3b7ff" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="34.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260100800">- Enable parallel building for libdb-4_5 package</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="rhafer@novell.com" date="1285156800">- Updated to db-4.8.30. Important changes since 4.7:
  * Improved scalability and throughput when using BTree databases
    especially when running with multiple threads that equal or
    exceed the number of available CPUs.
  * Berkeley DB has added database partitioning. BTree or Hash
    databases may now be partitioned across multiple directories.
    Partitioned databases can be used to increase concurrency and to
    improve performance by spreading access across disk subsystems.
  * Berkeley DB now supports bulk insertion and deletion of data.
    Similar to the bulk get interface, the bulk put and bulk delete
    allow the developer to populate a buffer of key-value pairs and
    then pass it to the BDB library with a single API call.
  * Berkeley DB now supports compression when using BTree.
  * Berkeley DB introduces a new utility named db_sql which replaces
    db_codegen. Similar to db_codegen, db_sql accepts an input file
    with DDL statements and generates a Berkeley DB application
    using the C API that creates and performs CRUD operations on
    the defined tables. The developer can then use that code as a
    basis for further application development.
  * The Replication Manager now supports shared access to the Master
    database environment from multiple processes. In earlier
    versions, multiple process support on the Master required use
    of the Base Replication API.
  * Foreign Key Support has been added to Berkeley DB.
  * for a more detailed changelog see the changelog_4_8.html file
    in db-doc package.
- Removed db-utils-doc subpackage the utils documentation is now
  integrated with the API documentation.</changelog>
  <changelog author="rhafer@suse.de" date="1306152000">- Fixed summary of the -devel subpackage (bnc#694826)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1313236800">- Do not build static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="ro@suse.de" date="1353153600">- fix check-build.sh for kernel &gt; 3.0</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Rename db_ binaries to db48_ to make room for libdb-6_0
- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="werner@suse.de" date="1371556800">- Try to change baselibs.conf to fit coolo's comment hopefully</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1498564800">- Added patch libdb-4_8-DB_CONFIG.patch [bsc#1043886]
  * DB_CONFIG file in the current working directory allows local
    users to obtain sensitive information via a symlink attack
    involving a setgid or setuid application.</changelog>
</package>
<package pkgid="46c0669e9a7ffcbe3f8e329cb07cfd151b3a8e764298be3c0be08283d57aa356" name="ddccontrol" arch="src">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="fc895a8ab861ffdc1182c62eb0f5997f49df7bd1490a5d3c89cd9235f9e76498" name="ddccontrol" arch="x86_64">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="2e4b73c9b10c33dc7dd31e45811062b26906c73a87a7db402c39ca666627c53f" name="ddccontrol-devel" arch="x86_64">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="f7960f39676b56a539294b484b1179af515a90bf803b8b6447eaeb369defcee1" name="ddccontrol-doc" arch="noarch">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="73a18c17f846c4c9e566dd994d9b1e884315e1ddd91198618160c20a01934683" name="ddccontrol-gtk" arch="x86_64">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="b8c21e7caf431539ec9eea537480a4e36a24a0d653891d9ac046b57aaa030445" name="ddccontrol-lang" arch="noarch">
  <version epoch="0" ver="0.4.2+20140105+git9d89d8c" rel="2.3.1"/>
  <changelog author="maximilian.staudt@suse.com" date="1454932800">- Initial version: git 9d89d8c (0.4.2 and further patches)
- 0002_cerrors.patch: Included from Debian 8 (jessie)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932801">- ddccontrol.spec: Simplified and corrected warnings emitted by rpmlint</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932802">- ddccontrol.spec: Fix build on i586 (_libdir)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1454932803">- ddccontrol.spec: Include ideas from sbrabec's spec file, split -doc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019200">- Simplify .spec
- Add remaining documentation
- Add rpmlintrc to silence warning on duplicate icons (they're not)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019201">- Remove pciutils-devel from BuildRequires - we don't build ddcpci</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019202">- Check in rpmlintrc</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019203">- Added udev rule to allow access to I2C buses on VGA adapters</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455019204">- libddccontrol depends on ddccontrol-db, add dependency</changelog>
  <changelog author="sndirsch@suse.com" date="1455105600">- specfile
  + don't use git commit in version, since it's not considered
    future proof for obvious reasons
  + replace lib Buildrequires by pkgconfig file buildrequires in
    order to make it package name independant
  + lib should require udev
  + move autogen.sh from %setup to %build section
  + remove unneeded .la file
  + add /usr/lib/udev/{,rules.d} directory to filelist (not sure
    why this is needed when udev is already required though)</changelog>
  <changelog author="maximilian.staudt@suse.com" date="1455105601">- Change source archive name to include last commit date
- Streamline udev rule handling in .spec file
- Simplify .spec file</changelog>
  <changelog author="mstaudt@suse.com" date="1476446400">- ddccontrol.spec: Remove AUTHORS sections</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Set proper Requires, Group, BuildArch and collect all directories
  in %files.</changelog>
  <changelog author="mstaudt@suse.com" date="1523448000">- 90-ddccontrol-i2c.rules:
  Fix typo that kept i2c-dev from being loaded.
  Fixes (boo#1088935).</changelog>
</package>
<package pkgid="1416b0f9dbb0979d7a09fca23bfc1844f5e4135f53b7ea2bc883726bc765bd19" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1505390400">- systemd update service: ConditionPathExists goes into [Unit] section</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822400">- (Weak) dependency on dehydrated-acmeresponder.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822401">- Swap statements in post: installing services requires tmp.d</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506081600">- Add man page
- Ensure dehydrated is always run as designated user
  * adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
  * adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
</package>
<package pkgid="17374866a7d72684befdd512f2ab1933a0f135c9222e7829035024daeea07de4" name="dehydrated" arch="src">
  <version epoch="0" ver="0.6.1" rel="2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1505390400">- systemd update service: ConditionPathExists goes into [Unit] section</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822400">- (Weak) dependency on dehydrated-acmeresponder.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822401">- Swap statements in post: installing services requires tmp.d</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506081600">- Add man page
- Ensure dehydrated is always run as designated user
  * adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
  * adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
</package>
<package pkgid="41de60af6912f3050d43385898a84d25698482b13c78d7a2d116427bde2e65ce" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1505390400">- systemd update service: ConditionPathExists goes into [Unit] section</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822400">- (Weak) dependency on dehydrated-acmeresponder.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822401">- Swap statements in post: installing services requires tmp.d</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506081600">- Add man page
- Ensure dehydrated is always run as designated user
  * adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
  * adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
</package>
<package pkgid="e3cc77733fd6d7c9393c5566f900e0d9dcc4b4f759c50901b8c8ac42fc673e94" name="dehydrated-lighttpd" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1505390400">- systemd update service: ConditionPathExists goes into [Unit] section</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822400">- (Weak) dependency on dehydrated-acmeresponder.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822401">- Swap statements in post: installing services requires tmp.d</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506081600">- Add man page
- Ensure dehydrated is always run as designated user
  * adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
  * adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
</package>
<package pkgid="0442c28dc0210f01deebfa63ddf10846f7bb355c80400a13686818e53aff1ec1" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1505390400">- systemd update service: ConditionPathExists goes into [Unit] section</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822400">- (Weak) dependency on dehydrated-acmeresponder.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1505822401">- Swap statements in post: installing services requires tmp.d</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506081600">- Add man page
- Ensure dehydrated is always run as designated user
  * adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
  * adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
</package>
<package pkgid="f5e944eee4838f3aade5772be27623bb83997ba140a9f12b9fb4660a4330be95" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="77.1"/>
  <changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
  <changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
  <changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
</package>
<package pkgid="08e49a26ad1e3ca236e895c6b42f37adbe1736b1471badf6cbfa04cee2b6b8b8" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="80.1"/>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
  <changelog author="zren@suse.com" date="1508932800">- Don't print error message on testing connect (bsc#1063051)
  + bug-1063051_clvmd-do-not-report-error-on-testing-connect.patch</changelog>
  <changelog author="zren@suse.com" date="1509105600">- Backport upstream various fixes for clvmd, bsc#1063051, bsc#1041424
  + bug-1063051_0001-clvmd-Fix-freeze-if-client-dies-holding-locks.patch
  + bug-1063051_0002-refactor-toolcontext-add-struct-cmd_context_initiali.patch
  + bug-1063051_0003-clvmd-check-for-pthread_create-status.patch
  + bug-1063051_0004-clvmd-add-debuglog-mutex.patch
  + bug-1063051_0005-clvmd-add-client-id-to-debug-log-messages.patch
  + bug-1063051_0006-cleanup-move-var-declaration.patch
  + bug-1063051_0007-clvmd-Fix-client-list-corruption.patch
  + bug-1041424_clvmd-add-mutex-protection-for-cpg_-call.patch</changelog>
  <changelog author="mwilck@suse.com" date="1513857600">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
</package>
<package pkgid="e23068740b1158fdc3fe3cc04aadce1d345f0d8590c087f283272879f7fd3be0" name="device-mapper-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="77.1"/>
  <changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
  <changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
  <changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
</package>
<package pkgid="65fbdabb20ed7fc2289f695cfb4c650e82e5399912a72d476a40239e45ea925f" name="device-mapper-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="80.1"/>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
  <changelog author="zren@suse.com" date="1508932800">- Don't print error message on testing connect (bsc#1063051)
  + bug-1063051_clvmd-do-not-report-error-on-testing-connect.patch</changelog>
  <changelog author="zren@suse.com" date="1509105600">- Backport upstream various fixes for clvmd, bsc#1063051, bsc#1041424
  + bug-1063051_0001-clvmd-Fix-freeze-if-client-dies-holding-locks.patch
  + bug-1063051_0002-refactor-toolcontext-add-struct-cmd_context_initiali.patch
  + bug-1063051_0003-clvmd-check-for-pthread_create-status.patch
  + bug-1063051_0004-clvmd-add-debuglog-mutex.patch
  + bug-1063051_0005-clvmd-add-client-id-to-debug-log-messages.patch
  + bug-1063051_0006-cleanup-move-var-declaration.patch
  + bug-1063051_0007-clvmd-Fix-client-list-corruption.patch
  + bug-1041424_clvmd-add-mutex-protection-for-cpg_-call.patch</changelog>
  <changelog author="mwilck@suse.com" date="1513857600">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
</package>
<package pkgid="0130c64ffa434af4c7aa562f241a1758c2d91dff0ca1cc53ff1ec3da9b3133dc" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="77.1"/>
  <changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
  <changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
  <changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
</package>
<package pkgid="cc1fbeef3739f91e30badee99ab19185f7321c4ca04d3abdcf2535cb02ae978c" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="80.1"/>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
  <changelog author="zren@suse.com" date="1508932800">- Don't print error message on testing connect (bsc#1063051)
  + bug-1063051_clvmd-do-not-report-error-on-testing-connect.patch</changelog>
  <changelog author="zren@suse.com" date="1509105600">- Backport upstream various fixes for clvmd, bsc#1063051, bsc#1041424
  + bug-1063051_0001-clvmd-Fix-freeze-if-client-dies-holding-locks.patch
  + bug-1063051_0002-refactor-toolcontext-add-struct-cmd_context_initiali.patch
  + bug-1063051_0003-clvmd-check-for-pthread_create-status.patch
  + bug-1063051_0004-clvmd-add-debuglog-mutex.patch
  + bug-1063051_0005-clvmd-add-client-id-to-debug-log-messages.patch
  + bug-1063051_0006-cleanup-move-var-declaration.patch
  + bug-1063051_0007-clvmd-Fix-client-list-corruption.patch
  + bug-1041424_clvmd-add-mutex-protection-for-cpg_-call.patch</changelog>
  <changelog author="mwilck@suse.com" date="1513857600">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
</package>
<package pkgid="d8d2852fc41ec2048085337d33942a38d8ad245cf74b4a1b1503bb85ad164809" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="77.1"/>
  <changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
  <changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
  <changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
</package>
<package pkgid="66209d8d02be38afda8de486064bb495d6560540409f929887fd240d0d7ae406" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.97" rel="80.1"/>
  <changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
  <changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
  <changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
  <changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
  <changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
  <changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
  <changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
  <changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
  <changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
  <changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
  <changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
  <changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
  <changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
  <changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>
  <changelog author="zren@suse.com" date="1508932800">- Don't print error message on testing connect (bsc#1063051)
  + bug-1063051_clvmd-do-not-report-error-on-testing-connect.patch</changelog>
  <changelog author="zren@suse.com" date="1509105600">- Backport upstream various fixes for clvmd, bsc#1063051, bsc#1041424
  + bug-1063051_0001-clvmd-Fix-freeze-if-client-dies-holding-locks.patch
  + bug-1063051_0002-refactor-toolcontext-add-struct-cmd_context_initiali.patch
  + bug-1063051_0003-clvmd-check-for-pthread_create-status.patch
  + bug-1063051_0004-clvmd-add-debuglog-mutex.patch
  + bug-1063051_0005-clvmd-add-client-id-to-debug-log-messages.patch
  + bug-1063051_0006-cleanup-move-var-declaration.patch
  + bug-1063051_0007-clvmd-Fix-client-list-corruption.patch
  + bug-1041424_clvmd-add-mutex-protection-for-cpg_-call.patch</changelog>
  <changelog author="mwilck@suse.com" date="1513857600">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
</package>
<package pkgid="9050233a284e9dec8149b5e44eaa354f02b340cdb4e48da69e6db55506554dd1" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="bffa0e0bd771d31e89c362b79f5c77ad1b368c084c0dca283166344da68ccac6" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="e5831ef177cd6815e52ad41647bf7714b89af781ef3a40f92540be7cf881a9ed" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="51bf243f518a6588a04a19fb1ea5bd398de295f7aa836c9c40f354665eb2773e" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="74bb46c281463504334f8533d15a128a015eae4d86b84aaeb6fb322975e6a6e8" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="9da857d413faf4c87df782c1d23593a01e6bdc1968303e344e7de398d5d97b17" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="dccf42e45e77f555941ec1a620bd78f67539a87a0915dda791df2014739e1f0a" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="f97ec29f5ddb65f610a46d49d9aae54dcc7814b10c104c2ed5ff72f5a83b2e57" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="fb7b52c04a0fec09b2f2713435e47990bde8df13c4ef3b9ce3a8b62e404d8a97" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="57f0ce7e833d902315058893d42180f2c616ca526d43ca86dcc313208d7b781a" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="a17f18f9e735ede9afecf009c948fa1973521f2563ddddf9e2d1d666b1e6d584" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="1caa54c747baded210e1c4dfe4a46a755d1812a56c32b493830f10a72d61d1b5" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="c6626de58b232e78106e86b69c87ab37bd8e03e8c8c9d2088cfc31f33022a0ff" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.3.1"/>
  <changelog author="mt@suse.com" date="1389355200">- Test if /etc/sysconfig/network/scripts/functions exists before
  sourcing it (fate#316768,bnc#856591).</changelog>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409745600">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
</package>
<package pkgid="6062b8cadeffdee7b0997dd81a9cdea8c365b9dd7e90540a100c04b9e014c7f5" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.3" rel="11.6.1"/>
  <changelog author="mt@suse.com" date="1392033600">- Initially switched to use systemd service files under systemd
  and enabled Restart=on-abort (fate#315133).
- Update to ISC dhcp-4.2.6 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.5:
  - Tidy up receive packet processing.
    Thanks to Brad Plank of GTA for reporting the issue and
    suggesting a possible patch. [ISC-Bugs #34447]
  - Fix the socket handling for DHCPv6 clients to allow multiple
    instances of a client on a single machine to work properly.
    Previously only one client would receive the packets.
    Thanks to Jiri Popelka at Red Hat for the bug report and a
    potential patch. [ISC-Bugs #34784]
  - Added support for gentle shutdown after signal is received.
    [ISC-Bugs #32692] [ISC-Bugs 34945]
  - Enhance the DHCPv6 server logging to include the addresses
    that are assigned to the clients.  This can be enabled by
    defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377]
  - Fix an operation in the DDNS code to be a bitwise instead
    of logical or. [ISC-Bugs #35138]
- Merged patches for dhcp-4.2.6 version to apply without fuzzy,
  prepended patch number prefixes to match spec file patch nr,
  added patch markup tags / bug numbers to the spec file.
- Applied contrib-lease-path pach to contrib.tar.gz
  [- contrib-lease-path.diff]
- Changed to require automake and use its config.sub and guess
  files instead of maintaining a patch.
  [- config-guess-sub-update.patch]
- Enabled to log DHCPv6 addresses assigned by server to clients
  [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch]
- Cleaned up documentation, rpmlint adjustments.</changelog>
  <changelog author="mt@suse.com" date="1395057600">- Added support for custom for rcdhcpd[6] check-syntax,check-lease
  and syntax-check actions (bnc#868713).</changelog>
  <changelog author="mt@suse.de" date="1396008000">- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535)
  [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  + 0018-dhcp-4.2.6-improved-xid.patch]</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="mt@suse.de" date="1402401600">- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install.
- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch]
- Fixed to write missed dhcp-ldap debug level messages (bnc#835818)
  [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch]
- Fixed unsupported dhclient-script used by sysconfig ifup to provide
  a function to calculate netmask. NetworkManager provides an own one.</changelog>
  <changelog author="mt@suse.de" date="1405684800">- Fixed to require iproute2 in dhcp-client package (bnc#885399)
- Disarmed dhclient-script when wicked is the network service,
  as wicked is using an another dhcp client (runtime conflict),
  NetworkManager an own script and sysconfig-network is gone on
  sles12 and opensuse &gt; 13.1, so it is obsolete and unsupported.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.
- Added missed service_add_pre macro calls for dhcrelay services</changelog>
  <changelog author="mt@suse.de" date="1418212800">- Applied fix by Jiri Slaby to not crash in interface discovery
  when the interface address is NULL, which has been introduced
  by the infiniband support patch (bsc#909189,bsc#870535).
  [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- do not check scripts not in the src.rpm
- fix bashisms in dhcprelay script
- Disabled /sbin/service legacy-action hooks on openSUSE &lt;= 13.1,
  which does not support it and causes build failure (bnc#891961).
- Removed gpg validation implicitly done by osc source_validator
  and gpg-offline dependency (blocks rebuilds).</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780, bsc#880984)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="nirmoy.das@suse.com" date="1453809600">- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]
- applied upstream security patch fixing  (bsc#961305,CVE-2015-8605)
  [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]</changelog>
  <changelog author="ndas@suse.de" date="1461758400">- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal
  libirs library that does not consider /etc/hosts and
  /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts
  and override standard glibc functions used in libldap(bsc#972907).
  [+ 0022-dhcp-4.x.x-apply-bind-changes.patch,
  + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]</changelog>
  <changelog author="ndas@suse.de" date="1466078400">- Add patch to limit the value of an fd we accept for a
  connection(bsc#969820).</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)
- Enable patch23 whcih was disabled by mistake before</changelog>
  <changelog author="ndas@suse.de" date="1499947200">-  Modify dhclient-script to handle static route updates (bsc#1023415).
  [+dhclient-script-handle-static-route-updates.patch]</changelog>
  <changelog author="ndas@suse.de" date="1511438400">- Only use 12-bit value from VLAN TCI for VID(bsc#1059061)
  [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch]
- fixed os error "Ambiguous tags: source12, source13, source14, source15"</changelog>
  <changelog author="ndas@suse.de" date="1515672000">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Integrate dhclient-script-handle-static-route-updates.patch into
  dhclient-script. We don't need to patch our own files.
- CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
- CVE-2018-5732, bsc#1083302: buffer overflow in dhclient.
- Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch
- Removed: dhclient-script-handle-static-route-updates.patch</changelog>
</package>
<package pkgid="f9a7347e472314739508080796f15697d5a477126e36077e5194afdd5db44421" name="diffoscope" arch="noarch">
  <version epoch="0" ver="85" rel="3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1454241600">- let there be diffoscope for openSUSE!</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1454241601">- add recommendations for tools which allows to interpret content</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1454414400">- clean with spec-cleaner
- change Recommends: to Suggests:
- use update-alternatives mechanism for binary not to conflict with
  python2 variant of the package when there is one</changelog>
  <changelog author="arun@gmx.de" date="1455796800">- update to version 49:
  * Don't crash when we can't find the debug file in a matching debug
    package.  This repairs diffoscope for xserver-xorg and other
    packages.
  * Use libarchive to read metadata from ar archives. The output is
    more precise and less dependent on binutils version. The command
    line `ar` tool is not used any more so remove it from the required
    tools.
  * Split readelf --debug-dump output when examining ELF files. Based
    on a patch by Dhole.
  * Keep both .debug_str and .zdebug_str as ElfSection. Thanks to
    Niels Thykier for noticing the problem.
  * Fix a logic error in _install_debug_symbols. Thanks anthraxx for
    the report and the fix.
  * Use recursive containers for directory and only look at files with
    ending in .deb when looking for Build IDs. Both avoid looking at
    too many files when searching for matching debug packages. Thanks
    Helmut Grohne and Steven Chamberlain for the reports and
    tests. (Closes: #813052)
  * Add support for ICC profiles. This adds a Recommends on colord in
    Debian.
  * Harmonize spaces and commas in package list.
  * Update PPU files test data for FPC 3.0.0.
  * Update exepcted javap output for OpenJDK 1.8.
  * Stop specializing files from directories earlier than necessary.
  * Adding cd-iccdump package reference for Arch Linux.
  * Use HTTPS in Vcs-Git.
  * Bump standards version to 3.9.7, no changes needed.
  * Use /git/ instead /cgit/ in Vcs-Browser.</changelog>
  <changelog author="bwiedemann@suse.com" date="1457870400">- We require python3-setuptools at runtime to work</changelog>
  <changelog author="arun@gmx.de" date="1460289600">- specfile:
  * fix update alternative (use %{py3_ver}, touch sysconfig dir)
- update to version 51:
  * Team upload.
  * Re-upload, the last uploaded tarball was broken, missing test
    files.
- changes from version 50:
  * Remove myself from uploaders (Jérémy Bobbio)
  * Show line ordering variation in deb md5sums
  * Reset mtimes of test directories and ignore ctimes (Closes:
    [#815171])
  * Add comparator for Postscript files</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1466683200">- update to 54:
  * In the directory comparator, fall back to current directory instead of
    empty name. (Closes: #820624)
  * Improve deb(5) support. (Closes: #818414)
  * debian/control: add myself to Uploaders.
  * Clean up temporary debuglink files.
  * Fix FileNotFoundError with broken symlinks. (Closes: #818856)
  * Decode Md5sumsFile in utf-8. (Closes: #823874)
  * Always suffix temporary files with '_diffoscope'.
  * Rewrite sanity check for the version to always run every time debian/rules
    is invoked, not only during a binary build.
  * Add FreeBSD packages for required tools.
  * Add README.rst to MANIFEST.in.
  * debian/gbp.conf: add a conf to have gbp tag the releases how we like them.
  * Drop transitional debbindiff package.
  * debian/control: Drop XS-Prefix from Testsuite: field, thanks lintian.
  * Mention --max-report-size only once in the manpage. (Closes: #819956)
  * Fix typo in documentation.
  * Bump Standards-Version to 3.9.8, no changes required.
  * Let objdump demangle symbols for better readability.
  * Install bin/diffoscope instead of auto-generated script. (Closes: #821777)
  * Team upload.
  * Re-upload, the last uploaded tarball was broken, missing test files.
  * Remove myself from uploaders
  * Show line ordering variation in deb md5sums
  * Reset mtimes of test directories and ignore ctimes (Closes: #815171)
  * Add comparator for Postscript files</changelog>
  <changelog author="kgronlund@suse.com" date="1489492800">- Update to 78:
  * Catch bad JSON errors on Python pre-3.5.  Closes: #855233
  * Correct logic of module_exists, ensuring we correctly skip in case of
    modules containing a dot in their name.  Closes: #854745
  * No need to track archive directory locations.
  * Add --exclude option.  Closes: #854783
  * When extracting archives, try to keep directory sizes small.
  * Extract archive members using an auto-incrementing integer, avoiding the
    need to sanitise filenames and avoiding writes to arbitrary locations.
    (Closes: #854723 * CVE-2017-0359)
  * Fix autopkgtest failures when Recommends are not installed.
    (Closes: #854593)
  * Specify &lt;html lang="en"&gt; in HTML output. (re. #849411)
  * Add a machine-readable JSON output format. (Closes: #850791)
  * Show results from debugging packages last. (Closes: #820427)
  * Add a --max-text-report-size option. (Closes: #851147)
    Clean all temp files in signal handler thread instead of attempting to
    bubble exception back to the main thread. (Closes: #852013)
  * Prevent FTBFS by loading fixtures as UTF-8 in case surrounding terminal
    is not Unicode-aware. (Closes: #852926)
  * Fix errors when comparing directories with non-directories.
    (Closes: #835641)
  * Fix behaviour of setting report maximums to zero (ie. no limits)
  * diffoscope.diff: Improve FIFO writing robustness.
  * haskell: Properly extract version from interface files.
  * Add markdown output support.  Closes: #848141
  * Add RestructuredText output format.
  * Improve --help output.  Closes: #852015
  * Don't blow up if directory containing ELF debug symbols already exists.
    (Closes: #850807)
  * Fix .APK extration when provided with absolute filenames.
    (Closes: #850485)
  * Support comparing .ico files using img2txt. (Closes: #850730)
  * comparators.utils.file: If we don't have an archive-extraction tool (eg.
    apktool), don't blow up when attempting to unpack it.
  * Include magic file type when we know the file format but can't find
    file-specific details. (Closes: #850850)
  * Ensure fake "APK metadata" file appears first, fixing non-deterministic
    tests/output.
  * Correctly escape value of href="" elements (re. #849411)
  * comparators/device: don't crash when comparing a non-device against a
    device (Closes: #850055)
  * Remove archive name from apktool.yml and rename it. (Closes: #850501)
  * Zipinfo included in APK files comparison. (Closes: #850502)
  * Add some tests for APK comparator.
  * Add image metadata comparison. (Closes: #849395)
  * Ensure imagemagick version is new enough for image metadata tests.
  * Extend .apk recognition regex to also match zip archives (Closes: #849638)
  * Update dex_expected_diffs and test requirement to ensure test compatibility
    with enjarify &gt;= 1.0.3. (Closes: #849142)
  * Add detection of order-only difference in plain text format.
    (Closes: #848049)
  * Fix sqlite3 magic recognition when using file &gt;= 5.27. (Closes: #830434)
  * Add argument completion feature to diffoscope. (Closes: #826711)
  * Improve message when data differs. (Closes: #827981)
  * Clarify the input arguments. (Closes: #826894)
  * Fix maybe_decode() so that it actually works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1501675200">- Update to 85:
  see GIT log for full list of changes
- fixes CVE-2017-0359 write to arbitrary locations
  (bsc#1025086)</changelog>
</package>
<package pkgid="ca5ac561540b46ac4e3e42a025bf6ce67ffd40f85d69e464138d55608572a8f2" name="diffoscope" arch="src">
  <version epoch="0" ver="85" rel="3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1454241600">- let there be diffoscope for openSUSE!</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1454241601">- add recommendations for tools which allows to interpret content</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1454414400">- clean with spec-cleaner
- change Recommends: to Suggests:
- use update-alternatives mechanism for binary not to conflict with
  python2 variant of the package when there is one</changelog>
  <changelog author="arun@gmx.de" date="1455796800">- update to version 49:
  * Don't crash when we can't find the debug file in a matching debug
    package.  This repairs diffoscope for xserver-xorg and other
    packages.
  * Use libarchive to read metadata from ar archives. The output is
    more precise and less dependent on binutils version. The command
    line `ar` tool is not used any more so remove it from the required
    tools.
  * Split readelf --debug-dump output when examining ELF files. Based
    on a patch by Dhole.
  * Keep both .debug_str and .zdebug_str as ElfSection. Thanks to
    Niels Thykier for noticing the problem.
  * Fix a logic error in _install_debug_symbols. Thanks anthraxx for
    the report and the fix.
  * Use recursive containers for directory and only look at files with
    ending in .deb when looking for Build IDs. Both avoid looking at
    too many files when searching for matching debug packages. Thanks
    Helmut Grohne and Steven Chamberlain for the reports and
    tests. (Closes: #813052)
  * Add support for ICC profiles. This adds a Recommends on colord in
    Debian.
  * Harmonize spaces and commas in package list.
  * Update PPU files test data for FPC 3.0.0.
  * Update exepcted javap output for OpenJDK 1.8.
  * Stop specializing files from directories earlier than necessary.
  * Adding cd-iccdump package reference for Arch Linux.
  * Use HTTPS in Vcs-Git.
  * Bump standards version to 3.9.7, no changes needed.
  * Use /git/ instead /cgit/ in Vcs-Browser.</changelog>
  <changelog author="bwiedemann@suse.com" date="1457870400">- We require python3-setuptools at runtime to work</changelog>
  <changelog author="arun@gmx.de" date="1460289600">- specfile:
  * fix update alternative (use %{py3_ver}, touch sysconfig dir)
- update to version 51:
  * Team upload.
  * Re-upload, the last uploaded tarball was broken, missing test
    files.
- changes from version 50:
  * Remove myself from uploaders (Jérémy Bobbio)
  * Show line ordering variation in deb md5sums
  * Reset mtimes of test directories and ignore ctimes (Closes:
    [#815171])
  * Add comparator for Postscript files</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1466683200">- update to 54:
  * In the directory comparator, fall back to current directory instead of
    empty name. (Closes: #820624)
  * Improve deb(5) support. (Closes: #818414)
  * debian/control: add myself to Uploaders.
  * Clean up temporary debuglink files.
  * Fix FileNotFoundError with broken symlinks. (Closes: #818856)
  * Decode Md5sumsFile in utf-8. (Closes: #823874)
  * Always suffix temporary files with '_diffoscope'.
  * Rewrite sanity check for the version to always run every time debian/rules
    is invoked, not only during a binary build.
  * Add FreeBSD packages for required tools.
  * Add README.rst to MANIFEST.in.
  * debian/gbp.conf: add a conf to have gbp tag the releases how we like them.
  * Drop transitional debbindiff package.
  * debian/control: Drop XS-Prefix from Testsuite: field, thanks lintian.
  * Mention --max-report-size only once in the manpage. (Closes: #819956)
  * Fix typo in documentation.
  * Bump Standards-Version to 3.9.8, no changes required.
  * Let objdump demangle symbols for better readability.
  * Install bin/diffoscope instead of auto-generated script. (Closes: #821777)
  * Team upload.
  * Re-upload, the last uploaded tarball was broken, missing test files.
  * Remove myself from uploaders
  * Show line ordering variation in deb md5sums
  * Reset mtimes of test directories and ignore ctimes (Closes: #815171)
  * Add comparator for Postscript files</changelog>
  <changelog author="kgronlund@suse.com" date="1489492800">- Update to 78:
  * Catch bad JSON errors on Python pre-3.5.  Closes: #855233
  * Correct logic of module_exists, ensuring we correctly skip in case of
    modules containing a dot in their name.  Closes: #854745
  * No need to track archive directory locations.
  * Add --exclude option.  Closes: #854783
  * When extracting archives, try to keep directory sizes small.
  * Extract archive members using an auto-incrementing integer, avoiding the
    need to sanitise filenames and avoiding writes to arbitrary locations.
    (Closes: #854723 * CVE-2017-0359)
  * Fix autopkgtest failures when Recommends are not installed.
    (Closes: #854593)
  * Specify &lt;html lang="en"&gt; in HTML output. (re. #849411)
  * Add a machine-readable JSON output format. (Closes: #850791)
  * Show results from debugging packages last. (Closes: #820427)
  * Add a --max-text-report-size option. (Closes: #851147)
    Clean all temp files in signal handler thread instead of attempting to
    bubble exception back to the main thread. (Closes: #852013)
  * Prevent FTBFS by loading fixtures as UTF-8 in case surrounding terminal
    is not Unicode-aware. (Closes: #852926)
  * Fix errors when comparing directories with non-directories.
    (Closes: #835641)
  * Fix behaviour of setting report maximums to zero (ie. no limits)
  * diffoscope.diff: Improve FIFO writing robustness.
  * haskell: Properly extract version from interface files.
  * Add markdown output support.  Closes: #848141
  * Add RestructuredText output format.
  * Improve --help output.  Closes: #852015
  * Don't blow up if directory containing ELF debug symbols already exists.
    (Closes: #850807)
  * Fix .APK extration when provided with absolute filenames.
    (Closes: #850485)
  * Support comparing .ico files using img2txt. (Closes: #850730)
  * comparators.utils.file: If we don't have an archive-extraction tool (eg.
    apktool), don't blow up when attempting to unpack it.
  * Include magic file type when we know the file format but can't find
    file-specific details. (Closes: #850850)
  * Ensure fake "APK metadata" file appears first, fixing non-deterministic
    tests/output.
  * Correctly escape value of href="" elements (re. #849411)
  * comparators/device: don't crash when comparing a non-device against a
    device (Closes: #850055)
  * Remove archive name from apktool.yml and rename it. (Closes: #850501)
  * Zipinfo included in APK files comparison. (Closes: #850502)
  * Add some tests for APK comparator.
  * Add image metadata comparison. (Closes: #849395)
  * Ensure imagemagick version is new enough for image metadata tests.
  * Extend .apk recognition regex to also match zip archives (Closes: #849638)
  * Update dex_expected_diffs and test requirement to ensure test compatibility
    with enjarify &gt;= 1.0.3. (Closes: #849142)
  * Add detection of order-only difference in plain text format.
    (Closes: #848049)
  * Fix sqlite3 magic recognition when using file &gt;= 5.27. (Closes: #830434)
  * Add argument completion feature to diffoscope. (Closes: #826711)
  * Improve message when data differs. (Closes: #827981)
  * Clarify the input arguments. (Closes: #826894)
  * Fix maybe_decode() so that it actually works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1501675200">- Update to 85:
  see GIT log for full list of changes
- fixes CVE-2017-0359 write to arbitrary locations
  (bsc#1025086)</changelog>
</package>
<package pkgid="3544e736a2f886b7fc729b91fa85181cea13135f35074cfee3ae647330532ad8" name="discount" arch="src">
  <version epoch="0" ver="2.2.4" rel="7.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1295092800">- initial version (2.0.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304510400">- update to 2.0.9: no user-visible changes
- changes from 2.0.8:
  * changes and optimizations were made in table handling
  * a collection of bug and documentation fixes were made
- changes from 2.0.7:
  * the PHP markdown-extra style footnotes were documented
  * a new public function was added to modify the output that is generated for
    them
  * a few small typographical corrections were made to other manpages
- changes from 2.0.6:
  * support was added for PHP markdown extra footnotes
- changes from 2.0.5:
  * small tweaks to the table-of-contents generator
  * a change to the arguments of linkyformat() for inside-tag formatting
  * adds an expanded definition of CSS class names to include dashes and
    underscores</changelog>
  <changelog author="lnussel@suse.de" date="1355832000">- correct license in spec file. It's actually BSD4c
- changes from version 2.1.5a:
  * MKD_NOSTYLE ? treat &lt;style&gt; blocks as regular html.
  * github flavored markdown support
  * in the markdown program, add
  - S flag (tell markdown to spit out style sections)
  - n flag (tell markdown not to output generated text)
- version 2.1.1.1 implements PHP markdown extra-style fenced code sections,
  where your chunks of code are surrounded by ~~~ lines instead of being
  indented 4 spaces.
- changes from version 2.1.0:
  * makepage now accepts markdown option flags a'la the markdown program (via
  - Fxxxx, -fname, or in the MARKDOWN_FLAGS environment variable.)
  * add a -E flag to theme to ignore context-sensitivity on &lt;?theme xxx?&gt; substitutions.</changelog>
  <changelog author="mardnh@gmx.de" date="1430395200">- update to 2.1.8a
- correct license in spec file. It's actually BSD-3-Clause
- added patch for fixing some comiler warnings:
  discount-fix-compile-warings.diff
- ran spec-cleaner and specfile cleanup
- change from version 2.1.8a
  When I put in the patch to ...
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  I messed up the format string and made the mangled email address into a fixed
  bogus string. Sigh. Fixed (thanks to a patch from Alessandro Ghedini), updated
  (and I really have to expand the runtime configuration flags array to be long
  enough to fit 64 settings, but that?s a fix for a different day) and released.
- change from version 2.1.8
  After a year or so of letting the code sit and slowly accumulate fixes, a new
  version which fixes a wad of bugs and adds a few new features. Some of this
  code is front other people, and those changes will be marked with their names:
  * FINALLY address the bug where markdown extra-style footnotes lose numbering
    when they show up in nested element; I was not carrying the m-e reference#
    inside the footnotes structure, but was instead carrying it in the parent
    structure and not updating it. So I changed the footnotes structure to
    include the reference + the list of footnotes, which made the misnumbering
    go away on my tests.
  * Fix makefile distclean to cleanup all the generated files and corrected the
    names of the installed sample program man pages to end in .1
    (Mark Pizzolato mark@infocomm.com)
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  * Add ?with-unmangled-email compile-time flag to disable mailto: mangling
  * Allow the magic output filename -, which means send output to stdout instead
    of to a file.
  * Fix a bug where autolink + github flavored markdown absorbs the ^C eoln
    character into a link at the end of a line.
  * Tweak install.samples so that the user can supply a SAMPLE_PFX on the
    command line SAMPLE_PFX=discount- make install.samples to install the sample
    programs with a package-specific prefix.
  * Emit pages in utf-8 instead of us-ascii (simply a change to the
    Content-Type meta) (Nathan Phillip Brink binki@gentoo.org)
  * Patch the horrible list handler to support long numeric list items
    (George Hartzell hartzell@alerce.com)
  * Various bugfixes (Masayoshi Sekimura sekimura@gmail.com)
  * Fix support for CFLAGS=-m32 ./configure.sh by using CFLAGS for all build
    invokations of CC. (Nathan Phillip Brink binki@gentoo.org)
  * Github-style language attributes on fenced code blocks
    (Loren Segal lsegal@amazon.com)
  * When defining WORD &amp; DWORD, check first for the MS Windows WinDef.h file;
    if found, include it instead of defining WORD &amp; DWORD ourselves.
  * support url-encoded anchor links with ?with-urlencoded-anchor option
    (Daisuke Murase typester@cpan.org)
- change from version 2.1.6
  does nothing except for some bugfixes (and ignores some particularly scary
  ones that I /must/ fix soon) and adds two small features.
  * A &lt; at the end of the input is exactly the same as \&lt;(space)
  * Markdown.pl does not appear to escape \&lt;[nonwhite] sequences. Sigh.
  * Tweak the previous Markdown does not escape... commit to simply push out
    the backslash and back up to the start of the &lt;[nonwhite] sequence,
    so -fnohtml will continue to work.
  * Treat hard &lt;br/&gt; (via two spaces) as whitespace.
  * Tweak divquote handling so that two adjacent divquotes won?t die if there
    is a space between the second &gt; &amp; leading %
  * Tweak one of the list tests back to the previous behavior (I?ve put in a
    hack for list indentation, and accidentally committed the changes. Oops!)
  The features are that I now use styles for table cell alignment instead of
  align=, and that I?m using the 3-clause BSD license for this release
  (because there is one widely used closed-source license that claims that you
  can?t dynamically link with code that uses the 4-clause license. Fine.
  I?ll 3-clause this release to make the stupid GPL happy.)</changelog>
  <changelog author="mardnh@gmx.de" date="1430395201">- add build condition "fenced_code" to conditionally run configure
  with "--with-fenced-code"
  Building with this condition enables PHP markdown extra-style fenced code
  sections, where your chunks of code are surrounded by ~~~ lines instead
  of being indented 4 spaces.</changelog>
  <changelog author="mailaender@opensuse.org" date="1432209600">- add symlink with update-alternatives to un-conflict Markdown.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 2.2.0
  * no changelog provided
- Build with optflags
- Refresh discount-disable_ldconfig.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1476619200">- Update to version 2.2.1:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1486641600">- Update to version 2.2.2:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Provide virtual package markdown</changelog>
  <changelog author="mpluskal@suse.com" date="1529928000">- Update to version 2.2.3a:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- Update to version 2.2.4:
  * No changelog provided
  * fixes:
    + boo#1094809 CVE-2018-11468 heap-based buffer over-read __mkd_trim_line function in mkdio.c
    + boo#1098252 CVE-2018-12495 heap-based buffer over-read via a crafted file</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update changelog with references to security issues fixed</changelog>
</package>
<package pkgid="48c1102bac402b60d11a45ac50d83a7f2a8de11500b34813c6c6cc7709a6b3aa" name="discount" arch="x86_64">
  <version epoch="0" ver="2.2.4" rel="7.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1295092800">- initial version (2.0.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304510400">- update to 2.0.9: no user-visible changes
- changes from 2.0.8:
  * changes and optimizations were made in table handling
  * a collection of bug and documentation fixes were made
- changes from 2.0.7:
  * the PHP markdown-extra style footnotes were documented
  * a new public function was added to modify the output that is generated for
    them
  * a few small typographical corrections were made to other manpages
- changes from 2.0.6:
  * support was added for PHP markdown extra footnotes
- changes from 2.0.5:
  * small tweaks to the table-of-contents generator
  * a change to the arguments of linkyformat() for inside-tag formatting
  * adds an expanded definition of CSS class names to include dashes and
    underscores</changelog>
  <changelog author="lnussel@suse.de" date="1355832000">- correct license in spec file. It's actually BSD4c
- changes from version 2.1.5a:
  * MKD_NOSTYLE ? treat &lt;style&gt; blocks as regular html.
  * github flavored markdown support
  * in the markdown program, add
  - S flag (tell markdown to spit out style sections)
  - n flag (tell markdown not to output generated text)
- version 2.1.1.1 implements PHP markdown extra-style fenced code sections,
  where your chunks of code are surrounded by ~~~ lines instead of being
  indented 4 spaces.
- changes from version 2.1.0:
  * makepage now accepts markdown option flags a'la the markdown program (via
  - Fxxxx, -fname, or in the MARKDOWN_FLAGS environment variable.)
  * add a -E flag to theme to ignore context-sensitivity on &lt;?theme xxx?&gt; substitutions.</changelog>
  <changelog author="mardnh@gmx.de" date="1430395200">- update to 2.1.8a
- correct license in spec file. It's actually BSD-3-Clause
- added patch for fixing some comiler warnings:
  discount-fix-compile-warings.diff
- ran spec-cleaner and specfile cleanup
- change from version 2.1.8a
  When I put in the patch to ...
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  I messed up the format string and made the mangled email address into a fixed
  bogus string. Sigh. Fixed (thanks to a patch from Alessandro Ghedini), updated
  (and I really have to expand the runtime configuration flags array to be long
  enough to fit 64 settings, but that?s a fix for a different day) and released.
- change from version 2.1.8
  After a year or so of letting the code sit and slowly accumulate fixes, a new
  version which fixes a wad of bugs and adds a few new features. Some of this
  code is front other people, and those changes will be marked with their names:
  * FINALLY address the bug where markdown extra-style footnotes lose numbering
    when they show up in nested element; I was not carrying the m-e reference#
    inside the footnotes structure, but was instead carrying it in the parent
    structure and not updating it. So I changed the footnotes structure to
    include the reference + the list of footnotes, which made the misnumbering
    go away on my tests.
  * Fix makefile distclean to cleanup all the generated files and corrected the
    names of the installed sample program man pages to end in .1
    (Mark Pizzolato mark@infocomm.com)
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  * Add ?with-unmangled-email compile-time flag to disable mailto: mangling
  * Allow the magic output filename -, which means send output to stdout instead
    of to a file.
  * Fix a bug where autolink + github flavored markdown absorbs the ^C eoln
    character into a link at the end of a line.
  * Tweak install.samples so that the user can supply a SAMPLE_PFX on the
    command line SAMPLE_PFX=discount- make install.samples to install the sample
    programs with a package-specific prefix.
  * Emit pages in utf-8 instead of us-ascii (simply a change to the
    Content-Type meta) (Nathan Phillip Brink binki@gentoo.org)
  * Patch the horrible list handler to support long numeric list items
    (George Hartzell hartzell@alerce.com)
  * Various bugfixes (Masayoshi Sekimura sekimura@gmail.com)
  * Fix support for CFLAGS=-m32 ./configure.sh by using CFLAGS for all build
    invokations of CC. (Nathan Phillip Brink binki@gentoo.org)
  * Github-style language attributes on fenced code blocks
    (Loren Segal lsegal@amazon.com)
  * When defining WORD &amp; DWORD, check first for the MS Windows WinDef.h file;
    if found, include it instead of defining WORD &amp; DWORD ourselves.
  * support url-encoded anchor links with ?with-urlencoded-anchor option
    (Daisuke Murase typester@cpan.org)
- change from version 2.1.6
  does nothing except for some bugfixes (and ignores some particularly scary
  ones that I /must/ fix soon) and adds two small features.
  * A &lt; at the end of the input is exactly the same as \&lt;(space)
  * Markdown.pl does not appear to escape \&lt;[nonwhite] sequences. Sigh.
  * Tweak the previous Markdown does not escape... commit to simply push out
    the backslash and back up to the start of the &lt;[nonwhite] sequence,
    so -fnohtml will continue to work.
  * Treat hard &lt;br/&gt; (via two spaces) as whitespace.
  * Tweak divquote handling so that two adjacent divquotes won?t die if there
    is a space between the second &gt; &amp; leading %
  * Tweak one of the list tests back to the previous behavior (I?ve put in a
    hack for list indentation, and accidentally committed the changes. Oops!)
  The features are that I now use styles for table cell alignment instead of
  align=, and that I?m using the 3-clause BSD license for this release
  (because there is one widely used closed-source license that claims that you
  can?t dynamically link with code that uses the 4-clause license. Fine.
  I?ll 3-clause this release to make the stupid GPL happy.)</changelog>
  <changelog author="mardnh@gmx.de" date="1430395201">- add build condition "fenced_code" to conditionally run configure
  with "--with-fenced-code"
  Building with this condition enables PHP markdown extra-style fenced code
  sections, where your chunks of code are surrounded by ~~~ lines instead
  of being indented 4 spaces.</changelog>
  <changelog author="mailaender@opensuse.org" date="1432209600">- add symlink with update-alternatives to un-conflict Markdown.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 2.2.0
  * no changelog provided
- Build with optflags
- Refresh discount-disable_ldconfig.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1476619200">- Update to version 2.2.1:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1486641600">- Update to version 2.2.2:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Provide virtual package markdown</changelog>
  <changelog author="mpluskal@suse.com" date="1529928000">- Update to version 2.2.3a:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- Update to version 2.2.4:
  * No changelog provided
  * fixes:
    + boo#1094809 CVE-2018-11468 heap-based buffer over-read __mkd_trim_line function in mkdio.c
    + boo#1098252 CVE-2018-12495 heap-based buffer over-read via a crafted file</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update changelog with references to security issues fixed</changelog>
</package>
<package pkgid="04b749f4649408d360dbd7037701f2d7ea00bc9af763e0a56cb72e92501f002e" name="dmenu" arch="src">
  <version epoch="0" ver="4.5" rel="16.3.1"/>
  <changelog author="sschober@suse.de" date="1185537600">- initial packaging.</changelog>
  <changelog author="sschober@suse.de" date="1191412800">- updated to version 3.4</changelog>
  <changelog author="sschober@suse.de" date="1192104000">- incorporated latest changeset [231:9ab649b3b3e5]</changelog>
  <changelog author="seiler@b1-systems.de" date="1332158400">- updated to version 4.5
  Changelog:
  http://hg.suckless.org/dmenu/log
- enhanced description
- removed package name from summary
- added new files to %file section</changelog>
  <changelog author="seiler@b1-systems.de" date="1337083200">- added link to dmenu changelog in the *.changes file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435924800">- spec cleaned with spec-cleaner</changelog>
  <changelog author="msuchanek@suse.com" date="1530187200">- Add dmenu_path script from v4.8 (boo#1100004)</changelog>
</package>
<package pkgid="fa3c0258c9c6916571ac804d019ef6cb13da24d2afe446c956839cb4bd7df739" name="dmenu" arch="x86_64">
  <version epoch="0" ver="4.5" rel="16.3.1"/>
  <changelog author="sschober@suse.de" date="1185537600">- initial packaging.</changelog>
  <changelog author="sschober@suse.de" date="1191412800">- updated to version 3.4</changelog>
  <changelog author="sschober@suse.de" date="1192104000">- incorporated latest changeset [231:9ab649b3b3e5]</changelog>
  <changelog author="seiler@b1-systems.de" date="1332158400">- updated to version 4.5
  Changelog:
  http://hg.suckless.org/dmenu/log
- enhanced description
- removed package name from summary
- added new files to %file section</changelog>
  <changelog author="seiler@b1-systems.de" date="1337083200">- added link to dmenu changelog in the *.changes file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435924800">- spec cleaned with spec-cleaner</changelog>
  <changelog author="msuchanek@suse.com" date="1530187200">- Add dmenu_path script from v4.8 (boo#1100004)</changelog>
</package>
<package pkgid="79dc83650ff2c350246f68fc990122867bc0a13e03cc1dd56633daf078f777f4" name="dmidecode" arch="src">
  <version epoch="0" ver="3.0" rel="5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1237982400">- Initial packaging. Historically, dmidecode had been part of the
  pmtools package, but it didn't make that much sense so it now has
  its own package.
- Initial version: 2.10.</changelog>
  <changelog author="coolo@suse.de" date="1241524800">- obsolete pmtools, but do not provide it as it's not a rename</changelog>
  <changelog author="jdelvare@suse.de" date="1283947200">- dmidecode-fix-makefile-for-GNU-make-3.82.patch: Drop BSD make
  command in Makefile, as GNU make 3.82 chokes on it.</changelog>
  <changelog author="jdelvare@suse.de" date="1295524800">- Update to upstream version 2.11:
  * Adds support for SMBIOS 2.6.1 and 2.7. This includes new
    enumerated values for recent hardware.
  * Obsoletes dmidecode-fix-makefile-for-GNU-make-3.82.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1295956800">- dmidecode-fix-memory-array-location-overrun.patch: Fix boundary
  checks of memory array location codes (DMI type 16).</changelog>
  <changelog author="jdelvare@suse.de" date="1302696000">- dmidecode-add-SMBIOS-2_7_1-support.patch: Add enumerated values
  from SMBIOS 2.7.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware. This
    fixes bsc#955705 and bsc#974862.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch and
    dmidecode-1.177-decode-pcie3-slot-id.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1548763200">- dmidecode-07-extensions-to-memory-device-type-17.patch:
  dmidecode: Extensions to Memory Device (Type 17) (FATE#326831
  bsc#1120149)
- dmidecode-08-add-logical-non-volatile-memory.patch: dmidecode:
  Add "Logical non-volatile device" to the memory device types
  (FATE#326831 bsc#1120149)</changelog>
</package>
<package pkgid="0c16ad0ba741262b8f1aaf7ec82b12212804b1318d5ee8a0f54a000bbc9fc5bc" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.0" rel="5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1237982400">- Initial packaging. Historically, dmidecode had been part of the
  pmtools package, but it didn't make that much sense so it now has
  its own package.
- Initial version: 2.10.</changelog>
  <changelog author="coolo@suse.de" date="1241524800">- obsolete pmtools, but do not provide it as it's not a rename</changelog>
  <changelog author="jdelvare@suse.de" date="1283947200">- dmidecode-fix-makefile-for-GNU-make-3.82.patch: Drop BSD make
  command in Makefile, as GNU make 3.82 chokes on it.</changelog>
  <changelog author="jdelvare@suse.de" date="1295524800">- Update to upstream version 2.11:
  * Adds support for SMBIOS 2.6.1 and 2.7. This includes new
    enumerated values for recent hardware.
  * Obsoletes dmidecode-fix-makefile-for-GNU-make-3.82.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1295956800">- dmidecode-fix-memory-array-location-overrun.patch: Fix boundary
  checks of memory array location codes (DMI type 16).</changelog>
  <changelog author="jdelvare@suse.de" date="1302696000">- dmidecode-add-SMBIOS-2_7_1-support.patch: Add enumerated values
  from SMBIOS 2.7.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware. This
    fixes bsc#955705 and bsc#974862.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch and
    dmidecode-1.177-decode-pcie3-slot-id.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1548763200">- dmidecode-07-extensions-to-memory-device-type-17.patch:
  dmidecode: Extensions to Memory Device (Type 17) (FATE#326831
  bsc#1120149)
- dmidecode-08-add-logical-non-volatile-memory.patch: dmidecode:
  Add "Logical non-volatile device" to the memory device types
  (FATE#326831 bsc#1120149)</changelog>
</package>
<package pkgid="51ac1874f16155c569bfdd356aba83b1e0591334c79f8a4f9dc2c82a04dcd878" name="dmraid" arch="src">
  <version epoch="0" ver="1.0.0.rc16" rel="42.1"/>
  <changelog author="hare@suse.de" date="1227528000">- Properly quote mkinitrd scripts (bnc#447966)</changelog>
  <changelog author="jansimon.moeller@opensuse.org" date="1249214400">- The cmdline options don't work when compiling the events module
  on ARM. Add patch to directly include the ldflags in the
  Makefile.</changelog>
  <changelog author="hvogel@novell.com" date="1251115200">- Fix activation of isw raid sets when the disks have serialnumber
  longer then 16 characters
- Add patch adding --rm_partitions cmdline option and functionality
- Fix mismatch between BIOS and dmraid's view of ISW raid 10 sets</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254571200">- fix directory handle leaks in libdmraid-events [bnc#524202]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254744000">- fix a few more fdleaks [bnc#543151]</changelog>
  <changelog author="nfbrown@novell.com" date="1265112000">- new upstream version, including latest CVS updates.
  Both libdmraid-events and dm_dso_reg_tool are not
  in the main package.
- dm_dso_reg_tool has been renamed to dmevent_tool in
  line with upstream change.
  bnc#528796 bnc#511329</changelog>
  <changelog author="nfbrown@novell.com" date="1271678400">- handle_space: cope with arrays with spaces in the name stored
  in the metadata (bnc#470696)
- remove_trylock: pthreads_mutex_trylock is still very new in
  glibc so safest not to use it yet (bnc#594388)</changelog>
  <changelog author="lnussel@suse.de" date="1306497600">- don't hard require boot.device-mapper in boot.dmraid. dm-mod is
  autoloaded when accessing /dev/mapper/control anyways.</changelog>
  <changelog author="nfbrown@suse.com" date="1316606400">- rebuild.fix: When a rebuild is requested that
  cannot be handled, report and error instead of
  crashing (bnc#716904)
- ddf-erase: Allow dmraid to erase ddf metadata
  properly (bnc#712671)</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Add automake as buildrequires.</changelog>
  <changelog author="cfarrell@suse.com" date="1341835200">- license update: GPL-2.0
  See lib/register/dmreg.c and tools/dmevent_tool.c (both have GPL-2.0
  license)</changelog>
  <changelog author="rmilasan@suse.com" date="1354104000">- Move lock file to /run/lock so it wont interfere with systemd.</changelog>
  <changelog author="ohering@suse.de" date="1374580800">- Remove usage of absolute paths in initrd
- Remove some checks from mkinitrd scripts, they are always true
- List all used binaries in programs tag</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379073600">- Fix Makefiles so they support DESTDIR
  Added: dmraid-destdir.patch
- add tmpfiles.d so runtime directories are properly created
- Remove sysvinit support and replace it for native systemd support.
  Added: dmraid-activation.service
  Removed: boot.dmraid</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- Use rpm macros to only trigger one initrd rebuild per install/update</changelog>
  <changelog author="jeffm@suse.com" date="1406289600">- Rename README.SuSE to README.SUSE (bnc#889025).</changelog>
  <changelog author="dimstar@opensuse.org" date="1415620800">- Own /usr/lib/tmpfiles.d: in the past, we were lucky for another
  package in the build dependency chain to own this for us, but in
  fact we should do it ourselves (bnc#942987)</changelog>
  <changelog author="mwilck@suse.com" date="1509019200">- Remove partitions with O_RDONLY (bsc#1060551)
  * add 0001-remove-partitions-with-O_RDONLY.patch</changelog>
</package>
<package pkgid="713c4f466fbee0195b7b33f5da814d58e9562a5178c31da37a3e6b40f530887a" name="dmraid" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16" rel="42.1"/>
  <changelog author="jansimon.moeller@opensuse.org" date="1249214400">- The cmdline options don't work when compiling the events module
  on ARM. Add patch to directly include the ldflags in the
  Makefile.</changelog>
  <changelog author="hvogel@novell.com" date="1251115200">- Fix activation of isw raid sets when the disks have serialnumber
  longer then 16 characters
- Add patch adding --rm_partitions cmdline option and functionality
- Fix mismatch between BIOS and dmraid's view of ISW raid 10 sets</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254571200">- fix directory handle leaks in libdmraid-events [bnc#524202]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1254744000">- fix a few more fdleaks [bnc#543151]</changelog>
  <changelog author="nfbrown@novell.com" date="1265112000">- new upstream version, including latest CVS updates.
  Both libdmraid-events and dm_dso_reg_tool are not
  in the main package.
- dm_dso_reg_tool has been renamed to dmevent_tool in
  line with upstream change.
  bnc#528796 bnc#511329</changelog>
  <changelog author="nfbrown@novell.com" date="1271678400">- handle_space: cope with arrays with spaces in the name stored
  in the metadata (bnc#470696)
- remove_trylock: pthreads_mutex_trylock is still very new in
  glibc so safest not to use it yet (bnc#594388)</changelog>
  <changelog author="lnussel@suse.de" date="1306497600">- don't hard require boot.device-mapper in boot.dmraid. dm-mod is
  autoloaded when accessing /dev/mapper/control anyways.</changelog>
  <changelog author="nfbrown@suse.com" date="1316606400">- rebuild.fix: When a rebuild is requested that
  cannot be handled, report and error instead of
  crashing (bnc#716904)
- ddf-erase: Allow dmraid to erase ddf metadata
  properly (bnc#712671)</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Add automake as buildrequires.</changelog>
  <changelog author="cfarrell@suse.com" date="1341835200">- license update: GPL-2.0
  See lib/register/dmreg.c and tools/dmevent_tool.c (both have GPL-2.0
  license)</changelog>
  <changelog author="rmilasan@suse.com" date="1354104000">- Move lock file to /run/lock so it wont interfere with systemd.</changelog>
  <changelog author="ohering@suse.de" date="1374580800">- Remove usage of absolute paths in initrd
- Remove some checks from mkinitrd scripts, they are always true
- List all used binaries in programs tag</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379073600">- Fix Makefiles so they support DESTDIR
  Added: dmraid-destdir.patch
- add tmpfiles.d so runtime directories are properly created
- Remove sysvinit support and replace it for native systemd support.
  Added: dmraid-activation.service
  Removed: boot.dmraid</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- Use rpm macros to only trigger one initrd rebuild per install/update</changelog>
  <changelog author="jeffm@suse.com" date="1406289600">- Rename README.SuSE to README.SUSE (bnc#889025).</changelog>
  <changelog author="dimstar@opensuse.org" date="1415620800">- Own /usr/lib/tmpfiles.d: in the past, we were lucky for another
  package in the build dependency chain to own this for us, but in
  fact we should do it ourselves (bnc#942987)</changelog>
  <changelog author="mwilck@suse.com" date="1509019200">- Remove partitions with O_RDONLY (bsc#1060551)
  * add 0001-remove-partitions-with-O_RDONLY.patch</changelog>
</package>
<package pkgid="c8830a7ad5adae4727e9f99c022f5c4d55fdcbca921e567d5a41b1a9a41ae5fa" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.78" rel="13.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
  <changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
  <changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
  <changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
  <changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
  <changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
  <changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
  <changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
  <changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
  <changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
  <changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
  <changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
  <changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
  <changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>
</package>
<package pkgid="cb6e224cf37b7bf6ed82ee18e521bf23ea3fc49366b63daed69072195330575b" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.78" rel="13.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
  <changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
  <changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
  <changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
  <changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
  <changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
  <changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
  <changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
  <changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
  <changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
  <changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
  <changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
  <changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
  <changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>
</package>
<package pkgid="b1208b3967ad5dfda1f61616dfe1ece30854f3250f768d4e228cd0b78cbdee43" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.78" rel="13.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
  <changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
  <changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
  <changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
  <changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
  <changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
  <changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
  <changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
  <changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
  <changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
  <changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
  <changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
  <changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
  <changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
  <changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>
</package>
<package pkgid="144d2dc544b8ef315b0724545b9e2c7978e86237989c680916d67811fbaaec71" name="docker" arch="src">
  <version epoch="0" ver="17.04.0_ce" rel="33.11"/>
  <changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
  <changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
  <changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
  <changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
  <changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
  <changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
  <changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
  <changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>
</package>
<package pkgid="6ec95b5f0615a9654dc73deaaca2e5a549f1ad5f41299e7d9337e8a6632e8865" name="docker" arch="x86_64">
  <version epoch="0" ver="17.04.0_ce" rel="33.11"/>
  <changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
  <changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
  <changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
  <changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
  <changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
  <changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
  <changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
  <changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>
</package>
<package pkgid="2d19beeccd8b1d3527d119ef12df206241d6755745f0f5097ca4ba1217f44ff8" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="36.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1504094400">- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1504699200">- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1505476800">- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.</changelog>
  <changelog author="vrothberg@suse.com" date="1506945600">- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to Docker v17.07.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.06.0-ce
  https://github.com/docker/docker-ce/releases/tag/v17.07.0-ce
- Removed no-longer needed patches.
  - bsc1037436-0001-client-check-tty-before-creating-exec-job.patch
  - bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch
  - integration-cli-fix-TestInfoEnsureSucceeds.patch
- Added backport of https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
- Rewrite secrets patches to correctly handle directories in a way that doesn't
  cause errors when starting new containers.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Add backport of https://github.com/moby/moby/pull/35205. This used to be
  fixed in docker-runc, but we're moving it here after upstream discussion.
  bsc#1055676
  + bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch</changelog>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
</package>
<package pkgid="0b8e3e3659141e4292c7c46421df1bef934dc75823c2f9679b7d388f56851185" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="36.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1504094400">- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1504699200">- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1505476800">- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.</changelog>
  <changelog author="vrothberg@suse.com" date="1506945600">- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to Docker v17.07.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.06.0-ce
  https://github.com/docker/docker-ce/releases/tag/v17.07.0-ce
- Removed no-longer needed patches.
  - bsc1037436-0001-client-check-tty-before-creating-exec-job.patch
  - bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch
  - integration-cli-fix-TestInfoEnsureSucceeds.patch
- Added backport of https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
- Rewrite secrets patches to correctly handle directories in a way that doesn't
  cause errors when starting new containers.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Add backport of https://github.com/moby/moby/pull/35205. This used to be
  fixed in docker-runc, but we're moving it here after upstream discussion.
  bsc#1055676
  + bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch</changelog>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
</package>
<package pkgid="b0e2d12b27d1b49498fca0e33da478487ab5cdb330876dfd2a0267f372bb9da3" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="39.1"/>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
</package>
<package pkgid="8475719a416b5dcc738eaf7988d6283c4eecb51fa58e95b999ba2e61614227e8" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="39.1"/>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
</package>
<package pkgid="2aa131080fc2ef62395c596a7b5e01dcd8622358735ecd3c383959f9b583caad" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="42.1"/>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
</package>
<package pkgid="5a5b133d13f862db175566674ea380ff96728cae04296bfc66588255154cd900" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="42.1"/>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
</package>
<package pkgid="e8676f1584491d38c53a563971be3377c7d2e4dd7ae8986b13e740118ed84a3c" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="45.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="3baa6a961caf312075ca26d02aa42c161e5f7ebf58cf77b1b64b43940ee8e853" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="45.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="48bc9a9e8c4264bcbdf059d34c86a864b7da631d5fc3043de3525cd30da9058f" name="docker" arch="src">
  <version epoch="0" ver="18.06.1_ce" rel="48.2"/>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
</package>
<package pkgid="a2332ef0f85ca753639ae8af87b20df6925af01b63bc737a9889411d4f6205e5" name="docker" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="48.2"/>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
</package>
<package pkgid="b3c898cc0c41b7c6c47420780bf2f0349a86d6de6ff2e551b6d1b051692dea47" name="docker" arch="src">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="8a1ed947441746ce562f6f20b700afa487e85e7820b89b316364e36c30b8fb90" name="docker" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="fe58d4b6ddb437a96975e2dced1ce6ff97be8c74592a1b62cad9cccfe38f45c1" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.04.0_ce" rel="33.11"/>
  <changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
  <changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
  <changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
  <changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
  <changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
  <changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
  <changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
  <changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>
</package>
<package pkgid="d8c6edff76c1b3a92c54cf968b3b0466688001a2fcc77d9123f44ba0cdf291bc" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="36.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1504094400">- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1504699200">- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1505476800">- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.</changelog>
  <changelog author="vrothberg@suse.com" date="1506945600">- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to Docker v17.07.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.06.0-ce
  https://github.com/docker/docker-ce/releases/tag/v17.07.0-ce
- Removed no-longer needed patches.
  - bsc1037436-0001-client-check-tty-before-creating-exec-job.patch
  - bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch
  - integration-cli-fix-TestInfoEnsureSucceeds.patch
- Added backport of https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
- Rewrite secrets patches to correctly handle directories in a way that doesn't
  cause errors when starting new containers.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Add backport of https://github.com/moby/moby/pull/35205. This used to be
  fixed in docker-runc, but we're moving it here after upstream discussion.
  bsc#1055676
  + bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch</changelog>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
</package>
<package pkgid="1545691f8ebf73eaa39aa77e3feef15932f4e327d7773fbf0e18d0e4f7be186b" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="39.1"/>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
</package>
<package pkgid="2a278e411155a872728c14dd23e3b0e0b852eda9921974b30181b4ef07b68e7b" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="42.1"/>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
</package>
<package pkgid="350e60390332c5669e0ed5644c2114bfc7d67bbbb3a629a14a2d93f71dc61010" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="45.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="62c84e629f82859a412c0e3a23c5feea010302b156d9e2b3a97424048c29a9c3" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="48.2"/>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
</package>
<package pkgid="c0170cc215448a9d6420499f94f692d3f9b96fc21216cd4385e3d818d0fe511f" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="bd309f2760ca38a935544c58aa9c28aa7429cb5165d615b0e28623e19d4e8d79" name="docker-distribution" arch="src">
  <version epoch="0" ver="2.6.1" rel="8.1"/>
  <changelog author="fcastelli@suse.com" date="1428580800">- Created initial package</changelog>
  <changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
  <changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
  <changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
  <changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
  <changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
  <changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
  <changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
  <changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
  <changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
  <changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
  <changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
  <changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
  <changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check</changelog>
</package>
<package pkgid="b45d6ea3b5a4f77eed28bfc4bfe0937d8b2a8eca2c25caabb67ca5f3ef06acd0" name="docker-distribution" arch="src">
  <version epoch="0" ver="2.6.2" rel="11.1"/>
  <changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
  <changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
  <changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
  <changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
  <changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
  <changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
  <changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
  <changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
  <changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
  <changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
  <changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
  <changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
  <changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check
  fix bsc#1033172</changelog>
  <changelog author="abergmann@suse.com" date="1497268800">- Add SuSEfirewall2 service file for TCP port 5000.</changelog>
  <changelog author="msabate@suse.com" date="1500638400">- Updated to 2.6.2
  This release is a special security release to address an issue allowing
  an attacker to force arbitrarily-sized memory allocations in a registry
  instance through the manifest endpoint. The problem has been mitigated
  by limiting the size of reads for image manifest content.
  Details for mitigation are in 29fa466
  Fixes bsc#1049850(CVE-2017-11468)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519905600">- Configuration files should be tagged in general as %config(noreplace)
  in order to keep the modified config files.
  see https://en.opensuse.org/openSUSE:Specfile_guidelines#Configuration_files
  This fixes bsc#1083474</changelog>
</package>
<package pkgid="72ba753a6c6c6450bfefe5bfb0749bea1ac304f2db748af1cf3f95d70536837a" name="docker-distribution-registry" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="8.1"/>
  <changelog author="fcastelli@suse.com" date="1428580800">- Created initial package</changelog>
  <changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
  <changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
  <changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
  <changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
  <changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
  <changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
  <changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
  <changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
  <changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
  <changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
  <changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
  <changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
  <changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check</changelog>
</package>
<package pkgid="c8b1c10e8e7bf041bdf14b5adc12ca8cb5d5ccb2fbb445fdd6c23da9a50a2aed" name="docker-distribution-registry" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="11.1"/>
  <changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
  <changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
  <changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
  <changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
  <changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
  <changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
  <changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
  <changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
  <changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
  <changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
  <changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
  <changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
  <changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
  <changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
  <changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check
  fix bsc#1033172</changelog>
  <changelog author="abergmann@suse.com" date="1497268800">- Add SuSEfirewall2 service file for TCP port 5000.</changelog>
  <changelog author="msabate@suse.com" date="1500638400">- Updated to 2.6.2
  This release is a special security release to address an issue allowing
  an attacker to force arbitrarily-sized memory allocations in a registry
  instance through the manifest endpoint. The problem has been mitigated
  by limiting the size of reads for image manifest content.
  Details for mitigation are in 29fa466
  Fixes bsc#1049850(CVE-2017-11468)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519905600">- Configuration files should be tagged in general as %config(noreplace)
  in order to keep the modified config files.
  see https://en.opensuse.org/openSUSE:Specfile_guidelines#Configuration_files
  This fixes bsc#1083474</changelog>
</package>
<package pkgid="b0287fd129ce85e55b27eebcc734ff29215aeec94bb4b427c22f26112363d1f2" name="docker-img-store-setup" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="2.1"/>
  <changelog author="rjschwei@suse.com" date="1448020800">- Initial build
  + Version 1.0.0</changelog>
  <changelog author="rjschwei@suse.com" date="1448020801">- Include in SLE 12 Public CLoud Module (FATE#318337, bsc#956085)</changelog>
</package>
<package pkgid="180dca86980acf17dc74fb8696011114ee532ead26151c0952e2ba381767f340" name="docker-img-store-setup" arch="src">
  <version epoch="0" ver="1.0.0" rel="2.1"/>
  <changelog author="rjschwei@suse.com" date="1448020800">- Initial build
  + Version 1.0.0</changelog>
  <changelog author="rjschwei@suse.com" date="1448020801">- Include in SLE 12 Public CLoud Module (FATE#318337, bsc#956085)</changelog>
</package>
<package pkgid="85dac19e48cd181b25f02a4468a4fc7bac048693eaef35ec20dff798de163201" name="docker-kubic" arch="src">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="5a5eaf3177d6c2bc0dc1930c5b06cccddaa4531094c9a80318c1e507ee188eef" name="docker-kubic" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="cc56a2cd25293852fecb7de5ef887ec62442f00ceebb3cd0af119d402d1ece9e" name="docker-kubic-bash-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="a69ef16ea69ee79dbbaa60bdb83f9549756c6ae70c19a15a8dc15ce5352e25b8" name="docker-kubic-kubeadm-criconfig" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="1b3de295c4cdb24fe1b37a4786308a92178859c2e4c72db35a64e601b4839043" name="docker-kubic-test" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="077ac8d32e23af68f3e5d39522ad8d9fe39b2cb40cff72ebeb0175b19a490ba9" name="docker-kubic-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="b744e0959632002469ac1fd5340e07a4f07929d4a277ac71e8a7fa27c85f1c9c" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
</package>
<package pkgid="8e2a64a85caba3a59567c89d81ba4eec2519e6e3efb9056cf54f5278691569b6" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2066_7b2b1feb1de4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="3fc2067aea76966d1d86bcec7f85cd27e1e4de69fa29619758d9cccd010725dd" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="8.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="602048dae1ec296dfd94f669a9fc227797956abc5f0a8ba31f5f6761a7e3a05d" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc4+gitr3338_3f2f8b84a77f" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="e5e1830e6e177a73b2a44e9f87d02d586be277a17aeb096cf31429191e0d8d3f" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc4+gitr3338_3f2f8b84a77f" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="06ae33305a164530c5ffd8ec16a6b343a3d1cb54a9bf1b176dfb47848c38352e" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="5.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="34b0d804e378ed8fa9134b54c7d2480208e4220a0fff714c3a27e6e5c13fb2c2" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="5.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="17cc2f1fe78978b8f4665928d4257a8b3bb7eb8e611b6947e9525f298646b930" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="8332c453832292ca94493dc3e398c32e096f6e76086769f912efa761a88f9912" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="a89244e237b0c5da6e03c56cc6b6206a61d188f4e18736781ffe9f4c3d249d04" name="docker-runc-kubic" arch="src">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="9d0611bf4e17684cf3cd537d8004a0c812ca7174efabf55c83f81557d33ba9a1" name="docker-runc-kubic" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="7660b3f607a752dc63cc363fc1d1581f4e0285271c176e2fa93d4f9df13478b7" name="docker-runc-kubic-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="7415adb128d71647d7c11daacdf0982520630b91f34926abcfd3d434d486d831" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc4+gitr3338_3f2f8b84a77f" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1482148800">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="f1e634b1188f2a154ee8dbe1541868c34da10868cdf76547f80875d338b10845" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="5.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="3a20acd45b77ac3c670fd66a5d60fbfc0680fd2c3a8f9eec2b3ec702f307ac9b" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="8.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="c8801c6520d441f6e5adbe5f68519e927cd284558ae65d8d547c720716a5aa1d" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.04.0_ce" rel="33.11"/>
  <changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
  <changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
  <changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
  <changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
  <changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
  <changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
  <changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
  <changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>
</package>
<package pkgid="cbe9fb571ab39224235be9db22b92e14435571f103b6b1c81b64307c684301b8" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="36.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1504094400">- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1504699200">- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1505476800">- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.</changelog>
  <changelog author="vrothberg@suse.com" date="1506945600">- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to Docker v17.07.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.06.0-ce
  https://github.com/docker/docker-ce/releases/tag/v17.07.0-ce
- Removed no-longer needed patches.
  - bsc1037436-0001-client-check-tty-before-creating-exec-job.patch
  - bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch
  - integration-cli-fix-TestInfoEnsureSucceeds.patch
- Added backport of https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
- Rewrite secrets patches to correctly handle directories in a way that doesn't
  cause errors when starting new containers.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Add backport of https://github.com/moby/moby/pull/35205. This used to be
  fixed in docker-runc, but we're moving it here after upstream discussion.
  bsc#1055676
  + bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch</changelog>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
</package>
<package pkgid="e0301237cb9f998acb3cf32560493b01fd05f108f9988658093f6741da3b2ed4" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="39.1"/>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
</package>
<package pkgid="ce68b990d4cc111c483c17536f73150445db595452c8b5682ee546a70ca9ebcf" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="42.1"/>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
</package>
<package pkgid="15bbfcb62b95f09186f4abffafd3d9198e68dcd89d0d5917e6d4039efaacdc2a" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="45.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="6d317777cbaefedd33e86ccbc8678d8b9226747721c0cb55793143dd3a0bfbcc" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="48.2"/>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
</package>
<package pkgid="5853a21f7ac682c143f61ff46a9de41912312d8e8c9d050874f8d10c1bf81984" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="1d38010148dc59a6f2570d2af639add7b23a085888d3b4ce7b6116b7560167c0" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.04.0_ce" rel="33.11"/>
  <changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
  <changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
  <changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
  <changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
  <changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
  <changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
  <changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
  <changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>
</package>
<package pkgid="f9b923d48d882859764911bebe7dd837c91c7d056b21717b26ede6ae1d4543f2" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="36.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1504094400">- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1504699200">- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1505476800">- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.</changelog>
  <changelog author="vrothberg@suse.com" date="1506945600">- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to Docker v17.07.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.06.0-ce
  https://github.com/docker/docker-ce/releases/tag/v17.07.0-ce
- Removed no-longer needed patches.
  - bsc1037436-0001-client-check-tty-before-creating-exec-job.patch
  - bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch
  - integration-cli-fix-TestInfoEnsureSucceeds.patch
- Added backport of https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
- Rewrite secrets patches to correctly handle directories in a way that doesn't
  cause errors when starting new containers.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Add backport of https://github.com/moby/moby/pull/35205. This used to be
  fixed in docker-runc, but we're moving it here after upstream discussion.
  bsc#1055676
  + bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch</changelog>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
</package>
<package pkgid="18bbef9791fb3217828835b472e1342b75b07530a276ba3e322a07fb26768f56" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="39.1"/>
  <changelog author="asarai@suse.com" date="1508846400">- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  * effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="asarai@suse.com" date="1510056001">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
</package>
<package pkgid="f33756646d030a946dab3cbe9d75c27f931790f44d49526f4c0a3227800a5bcc" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="42.1"/>
  <changelog author="asarai@suse.com" date="1510056000">- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch</changelog>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
</package>
<package pkgid="8dc84573fb53fdd571fae66e3e7f2c024441f56a47c154d9b19b7aa95987208c" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="45.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="2362c0f35e4a44e712baceccc1b3f3602f8051ab8d44696fc40d4a5c804ff739" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="48.2"/>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
</package>
<package pkgid="a7ede8940bec41b6bd76298d33fa1d2df9862b7c58314e79f69d91eb61a7f420" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="51.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="6da6894d70ec98c8245e462962b13270835ac971f0d1638b619d985264482029" name="dom4j" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="31.3.2"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="moio@suse.com" date="1472644800">- include the STAXEventReader and STAXEventWriter classes (bsc#998531)
  + added dom4j-1.6.1-enable-STAX-io.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272001">- Fix compilation error by using java source target level 1.6
  * Added patch dom4j-sourcetarget.patch from fstrba</changelog>
</package>
<package pkgid="119ca2ed6568e9a38ab5ed90436e46f1f24ca9536e145349a93fb10567a56d44" name="dom4j" arch="src">
  <version epoch="0" ver="1.6.1" rel="31.3.2"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="moio@suse.com" date="1472644800">- include the STAXEventReader and STAXEventWriter classes (bsc#998531)
  + added dom4j-1.6.1-enable-STAX-io.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272001">- Fix compilation error by using java source target level 1.6
  * Added patch dom4j-sourcetarget.patch from fstrba</changelog>
</package>
<package pkgid="d5e73f2076fdf84920d22f58515783f5b7930ec84ab68cef4a4c23f061285dee" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="31.3.2"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="moio@suse.com" date="1472644800">- include the STAXEventReader and STAXEventWriter classes (bsc#998531)
  + added dom4j-1.6.1-enable-STAX-io.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272001">- Fix compilation error by using java source target level 1.6
  * Added patch dom4j-sourcetarget.patch from fstrba</changelog>
</package>
<package pkgid="f6df7ad565a57769319819424b20b9298bc3e1b10fc378fcc14221d83eb2a884" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="31.3.2"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="moio@suse.com" date="1472644800">- include the STAXEventReader and STAXEventWriter classes (bsc#998531)
  + added dom4j-1.6.1-enable-STAX-io.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272001">- Fix compilation error by using java source target level 1.6
  * Added patch dom4j-sourcetarget.patch from fstrba</changelog>
</package>
<package pkgid="5fad69c67826a468b3e149408a1623465f40e0f20afa5272d57d7ed9baa044ba" name="dom4j-manual" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="31.3.2"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="moio@suse.com" date="1472644800">- include the STAXEventReader and STAXEventWriter classes (bsc#998531)
  + added dom4j-1.6.1-enable-STAX-io.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272001">- Fix compilation error by using java source target level 1.6
  * Added patch dom4j-sourcetarget.patch from fstrba</changelog>
</package>
<package pkgid="ded0e386a92faa45301267742ec7f72e21261c8f6756b4740b38a1d71be78433" name="doomsday" arch="src">
  <version epoch="0" ver="1.14.5" rel="6.3.1"/>
  <changelog author="jengelh@inai.de" date="1340539200">- Initial package (version 1.9.8) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1341835200">- Bump importance of timidity from Suggested to Recommended. (Few
  users actually have FMOD (alternative output plugin) installed.)</changelog>
  <changelog author="jengelh@inai.de" date="1349352000">- Update to new upstream release 1.9.9
  * Faster map loading thanks to optimizations in the BSP builder.
  * Improved music support for OS X 10.6+ and Linux: SF2 soundfonts
  can be used with the original games' MIDI music.</changelog>
  <changelog author="jengelh@inai.de" date="1357473600">- Update to new upstream release 1.9.10.1
  * The longstanding gameplay bug that prevented a column from
  lowering on Doom E1M7 has now been fixed.
  * Command-line tools for creating and editing data files (md2tool,
  texc) are now included as part of the distribution packages.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Correctly place files into %_libdir (original sr#147463)</changelog>
  <changelog author="schwab@suse.de" date="1363694400">- deng-va-list.diff: Remove non-portable use of va_list</changelog>
  <changelog author="jengelh@inai.de" date="1365508800">- Update to new upstream release 1.10
  * the multiplayer server is now its own separate executable that
  users control using the new "Shell" application
- Remove deng-libdir.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1366286400">- Supply path configuration file and kill the shell wrappers that
  supplied the paths via command line before.</changelog>
  <changelog author="jengelh@inai.de" date="1369310400">- Update to new upstream release 1.10.3
  * resolve stuck TEXTUREn lump loading with Hell Revealed II
  * fog should not be applied to weapon psprites
- Remove deng-nodate.diff: kill __DATE__ with shell instead of patch</changelog>
  <changelog author="jengelh@inai.de" date="1375185600">- Update to new upstream release 1.11.0
  * Doomsday has received a new mouse-driven UI; the taskbar
  replaces the old console.</changelog>
  <changelog author="jengelh@inai.de" date="1381060800">- Update to new upstream release 1.12
  * The old Control Panel and Updater have been retired and their
  functionality merged into the taskbar. New taskbar features
  include background downloading of updates, profiles for renderer
  settings, and auto completion of console commands. There is also
  vastly improved map rendering hack support, and 3D sound can now
  separate isolated parts of joined sectors.</changelog>
  <changelog author="jengelh@inai.de" date="1384171200">- Update to new upstream release 1.12.2
  * console: fix crash when autocompleting certain words (e.g. "upd")
  * task bar: Added toggle for sound-overlap-stop to Audio Settings:
  when enabled, only one sound is allowed per emitter (like in the
  original games)
- Remove deng-va-list.diff (merged upstream)
- OpenGL 2.x is required for Doomsday 1.12</changelog>
  <changelog author="jengelh@inai.de" date="1388750400">- Update to new upstream release 1.13
  * Framebuffer effects. Doomsday can now use OpenGL shaders to
  post-process the rendered frames. In this release, this has been
  applied this for libdoom's Invulnerability power-up effect.
  * Stereoscopic 3D. Support has been added for various stereoscopic
  rendering modes, including anaglyph, side-by-side, parallel and
  cross-eyed viewing.</changelog>
  <changelog author="jengelh@inai.de" date="1389009600">- Update to new upstream release 1.13.1
  * Multiplayer: Resolve crash when joining a multiplayer game using
  the Vanilla appearance profile
  * Multiplayer: Resolve crash when more than one client joins a game
  * Multiplayer: Missing busy mode transition frame when joining
  a game
  * UI: Using keyboard bindings when a popup is open in the UI
  (e.g. pressing F11 to toggle screen when the DE menu is open in
  the task bar)
  * Added the -nodiscovery option to prevent Doomsday from looking
  for running servers on the LAN</changelog>
  <changelog author="jengelh@inai.de" date="1398254400">- Update to new upstream release 1.14
  * It adds bloom to Doomsday's visual features. The last of the
  old UI has been replaced, and now MP games and save games, due
  to a new save game format, from all games can be accessed from
  the taskbar or home screen (formerly Ring Zero). New alert and
  tutorial notifications have been added to inform users of any
  important engine, map and resource errors and about the UI.</changelog>
  <changelog author="jengelh@inai.de" date="1398945600">- Update to new upstream release 1.14.1, which fixes:
  * particles were shut off shortly after level start
  * flickering light decoration on moving platform
  * letterboxed/pillarboxed drawing of the game was broken
  * Heretic ghost mummies' floating spirits were not disappearing
  after death
  * Shift key state was not recognized by bindings when typing in
  console
  * Multiplayer weapons were not remaining in play
  * Gracefully abort if OpenGL version is not sufficient</changelog>
  <changelog author="jengelh@inai.de" date="1400587200">- Update to new upstream release 1.14.3, which fixes:
  * Hexen: Hub maps reset after saving, causing invalid game world
  state
  * Doom 2: Crash playing sci2.wad MAP13
  * Better compatibility with vanilla Doom renderer: dynamic
  map hacks dependent on non-neighbor planes
  * Hexen: Saving error ? "already exists"</changelog>
  <changelog author="jengelh@inai.de" date="1413115200">- Update to new upstream release 1.14.5, which fixes:
  * Hexen: Loading autosaved progress on a previously visited map
  loads an out of date save state
  * Hexen: Number of inventory items increases when going through
  a portal
  * Hexen: Puzzle progress in main hub not showing up</changelog>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Ship doomsday-engine.desktop file calling /usr/bin/launch-doomsday
  in the same subpackage as launch-doomsday. [boo#1073084]</changelog>
</package>
<package pkgid="604e0657430eab4ab6b0e7c727d168c79a2d935926c15df41685eafac6e7c4e2" name="doomsday" arch="x86_64">
  <version epoch="0" ver="1.14.5" rel="6.3.1"/>
  <changelog author="jengelh@inai.de" date="1340539200">- Initial package (version 1.9.8) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1341835200">- Bump importance of timidity from Suggested to Recommended. (Few
  users actually have FMOD (alternative output plugin) installed.)</changelog>
  <changelog author="jengelh@inai.de" date="1349352000">- Update to new upstream release 1.9.9
  * Faster map loading thanks to optimizations in the BSP builder.
  * Improved music support for OS X 10.6+ and Linux: SF2 soundfonts
  can be used with the original games' MIDI music.</changelog>
  <changelog author="jengelh@inai.de" date="1357473600">- Update to new upstream release 1.9.10.1
  * The longstanding gameplay bug that prevented a column from
  lowering on Doom E1M7 has now been fixed.
  * Command-line tools for creating and editing data files (md2tool,
  texc) are now included as part of the distribution packages.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Correctly place files into %_libdir (original sr#147463)</changelog>
  <changelog author="schwab@suse.de" date="1363694400">- deng-va-list.diff: Remove non-portable use of va_list</changelog>
  <changelog author="jengelh@inai.de" date="1365508800">- Update to new upstream release 1.10
  * the multiplayer server is now its own separate executable that
  users control using the new "Shell" application
- Remove deng-libdir.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1366286400">- Supply path configuration file and kill the shell wrappers that
  supplied the paths via command line before.</changelog>
  <changelog author="jengelh@inai.de" date="1369310400">- Update to new upstream release 1.10.3
  * resolve stuck TEXTUREn lump loading with Hell Revealed II
  * fog should not be applied to weapon psprites
- Remove deng-nodate.diff: kill __DATE__ with shell instead of patch</changelog>
  <changelog author="jengelh@inai.de" date="1375185600">- Update to new upstream release 1.11.0
  * Doomsday has received a new mouse-driven UI; the taskbar
  replaces the old console.</changelog>
  <changelog author="jengelh@inai.de" date="1381060800">- Update to new upstream release 1.12
  * The old Control Panel and Updater have been retired and their
  functionality merged into the taskbar. New taskbar features
  include background downloading of updates, profiles for renderer
  settings, and auto completion of console commands. There is also
  vastly improved map rendering hack support, and 3D sound can now
  separate isolated parts of joined sectors.</changelog>
  <changelog author="jengelh@inai.de" date="1384171200">- Update to new upstream release 1.12.2
  * console: fix crash when autocompleting certain words (e.g. "upd")
  * task bar: Added toggle for sound-overlap-stop to Audio Settings:
  when enabled, only one sound is allowed per emitter (like in the
  original games)
- Remove deng-va-list.diff (merged upstream)
- OpenGL 2.x is required for Doomsday 1.12</changelog>
  <changelog author="jengelh@inai.de" date="1388750400">- Update to new upstream release 1.13
  * Framebuffer effects. Doomsday can now use OpenGL shaders to
  post-process the rendered frames. In this release, this has been
  applied this for libdoom's Invulnerability power-up effect.
  * Stereoscopic 3D. Support has been added for various stereoscopic
  rendering modes, including anaglyph, side-by-side, parallel and
  cross-eyed viewing.</changelog>
  <changelog author="jengelh@inai.de" date="1389009600">- Update to new upstream release 1.13.1
  * Multiplayer: Resolve crash when joining a multiplayer game using
  the Vanilla appearance profile
  * Multiplayer: Resolve crash when more than one client joins a game
  * Multiplayer: Missing busy mode transition frame when joining
  a game
  * UI: Using keyboard bindings when a popup is open in the UI
  (e.g. pressing F11 to toggle screen when the DE menu is open in
  the task bar)
  * Added the -nodiscovery option to prevent Doomsday from looking
  for running servers on the LAN</changelog>
  <changelog author="jengelh@inai.de" date="1398254400">- Update to new upstream release 1.14
  * It adds bloom to Doomsday's visual features. The last of the
  old UI has been replaced, and now MP games and save games, due
  to a new save game format, from all games can be accessed from
  the taskbar or home screen (formerly Ring Zero). New alert and
  tutorial notifications have been added to inform users of any
  important engine, map and resource errors and about the UI.</changelog>
  <changelog author="jengelh@inai.de" date="1398945600">- Update to new upstream release 1.14.1, which fixes:
  * particles were shut off shortly after level start
  * flickering light decoration on moving platform
  * letterboxed/pillarboxed drawing of the game was broken
  * Heretic ghost mummies' floating spirits were not disappearing
  after death
  * Shift key state was not recognized by bindings when typing in
  console
  * Multiplayer weapons were not remaining in play
  * Gracefully abort if OpenGL version is not sufficient</changelog>
  <changelog author="jengelh@inai.de" date="1400587200">- Update to new upstream release 1.14.3, which fixes:
  * Hexen: Hub maps reset after saving, causing invalid game world
  state
  * Doom 2: Crash playing sci2.wad MAP13
  * Better compatibility with vanilla Doom renderer: dynamic
  map hacks dependent on non-neighbor planes
  * Hexen: Saving error ? "already exists"</changelog>
  <changelog author="jengelh@inai.de" date="1413115200">- Update to new upstream release 1.14.5, which fixes:
  * Hexen: Loading autosaved progress on a previously visited map
  loads an out of date save state
  * Hexen: Number of inventory items increases when going through
  a portal
  * Hexen: Puzzle progress in main hub not showing up</changelog>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Ship doomsday-engine.desktop file calling /usr/bin/launch-doomsday
  in the same subpackage as launch-doomsday. [boo#1073084]</changelog>
</package>
<package pkgid="c1957a1b72c0a62c953af827bfa87b09fdb1fd23b4e4132fd3bd43adcaebca01" name="doomsday-launcher" arch="noarch">
  <version epoch="0" ver="1.14.5" rel="6.3.1"/>
  <changelog author="jengelh@inai.de" date="1340539200">- Initial package (version 1.9.8) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1341835200">- Bump importance of timidity from Suggested to Recommended. (Few
  users actually have FMOD (alternative output plugin) installed.)</changelog>
  <changelog author="jengelh@inai.de" date="1349352000">- Update to new upstream release 1.9.9
  * Faster map loading thanks to optimizations in the BSP builder.
  * Improved music support for OS X 10.6+ and Linux: SF2 soundfonts
  can be used with the original games' MIDI music.</changelog>
  <changelog author="jengelh@inai.de" date="1357473600">- Update to new upstream release 1.9.10.1
  * The longstanding gameplay bug that prevented a column from
  lowering on Doom E1M7 has now been fixed.
  * Command-line tools for creating and editing data files (md2tool,
  texc) are now included as part of the distribution packages.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Correctly place files into %_libdir (original sr#147463)</changelog>
  <changelog author="schwab@suse.de" date="1363694400">- deng-va-list.diff: Remove non-portable use of va_list</changelog>
  <changelog author="jengelh@inai.de" date="1365508800">- Update to new upstream release 1.10
  * the multiplayer server is now its own separate executable that
  users control using the new "Shell" application
- Remove deng-libdir.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1366286400">- Supply path configuration file and kill the shell wrappers that
  supplied the paths via command line before.</changelog>
  <changelog author="jengelh@inai.de" date="1369310400">- Update to new upstream release 1.10.3
  * resolve stuck TEXTUREn lump loading with Hell Revealed II
  * fog should not be applied to weapon psprites
- Remove deng-nodate.diff: kill __DATE__ with shell instead of patch</changelog>
  <changelog author="jengelh@inai.de" date="1375185600">- Update to new upstream release 1.11.0
  * Doomsday has received a new mouse-driven UI; the taskbar
  replaces the old console.</changelog>
  <changelog author="jengelh@inai.de" date="1381060800">- Update to new upstream release 1.12
  * The old Control Panel and Updater have been retired and their
  functionality merged into the taskbar. New taskbar features
  include background downloading of updates, profiles for renderer
  settings, and auto completion of console commands. There is also
  vastly improved map rendering hack support, and 3D sound can now
  separate isolated parts of joined sectors.</changelog>
  <changelog author="jengelh@inai.de" date="1384171200">- Update to new upstream release 1.12.2
  * console: fix crash when autocompleting certain words (e.g. "upd")
  * task bar: Added toggle for sound-overlap-stop to Audio Settings:
  when enabled, only one sound is allowed per emitter (like in the
  original games)
- Remove deng-va-list.diff (merged upstream)
- OpenGL 2.x is required for Doomsday 1.12</changelog>
  <changelog author="jengelh@inai.de" date="1388750400">- Update to new upstream release 1.13
  * Framebuffer effects. Doomsday can now use OpenGL shaders to
  post-process the rendered frames. In this release, this has been
  applied this for libdoom's Invulnerability power-up effect.
  * Stereoscopic 3D. Support has been added for various stereoscopic
  rendering modes, including anaglyph, side-by-side, parallel and
  cross-eyed viewing.</changelog>
  <changelog author="jengelh@inai.de" date="1389009600">- Update to new upstream release 1.13.1
  * Multiplayer: Resolve crash when joining a multiplayer game using
  the Vanilla appearance profile
  * Multiplayer: Resolve crash when more than one client joins a game
  * Multiplayer: Missing busy mode transition frame when joining
  a game
  * UI: Using keyboard bindings when a popup is open in the UI
  (e.g. pressing F11 to toggle screen when the DE menu is open in
  the task bar)
  * Added the -nodiscovery option to prevent Doomsday from looking
  for running servers on the LAN</changelog>
  <changelog author="jengelh@inai.de" date="1398254400">- Update to new upstream release 1.14
  * It adds bloom to Doomsday's visual features. The last of the
  old UI has been replaced, and now MP games and save games, due
  to a new save game format, from all games can be accessed from
  the taskbar or home screen (formerly Ring Zero). New alert and
  tutorial notifications have been added to inform users of any
  important engine, map and resource errors and about the UI.</changelog>
  <changelog author="jengelh@inai.de" date="1398945600">- Update to new upstream release 1.14.1, which fixes:
  * particles were shut off shortly after level start
  * flickering light decoration on moving platform
  * letterboxed/pillarboxed drawing of the game was broken
  * Heretic ghost mummies' floating spirits were not disappearing
  after death
  * Shift key state was not recognized by bindings when typing in
  console
  * Multiplayer weapons were not remaining in play
  * Gracefully abort if OpenGL version is not sufficient</changelog>
  <changelog author="jengelh@inai.de" date="1400587200">- Update to new upstream release 1.14.3, which fixes:
  * Hexen: Hub maps reset after saving, causing invalid game world
  state
  * Doom 2: Crash playing sci2.wad MAP13
  * Better compatibility with vanilla Doom renderer: dynamic
  map hacks dependent on non-neighbor planes
  * Hexen: Saving error ? "already exists"</changelog>
  <changelog author="jengelh@inai.de" date="1413115200">- Update to new upstream release 1.14.5, which fixes:
  * Hexen: Loading autosaved progress on a previously visited map
  loads an out of date save state
  * Hexen: Number of inventory items increases when going through
  a portal
  * Hexen: Puzzle progress in main hub not showing up</changelog>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Ship doomsday-engine.desktop file calling /usr/bin/launch-doomsday
  in the same subpackage as launch-doomsday. [boo#1073084]</changelog>
</package>
<package pkgid="1fdc56dd53040c2d9098289e96fe0cd897f06521b893cd7375bd96b76c3845de" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="1e805c94c8196912f9a03a0be457ce8a3726ecf19b4838c5cba0b3fe8f8243e5" name="dovecot22" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="4084b593dfe7e35f03b3f906264b8526e145a8d4f887a35577a16b4099206a58" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="3306bb832f2bf7ce5f9001a58618aedd2f4295f1477a649940891b6d27bff82b" name="dovecot22" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="9e2e80350a9e059812f6ff16103a042c7f994924b7fd7a879214ca16e9ccd031" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="0799fe9fd28311a3320a87f9b1ba77e18d88f22b1d5ff26d802f6d3e4332a54e" name="dovecot22" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="76670a74369b7b303209879f4288224e48bf68a347f8b9396ae79785c5131560" name="dovecot22-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="789fe8c8d84acd6504a3d429c62a94bb56c6922b14bd0a1648a9985b049a8949" name="dovecot22-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="1058b555dc97d5b2ecab28eeafa6cdb5f0a258494648c41d7df1365161d45dc7" name="dovecot22-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="00628188a6a19d7710a12d3c0417e62bf10427299a893b7479bf38fd628fad16" name="dovecot22-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="c0d7ead5bcc81a1621f3c90f1575efd205c4708418f095f52fc2e73b3da33234" name="dovecot22-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="8f934130cdc9e41fdb6a3bc4e5a6cd3cbc1d7fac241e77914b1949969a198816" name="dovecot22-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="b6ef619b2fb27869fd40796c7476d967438f61e1e80369fbfb05cb8184f2748e" name="dovecot22-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="da22fec61e559cc20bb59a1e1d04d5c11299162a38b1470b87af620555a49112" name="dovecot22-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="2ff61e8310e9454a53c431574d8e7e1aeecb274fdc40a5e449a21e7c6e4a7024" name="dovecot22-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="4cd2b29fbbcc8f589ac2e45c9c795a35f3f61f4aca7ac271ec757013738c4e8f" name="dovecot22-devel" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="3a366e2b4d3c145a1e2729501bc7825700691ad5cea1921aa5825321bb224840" name="dovecot22-devel" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="db8631262a450cff52ae76c657c8f6a88ab727598e381965d47c7e3a5f463458" name="dovecot22-devel" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="c18389b6daa75172629aa318137b9b17db81b9ea7fbf34d8beb9dbf0480a6c9a" name="dovecot22-fts" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="4dc0086cf8d521759ad8fe76813ff95ce7774f3a827cd8d8717aedb37c52c1d5" name="dovecot22-fts" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="5253ba47c91b1f40638e6c855f28beb4c8d7453b360f78c81facb340f0f2142d" name="dovecot22-fts" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="e81ec5a4fef457134369f4162bcf30e76435666f63f7383628f37681747c4ae6" name="dovecot22-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="d619b21d97fc2797338cb75588d816d739ddfa180d213dd31a21f8a6b40a8ab5" name="dovecot22-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="8a8a36063bf3075201abe7734874f8d5f3279043e7bb40abe0d6141d26e9bab9" name="dovecot22-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="43d1a6c46e024577a0c5568b7f760161a5b3f9ba4de13c20dc34358926f09c45" name="dovecot22-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="4acb2f7eef74e3ed8c228d2f85133e4ee6f1bd84a072e85ac51a55ed283bf0e0" name="dovecot22-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="d59604d446574313a427ebd4e9c7aa83d81f47cc601541ca1768431f3f1f5f8e" name="dovecot22-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="a4b3db8a145d606c700f9b5005cb742bd1b4eb902ef8e50c2e8063c397f6d970" name="dovecot22-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
</package>
<package pkgid="ec18bfd85a62d5d236bd8a83ba655646bff016dcfc43d5d5950330673ac4bc73" name="dovecot22-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1478865600">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
</package>
<package pkgid="d927435391f6cbf70988ea9c38bcd634f7df7ea2834d06940a13d6b014329d61" name="dovecot22-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
  <changelog author="varkoly@suse.com" date="1515758400">- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if
  SASL authentication is aborted.
  added:
    dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch
  Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks
  memory if SASL authentication is aborted.</changelog>
  <changelog author="varkoly@suse.com" date="1524225600">- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain
  Information Leak Vulnerability
  applyed upstream patches.
  added:
    0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch
    0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch
    0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch
    0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch
    0005-lib-mail-Add-rfc822_parser_deinit.patch
    0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch
    0007-global-Call-rfc822_parser_deinit-wherever-possible.patch</changelog>
  <changelog author="varkoly@suse.com" date="1534852800">- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22:
  TLS SNI config lookups are inefficient and can be used for DoS
  applyed upstream patches.
  added:
    0001-lib-dns-Move-before-lib-master.patch
    0002-config-Add-config_filter_get_all.patch
    0003-config-Add-command-to-request-all-filters.patch
    0004-lib-master-Support-validating-config-filters-against.patch
    0005-login-common-Enable-config-filtering-by-local-name.patch
    0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch</changelog>
</package>
<package pkgid="ba97f47ee37da27c88d56156bd9918f8c48415ba7d85fe27aa7bab2a3f4f956a" name="dpdk" arch="src">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="99d54b201cd4f9aa88e0b398b89319c8bf8de750dd6f582ef7ee7696ce516810" name="dpdk" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="0b15fb2b7596d7a8ea54906192bbba600df723ff4e1cfac3c6d020fac89695b1" name="dpdk" arch="src">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="c20e1304a9c9d8d331d5c4c2a22a2fa616697f0734c31623485dcbffb9b5a0d0" name="dpdk" arch="x86_64">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="cfdde5fec8d287c15a340c461a0751f4f655e4b5dff38ce24e9edf0aff839d56" name="dpdk" arch="src">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="27df402d92544cc6a82684492abfaaa13688f6101c7492427a0f8e72f3f191a9" name="dpdk" arch="x86_64">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="3dcd8dabc9b94d43a76f5632e2c4b6911c57d3cab89f7b552254444449a7710f" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="cd3b0831b5c116f0a350c57a9c0df83c65d962fa033bd406b3e28d19fc102d22" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="47a5892ac34a43131af71817bd2ade90098630d536350a16c5ff4989abae7be5" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="15e67acbbc2883d26f28ddf1c60bc53d2594ee7a0e3977cf275a8df96fcfb639" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="4b00bdf59a2bce335ccabb6425989ec2cd6ff8cff66ce8b50786d3b88380e1b9" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="9cf71f79fd80357bb63d930021a1979b36a23bd814a5e601fff588afbab59b32" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="aa0a02db535c60f368b9973ccab7aca016df193a271581dd8ea8912fb1562ad3" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="a08c079a7f29ff90208850ed98f9cc0a01518d8f305b67e3cbe8e23a68a7821d" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="89edb2fad7ec520dbac4a3b3e21ac98e1aa1aa5929de4713c1ec922502b57d15" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="26b386b1b329a7af30ae32aba40efd6cfa605a8defb4c71247816e47d6449a25" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="16.11.1_k4.4.114_42" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="5bc20f6c0d6067d8c527d46d37c4ae84b41c58df8fa7bf996dc395066f2aa500" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="16.11.6_k4.4.132_53" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="8267acff6bf49082616883ab732fe89463f224513856402d907dce41df3e185e" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="16.11.8_k4.4.162_78" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="9840a27b73a4eee36faa92fac30163cc9412e69d510d8883bfc60c916423cb37" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="16.11.1" rel="6.2.1"/>
  <changelog author="ndas@suse.de" date="1469707200">- Add _constraints file to force build dpdk with sse3 enabled x86 machine(bsc#993462).
- Enable compilation for  ppc64le with the help of Rüdiger(ro@suse.de).
- Enable example package for aarch64 using Rüdiger(ro@suse.de) changes.
- Do not enable PMD_RING on ppc64le (missing rte_eth_from_rings).
- Disable examples that need LPM which is disabled on non-x86.
  [+0036-examples-fix-build-dependencies.patch,
  +0037-examples-ethtool-fix-build.patch,
  +_constraints]</changelog>
  <changelog author="ndas@suse.de" date="1470830400">- Update to version 16.07. Some of the new features are listed below:
  * Removed the mempool cache memory if caching is not being used.
  * Added mempool external cache for non-EAL thread.
  * Changed the memory allocation scheme in the mempool library.
  * Added a new driver for Broadcom NetXtreme-C devices.
  * Added a new driver for ThunderX nicvf devices.
  * Added mailbox interrupt support for ixgbe and igb VFs.
  * Updated the ixgbe base driver.
  * Updated the i40e base driver.
  * Updated the enic driver.
  * Updated the mlx5 driver.
  * Added support for virtio on IBM POWER8.
  * Added support for Virtio in containers.
  * Added vhost-user client mode.
  * Added NSH packet recognition in i40e.
  * Added AES-CTR support to AESNI MB PMD.
  * Added AES counter mode support for Intel QuickAssist devices.
  * Added KASUMI SW PMD.
  * Added multi-writer support for RTE Hash with Intel TSX.
  * Improved IP Pipeline Application.
  * Added keepalive enhancements.
  * Added packet capture framework.
  * Added floating VEB support for i40e PF driver.
  * Added support for live migration of a VM with SRIOV VF.
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides/rel_notes/release_16_07.html
  - http://dpdk.org/browse/dpdk/tree/doc/guides/rel_notes/release_16_07.rst
  - Or the doc/guides/rel_notes/release_16_07.rst file in the released
    tarball.]
- Removed patches that are already avilable in dpdk-16.07
  [ -0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch
  - 0003-mk-fix-external-shared-library-dependencies-of-libraries.patch
  - 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
  - 0005-d293dac-vhost-claim-support-of-guest-announce.patch
  - 0006-d639996-vhost-enable-log_shmfd-protocol-feature.patch
  - 0007-ixgbe-fix-VLAN-filter-missing-brackets.patch
  - 0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch
  - 0009-bonding-copy-entire-config-structure-in-mode-4.patch
  - 0010-bonding-fix-active-slaves-with-no-primary.patch
  - 0011-bonding-do-not-ignore-multicast-in-mode-4.patch
  - 0012-bonding-do-not-activate-slave-twice.patch
  - 0013-bonding-fix-crash-when-no-slave-device.patch
  - 0014-bonding-fix-detach-of-bonded-device.patch
  - 0015-bonding-fix-detach-of-slave-devices.patch
  - 0016-eal-linux-support-built-in-kernel-modules.patch
  - 0017-examples-l3fwd-handle-SIGINT-and-SIGTERM.patch
  - 0018-fm10k-fix-VLAN-flag-in-scattered-Rx.patch
  - 0019-i40e-base-fix-driver-load-failure.patch
  - 0020-i40e-base-fix-missing-check-for-stopped-admin-queue.patch
  - 0021-i40e-fix-inverted-check-for-no-refcount.patch
  - 0022-i40e-fix-overflow.patch
  - 0023-i40e-fix-VLAN-filtering.patch
  - 0024-mempool-fix-leak-when-creation-fails.patch
  - 0025-pcap-fix-captured-frame-length.patch
  - 0026-port-fix-crash-for-ethdev-writer-nodrop.patch
  - 0027-port-fix-crash-for-ring-writer-nodrop.patch
  - 0028-tools-fix-unbinding-failure-handling.patch
  - 0029-tools-support-Python-3-in-bind-script.patch
  - 0030-tools-support-binding-to-built-in-kernel-modules.patch
  - 0031-vhost-fix-leak-of-fds-and-mmaps.patch
  - 0032-virtio-fix-crash-in-statistics-functions.patch
  - 0033-virtio-fix-descriptors-pointing-to-the-same-buffer.patch
  - 0034-virtio-fix-restart.patch
  - 0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch
  - 0036-examples-fix-build-dependencies.patch
  - 0037-examples-ethtool-fix-build.patch
  - 0099-mk-fix-gcc-5-version-on-suse.patch
  - 0100-kni-fix-build-with-gcc-6.patch
  - 0101-ixgbe-fix-uninitialized-warning.patch
  - 0102-ixgbe-fix-constant-sign-in-left-shift-operator.patch
  - 0103-e1000-base-Add-missing-braces-to-the-if-statements.patch
  - 0104-igb-fix-constant-sign-in-left-shift-operator.patch
  - 0105-e1000-fix-missing-link-interrupt-check-brackets.patch
  - 0106-app-test-fix-missing-brackets.patch
  - 0107-examples-ip_pipeline-use-unsigned-constants-for-left.patch
  ]
- Created soft link for dpdk_proc_info and dpdk_nic_bind(from dpdk-procinfo, dpdk-devbind) to keep compatibility.
- Added a new binary dpdk-pdump dpdk-procinfo</changelog>
  <changelog author="mchandras@suse.de" date="1475755200">- Drop code for generating our own linker script.
  * Commit 948fd64befc3 (" mk: replace the combined library with a
    linker script") added upstream support for building and installing
    a linker script so we drop our code from the spec file which
    generated a much larger and possibly broken linker script resulting
    to linking issues (boo#1002534)</changelog>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
</package>
<package pkgid="271696aa14d08a955ce2601d51033aefa77476948a8a523b8a3131c3b3d4be34" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="16.11.6" rel="6.5.1"/>
  <changelog author="mchandras@suse.de" date="1479988800">- Update to version 16.07.1. Some of the fixes are listed below:
  * contigmem: zero all pages during mmap
  * crypto/null: fix key size increment value
  * hash: fix false zero signature key hit lookup
  * mem: fix crash on hugepage mapping error
  * mbuf: fix error handling on pool creation
  * net/e1000: fix returned number of available Rx descriptors
  * net/enic: fix freeing memory for descriptor ring
  * net/i40e: fix dropping packets with ethertype 0x88A8
  * net/i40e: fix mbuf leak during Rx queue release
  * net/i40e: fix null pointer dereferences when using VMDq+RSS
  * net/ixgbe/base: fix possible corruption of shadow RAM
  * net/ixgbe: fix VF reset to apply to correct VF
  * net/virtio_user: fix error management during init
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#fixes-in-16-07-01-stable-release]</changelog>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
</package>
<package pkgid="c8d7abaeac23cc42af7971455f732b639a4960a51e7b05ab2617cc275047cd82" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="16.11.8" rel="6.8.1"/>
  <changelog author="mchandras@suse.de" date="1480507200">- Update to version 16.07.2. Some of the fixes are listed below:
  * ethdev: prevent duplicate event callback
  * hash: fix bucket size usage
  * hash: fix unlimited cuckoo path
  * lpm: fix freeing memory
  * lpm: fix freeing unused sub-table on rule delete
  * mempool: fix leak if populate fails
  * mempool: fix search of maximum contiguous pages
  * pci: fix probing error if no driver found
  * net/bnx2x: fix maximum PF queues
  * net/bnxt: fix bit shift size
  * net/bnxt: fix crash when closing
  * net/enic: fix Rx queue index when not using Rx scatter
  * net/enic: fix crash on MTU update or Rx queue reconfigure
  * net/enic: fix crash with removed flow director filters
  * net/enic: fix max packet length check
  * net/enic: fix multi-queue Rx performance
  * net/enic: revert truncated packets counter fix
  * net/fm10k: fix VF Tx queue initialization
  * net/i40e: fix Rx hang when disable LLDP
  * net/ixgbe: fix VF registers
  * net/thunderx: fix Tx checksum handling
  * [The list of changes is rather long so please consult the following
    resources for the complete list of new features, bugfixes and other
    changes in this release:
  - http://dpdk.org/doc/guides-16.07/rel_notes/release_16_07.html#id2]</changelog>
  <changelog author="mvarlese@suse.com" date="1481544000">- Added support to build code for Thunderx platform(fate#321960).
- Introduced new dpdk-thunderx.spec file:
  * Removed architectures not supporting Thunderx platform (e.g. x86)
  * Added dependency on gcc v5.0 for armv8a-crc</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544001">- Added back in all the architectures to keep .spec files aligned
  * Driving thunderx platform architectural dependency via the ExclusiveArch tag</changelog>
  <changelog author="marco.varlese@suse.com" date="1481544002">- Fixed paths using %{name} to have the dpdk.spec aligned with dpdk-thunderx.spec</changelog>
  <changelog author="ndas@suse.de" date="1483531200">- Add pre_checkin.sh to generate the dpdk-thunderx.spec file</changelog>
  <changelog author="ndas@suse.de" date="1484913600">- Added gcc-6 as default compiler for CRC/mtune &amp; other optimizations.
- Fix possible parallel installation of dpdk subpackages.</changelog>
  <changelog author="ndas@suse.de" date="1486036800">- Update to version 16.11(fate#321541). Some of the new features are listed below:
  * Added software parser for packet type.
  * Improved offloads support in mbuf.
  * Added vhost-user dequeue zero copy support.
  * Added vhost-user indirect descriptors support.
  * Added vhost PMD xstats.
  * Added virtio NEON support for ARM.
  * Updated the ixgbe base driver.
  * Added APIs for VF management to the ixgbe PMD.
  * Updated the enic driver.
  * Added openssl PMD.
  * Added support for new gcc -march option.
  Detailed changes can be obtained from http://dpdk.org/doc/guides/rel_notes/release_16_11.html
- Resolved fixes in the updated versions are :
  * enic: Fixed several flow director issues.
  * enic: Fixed inadvertent setting of L4 checksum ptype on ICMP packets.
  * enic: Fixed high driver overhead when servicing Rx queues beyond the first.</changelog>
  <changelog author="ndas@suse.de" date="1486728000">- Enable rte_kni kernel module for dpdk(fate#322394).
  [+preamble]
- Build dpdk-thunderx only for aarch64</changelog>
  <changelog author="ndas@suse.de" date="1487246400">- Do not disable cryptodev as EXPREMENTAL tag has been removed.
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
  on it anymore and its removed from the upstream.</changelog>
  <changelog author="ndas@suse.de" date="1487937600">- Fix broken dpdk-pmd/* soft links(bsc#1026804).</changelog>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="ndas@suse.de" date="1514376000">- Enable broadcom chipset family Broadcom NetXtreme II BCM57810(bsc#1073363)</changelog>
  <changelog author="ndas@suse.de" date="1519214400">-  use cond_resched rather than schedule_timeout_interruptible(bsc#1069601)
  [+ 0005-use-cond_resched-rather-than-schedule_timeout_interr.patch]</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 16.11.6
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API
  [- 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  * 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]
- Remove fstack-clash-protection from EXTRA_CFLAGS as gcc-6 cant
  recognize it</changelog>
  <changelog author="marco.varlese@suse.com" date="1535630400">- Update to latest stable 16.11.8; some of the fixes are:
  * net/bnxt: fix HW Tx checksum offload check,
  fix incorrect IO address handling in Tx, fix Rx ring count limitation,
  check access denied for HWRM commands, fix RETA size, fix close operation
  * eal/linux: fix invalid syntax in interrupts, fix return codes on thread
  naming failure
  * kni: fix crash with null name, fix build with gcc 8.1
  * net/thunderx: fix build with gcc optimization on, avoid sq door bell
  write on zero packet
  * net/bonding: fix MAC address reset
  * vhost: fix missing increment of log cache count
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)
- Rebase patch:
  [* 0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
</package>
<package pkgid="d5341990a5260d768221158f8634d979d5f90d76ff1618cc20350666a1ff772a" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="23.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
</package>
<package pkgid="e3d230b5e79de0a603d1f5e4916760c965c908cf0d890fc1ebeb944ef1fb6c33" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="23.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
</package>
<package pkgid="3b435ca91a5f8031a0f2141ada3d38a568a9b246cc76029ef9ea8d8c6655e057" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="26.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
</package>
<package pkgid="8faba23eecf737a9d342683b7d8779dd144e59b3f65df773ce3b7e44427ce07d" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="26.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
</package>
<package pkgid="a6748e3ce64d36517a86bb2ba7427969d6063ceb345e75ba037d78f92df59ee3" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="29.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
</package>
<package pkgid="74947c1beb23a513e28ebf8295d0903f9f7a6a8c9c8210e4e211a4d4230d6527" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="29.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
</package>
<package pkgid="2dc6902e451ecb1214962cef726d206c50c03a371315a103ee15b5807831d9a2" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="32.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch
- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch
- Fix finding btrfs devices (bsc#1104178).
  * add 0569-s-find_btrfs_devs-btrfs_devs.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch
- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  * adds 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch
- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch
- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
</package>
<package pkgid="6fcd6077ffe498743524f2c0b7a47040f2e51bf36d1a7afeb6fa1e4691610362" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="32.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch
- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch
- Fix finding btrfs devices (bsc#1104178).
  * add 0569-s-find_btrfs_devs-btrfs_devs.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch
- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  * adds 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch
- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch
- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
</package>
<package pkgid="1adfb7dd28c51b5f3c1b7cbb0c22754bc001dfce635d0ccd13cadaa5f43d1c88" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="23.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
</package>
<package pkgid="94fc62c0d5b824c8e67ccdd6df3d1588ccd8f2a98609b258c3dd3fe00b8b44b6" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="26.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
</package>
<package pkgid="f7713ba549e3d129005b11ccfd5601bda2811d118c32e1759dd11a4286f31e4d" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="29.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
</package>
<package pkgid="3422741edc39fd7516a53aeacd780c3f5c8ff83089c58431a8e6f4b72980d104" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="32.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch
- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch
- Fix finding btrfs devices (bsc#1104178).
  * add 0569-s-find_btrfs_devs-btrfs_devs.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch
- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  * adds 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch
- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch
- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
</package>
<package pkgid="9baab8f0aeac9f6e83a522129fbe18d03fca63cf2329a2c640e2e1455eaaac15" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="8.33.14" rel="17.1"/>
  <changelog author="ms@suse.de" date="1522756800">- Fixed truncation of image when writing vhd tag
  When writing the vhd tag into a vhdfixed formatted image
  the image was opened with the wrong open bits 'wb' and
  thus was truncated at the 64k offset. This patch fixes
  the open bits to allow in-place tag writing. This
  Fixes bsc#1077096</changelog>
  <changelog author="ms@suse.de" date="1523361600">- Support lookup for fstab.append on fstab creation
  At the time kiwi creates the fstab with all required fields
  to boot the system it now also looks for an optional fstab.append
  file and appends its contents to the fstab file. This allows
  to setup custom fstab entries for filesystem mounts which are
  established outside of the kiwi image building process by
  e.g a service at first boot</changelog>
  <changelog author="ms@suse.de" date="1523534400">- Bump version: 8.33.5 ? 8.33.6</changelog>
  <changelog author="ms@suse.de" date="1523534401">- Follow up fix for target dir keeps permissions
  This is a reference commit for commit:c98fe65d2 indicating
  the SLE12 reference bug bsc#1077619</changelog>
  <changelog author="ms@suse.de" date="1523534402">- Bump version: 8.33.6 ? 8.33.7</changelog>
  <changelog author="ms@suse.de" date="1523620800">- Support lookup for fstab.append on fstab creation
  This is a reference commit for the required implementation
  done in commit 8798cc needed for fate#323874</changelog>
  <changelog author="ms@suse.de" date="1523620801">- Bump version: 8.33.7 ? 8.33.8</changelog>
  <changelog author="ms@suse.de" date="1523880000">- Resize partition table after image resize
  This is a reference commit for the required implementation
  done in commit 939cd8cc needed for fate#323874</changelog>
  <changelog author="ms@suse.de" date="1523880001">- Bump version: 8.33.8 ? 8.33.9</changelog>
  <changelog author="dcassany@suse.com" date="1524225600">- Adding unpartitioned size attribute
  This commit adds the possibility of setting some unpartitioned area
  after the systemdisl partition into the image.
  Fixes #709</changelog>
  <changelog author="dcassany@suse.com" date="1524484800">- Some improvements on size calculation
  This commit simplifies the unpartitioned area size calculation.
  Fixes #709 and it is related to fate#323874</changelog>
  <changelog author="dcassany@suse.com" date="1524571200">- Backport kiwi.utils.size</changelog>
  <changelog author="dcassany@suse.com" date="1524571201">- Add test for the utils class StringToSize
  This commit adds a couple of unit tests for the StringToSize class.</changelog>
  <changelog author="dcassany@suse.com" date="1524571202">- Bump version: 8.33.9 ? 8.33.10</changelog>
  <changelog author="ms@suse.de" date="1524744000">- Bump version: 8.33.10 ? 8.33.11</changelog>
  <changelog author="ms@suse.de" date="1525867200">- Ported xslt templates workaround
  Comment blocks causes use of insane amounts of memory
  during XSLT processing. This fixes bsc#1092485</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 8.33.11 ? 8.33.12</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Bump version: 8.33.12 ? 8.33.13</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="dcassany@suse.com" date="1526472001">- Bump version: 8.33.13 ? 8.33.14</changelog>
</package>
<package pkgid="219bf57a7acebcdb5004429f1cfe6f4d188424bb11451b60d9e938143ce65bd0" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="8.33.3" rel="11.1"/>
  <changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
  <changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
  <changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
  <changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
  <changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
  <changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
  <changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
  <changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
  <changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
  <changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
  <changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
  <changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
  <changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
  <changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
  <changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
  <changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
  <changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
  <changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
  <changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
  <changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>
</package>
<package pkgid="23bd711a5bd4be7f8c71a13a1f4d5ad75369928efb9e1657e05cbcde8a0ebe68" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="8.33.5" rel="14.1"/>
  <changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
  <changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
  <changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
  <changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
  <changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
  <changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
  <changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
  <changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
  <changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
  <changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
  <changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
  <changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
  <changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
  <changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
  <changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
  <changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>
  <changelog author="ms@suse.de" date="1512388800">- Make sure toplevel target dir keeps permissions
  When syncing data via rsync we make sure the toplevel target
  directory the data gets synced to does not change it's origin
  permissions. This Fixes #557
  This backport to SLE12_SP3 fixes bsc#1077619</changelog>
  <changelog author="ms@suse.de" date="1512561600">- Fixed use of stat result in os.chmod
  oct method returns a string representation which was mistakenly
  used in a subsequent os.chmod call. This Fixes #564</changelog>
  <changelog author="dcassany@suse.com" date="1516968000">- Bump version: 8.33.3 ? 8.33.4</changelog>
  <changelog author="dcassany@suse.com" date="1517313600">- Bump version: 8.33.4 ? 8.33.5</changelog>
</package>
<package pkgid="835e8a12e9b078de9d1379fc8dc3d0668aae1d0b22558b48dd4ca481cc4ff2d5" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="8.33.14" rel="17.1"/>
  <changelog author="ms@suse.de" date="1522756800">- Fixed truncation of image when writing vhd tag
  When writing the vhd tag into a vhdfixed formatted image
  the image was opened with the wrong open bits 'wb' and
  thus was truncated at the 64k offset. This patch fixes
  the open bits to allow in-place tag writing. This
  Fixes bsc#1077096</changelog>
  <changelog author="ms@suse.de" date="1523361600">- Support lookup for fstab.append on fstab creation
  At the time kiwi creates the fstab with all required fields
  to boot the system it now also looks for an optional fstab.append
  file and appends its contents to the fstab file. This allows
  to setup custom fstab entries for filesystem mounts which are
  established outside of the kiwi image building process by
  e.g a service at first boot</changelog>
  <changelog author="ms@suse.de" date="1523534400">- Bump version: 8.33.5 ? 8.33.6</changelog>
  <changelog author="ms@suse.de" date="1523534401">- Follow up fix for target dir keeps permissions
  This is a reference commit for commit:c98fe65d2 indicating
  the SLE12 reference bug bsc#1077619</changelog>
  <changelog author="ms@suse.de" date="1523534402">- Bump version: 8.33.6 ? 8.33.7</changelog>
  <changelog author="ms@suse.de" date="1523620800">- Support lookup for fstab.append on fstab creation
  This is a reference commit for the required implementation
  done in commit 8798cc needed for fate#323874</changelog>
  <changelog author="ms@suse.de" date="1523620801">- Bump version: 8.33.7 ? 8.33.8</changelog>
  <changelog author="ms@suse.de" date="1523880000">- Resize partition table after image resize
  This is a reference commit for the required implementation
  done in commit 939cd8cc needed for fate#323874</changelog>
  <changelog author="ms@suse.de" date="1523880001">- Bump version: 8.33.8 ? 8.33.9</changelog>
  <changelog author="dcassany@suse.com" date="1524225600">- Adding unpartitioned size attribute
  This commit adds the possibility of setting some unpartitioned area
  after the systemdisl partition into the image.
  Fixes #709</changelog>
  <changelog author="dcassany@suse.com" date="1524484800">- Some improvements on size calculation
  This commit simplifies the unpartitioned area size calculation.
  Fixes #709 and it is related to fate#323874</changelog>
  <changelog author="dcassany@suse.com" date="1524571200">- Backport kiwi.utils.size</changelog>
  <changelog author="dcassany@suse.com" date="1524571201">- Add test for the utils class StringToSize
  This commit adds a couple of unit tests for the StringToSize class.</changelog>
  <changelog author="dcassany@suse.com" date="1524571202">- Bump version: 8.33.9 ? 8.33.10</changelog>
  <changelog author="ms@suse.de" date="1524744000">- Bump version: 8.33.10 ? 8.33.11</changelog>
  <changelog author="ms@suse.de" date="1525867200">- Ported xslt templates workaround
  Comment blocks causes use of insane amounts of memory
  during XSLT processing. This fixes bsc#1092485</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 8.33.11 ? 8.33.12</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Bump version: 8.33.12 ? 8.33.13</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="dcassany@suse.com" date="1526472001">- Bump version: 8.33.13 ? 8.33.14</changelog>
</package>
<package pkgid="0204485e4152d3e8e4e8d20956eea9df528cadc7ac936dbd5b480b4fa9b1b04f" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="8.33.3" rel="11.1"/>
  <changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
  <changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
  <changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
  <changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
  <changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
  <changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
  <changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
  <changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
  <changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
  <changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
  <changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
  <changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
  <changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
  <changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
  <changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
  <changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
  <changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
  <changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
  <changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
  <changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>
</package>
<package pkgid="6871f3180a721d8610183e65ed21320de5d061b2c642016cdc062c6584868834" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="8.33.5" rel="14.1"/>
  <changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
  <changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
  <changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
  <changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
  <changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
  <changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
  <changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
  <changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
  <changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
  <changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
  <changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
  <changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
  <changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
  <changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
  <changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
  <changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>
  <changelog author="ms@suse.de" date="1512388800">- Make sure toplevel target dir keeps permissions
  When syncing data via rsync we make sure the toplevel target
  directory the data gets synced to does not change it's origin
  permissions. This Fixes #557
  This backport to SLE12_SP3 fixes bsc#1077619</changelog>
  <changelog author="ms@suse.de" date="1512561600">- Fixed use of stat result in os.chmod
  oct method returns a string representation which was mistakenly
  used in a subsequent os.chmod call. This Fixes #564</changelog>
  <changelog author="dcassany@suse.com" date="1516968000">- Bump version: 8.33.3 ? 8.33.4</changelog>
  <changelog author="dcassany@suse.com" date="1517313600">- Bump version: 8.33.4 ? 8.33.5</changelog>
</package>
<package pkgid="0298e691b206eac4e1d083b5462d89461c5bd60de85acd34e63522520cfceb69" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="23.2"/>
  <changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
</package>
<package pkgid="458413ced601d74b7a4c5265383a6f37ae094b948f74fa300cf2628b954bb654" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="26.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
</package>
<package pkgid="5c0b5265a3f556ad460590e24e970cc3b2a59cd402a46b59e0533ded56484d44" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="29.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
</package>
<package pkgid="d5797c7c38eb2daa2cc017b62ef9cfeb8f9b8fbefa8c4386a6ad49e28b2925c3" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="32.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch
- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch
- Fix finding btrfs devices (bsc#1104178).
  * add 0569-s-find_btrfs_devs-btrfs_devs.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch
- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  * adds 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch
- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch
- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
</package>
<package pkgid="50ff82dbecf275821db88e12339b87c8cc89d5ff89e100a6c892fc2a5dd3f1ab" name="drbd" arch="src">
  <version epoch="0" ver="9.0.11+git.1e2bccdc" rel="2.11.1"/>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch
  Merge pacth enable-conn-in-not-allowed-dual-primaries.patch</changelog>
</package>
<package pkgid="14256aa0f5d6d384f1b6862126df6e14b94dc4ad68e6746fd099df375fe56716" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.11+git.1e2bccdc" rel="2.11.1"/>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch
  Merge pacth enable-conn-in-not-allowed-dual-primaries.patch</changelog>
</package>
<package pkgid="f1ecbac302b505cbc0cc934acb1b23b12c0d94e1206d528d13b37b4c53cfe301" name="drbd" arch="src">
  <version epoch="0" ver="9.0.11+git.1e2bccdc" rel="2.8.1"/>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
</package>
<package pkgid="8bc7e265084a8fd3685e109376d3f8c32b68f8d6ac0b532220883ab35c9e95f6" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.11+git.1e2bccdc" rel="2.8.1"/>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
</package>
<package pkgid="a00e83fac67cca2d1a3f26cd4ca6c35b582ce64e26f1814a8ebab35b79d42a36" name="drbd" arch="src">
  <version epoch="0" ver="9.0.8+git.c8bc3670" rel="2.2.1"/>
  <changelog author="nwang@suse.com" date="1439985600">- Fate#317940, merge patch set into one patch.
- Support zeroout/discard-devices instead of zap-devices
- New feature flag FF_DISCARD
- Add patch 0001-drbd-Support-zeroout-device-in-initial-sync.patch
- Remove old patch set:
  Patch 0000-cover-letter-fate317940.patch
  Patch 0001-drbd-Fix-the-wrong-logic-of-moving-history.patch
  Patch 0002-drbd-Add-options-zap_devices-to-new-current-uuid.patch
  Patch 0003-drbd-A-function-to-zero-out-drbd-backing-device.patch
  Patch 0004-drbd-New-packet-P_ZERO_OUT.patch
  Patch 0005-drbd-Functions-to-notify-peer-node-to-start.patch
  Patch 0006-drbd-Wapper-for-zeroing-out-device-by-worker.patch
  Patch 0007-drbd-Flags-for-background-drbd-device-work.patch
  Patch 0008-drbd-Function-to-work-with-packet-P_ZERO_OUT.patch
  Patch 0009-drbd-Receive-zero-out-command-from-peer-node.patch
  Patch 0010-drbd-Handle-new-current-uuid-zap-devices.patch</changelog>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
</package>
<package pkgid="815ac28a2d947e243327a7688571743146a45b383112175ec1a4a3f9290db2d3" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.8+git.c8bc3670" rel="2.2.1"/>
  <changelog author="nwang@suse.com" date="1439985600">- Fate#317940, merge patch set into one patch.
- Support zeroout/discard-devices instead of zap-devices
- New feature flag FF_DISCARD
- Add patch 0001-drbd-Support-zeroout-device-in-initial-sync.patch
- Remove old patch set:
  Patch 0000-cover-letter-fate317940.patch
  Patch 0001-drbd-Fix-the-wrong-logic-of-moving-history.patch
  Patch 0002-drbd-Add-options-zap_devices-to-new-current-uuid.patch
  Patch 0003-drbd-A-function-to-zero-out-drbd-backing-device.patch
  Patch 0004-drbd-New-packet-P_ZERO_OUT.patch
  Patch 0005-drbd-Functions-to-notify-peer-node-to-start.patch
  Patch 0006-drbd-Wapper-for-zeroing-out-device-by-worker.patch
  Patch 0007-drbd-Flags-for-background-drbd-device-work.patch
  Patch 0008-drbd-Function-to-work-with-packet-P_ZERO_OUT.patch
  Patch 0009-drbd-Receive-zero-out-command-from-peer-node.patch
  Patch 0010-drbd-Handle-new-current-uuid-zap-devices.patch</changelog>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
</package>
<package pkgid="2f95965730b42f983ff1c0f9b4c020fbc016cafbe2799ca0fe31fb39dcc2b927" name="drbd" arch="src">
  <version epoch="0" ver="9.0.8+git.c8bc3670" rel="2.5.1"/>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
</package>
<package pkgid="25e09c6edebff6edfb355a0205ea52b6bc63d15719292c538391cfe9fe97533e" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.8+git.c8bc3670" rel="2.5.1"/>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
</package>
<package pkgid="68a68c63cd8c83b21e95cac705cb7febd0b345a5fb37b618bdd8009343efce07" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.11+git.1e2bccdc_k4.4.162_78" rel="2.8.1"/>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
</package>
<package pkgid="0e83ab1ff197e337e6904b6f0bf5362e2854d572bbd7f293a5843fa75743b752" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.11+git.1e2bccdc_k4.4.165_81" rel="2.11.1"/>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.0.11, for bsc#1097571 and bsc#1110860
  * Fix bug in compat code: Without this fix large bios are not split.
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Add patch fix-kernel-version.patch
  Add patch enable-conn-in-not-allowed-dual-primaries.patch
  Add patch fix-hang-demote-after-ioerror.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch
  Merge pacth enable-conn-in-not-allowed-dual-primaries.patch</changelog>
</package>
<package pkgid="e2b759ad0c44e2ff015ec72a3205c5557c0879859048f8a96c11c69164e5a770" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.8+git.c8bc3670_k4.4.114_42" rel="2.2.1"/>
  <changelog author="nwang@suse.com" date="1439985600">- Fate#317940, merge patch set into one patch.
- Support zeroout/discard-devices instead of zap-devices
- New feature flag FF_DISCARD
- Add patch 0001-drbd-Support-zeroout-device-in-initial-sync.patch
- Remove old patch set:
  Patch 0000-cover-letter-fate317940.patch
  Patch 0001-drbd-Fix-the-wrong-logic-of-moving-history.patch
  Patch 0002-drbd-Add-options-zap_devices-to-new-current-uuid.patch
  Patch 0003-drbd-A-function-to-zero-out-drbd-backing-device.patch
  Patch 0004-drbd-New-packet-P_ZERO_OUT.patch
  Patch 0005-drbd-Functions-to-notify-peer-node-to-start.patch
  Patch 0006-drbd-Wapper-for-zeroing-out-device-by-worker.patch
  Patch 0007-drbd-Flags-for-background-drbd-device-work.patch
  Patch 0008-drbd-Function-to-work-with-packet-P_ZERO_OUT.patch
  Patch 0009-drbd-Receive-zero-out-command-from-peer-node.patch
  Patch 0010-drbd-Handle-new-current-uuid-zap-devices.patch</changelog>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
</package>
<package pkgid="1dcf2cf000166310eaab15e377f5db33be0716cf05fa70d1a7a8692efba07237" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.8+git.c8bc3670_k4.4.120_45" rel="2.5.1"/>
  <changelog author="nwang@suse.com" date="1443182400">- BSC#947460, add rcdrbd symlink.</changelog>
  <changelog author="nwang@suse.com" date="1444996800">- BSC#950477, update to 8.4.6-5 to fix bdi congested.
- Rename 0001-drbd-Support-zeroout-device-in-initial-sync.patch
  to 0001-Support-zeroout-device-in-initial-sync.patch
- Add update-to-8.4.6-5.patch</changelog>
  <changelog author="nwang@suse.com" date="1445515200">- BSC#950477, support new bio struct in kernel4.3
- Add new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1448020800">- BSC#955968, support GFP_RECLAIM in kernel4.4
- Add rename-GFP_WAIT-to-GFP_RECLAIM.patch</changelog>
  <changelog author="nwang@suse.com" date="1448884800">- Update to released drbd-9.0.0
- Remove patch 0001-Support-zeroout-device-in-initial-sync.patch
- Remove patch update-to-8.4.6-5.patch
- Remove patch rename-GFP_WAIT-to-GFP_RECLAIM.patch
- Remove patch new-bio-struct.patch</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to release drbd-9.0.1
- Depend on drbd-utils &gt;= 8.9.6</changelog>
  <changelog author="olaf@aepfle.de" date="1457352001">- Remove timstamp from binaries
  Add patch drbd-buildcompare.patch</changelog>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  Add patch keep-bitmap-in-create-md-kernel.patch</changelog>
</package>
<package pkgid="0427a989b733c058676ef9bca945a7234a01440469aec7d8128ce9897ddf452d" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.0.0" rel="3.1"/>
  <changelog author="nwang@suse.com" date="1450958400">- Update to v8.9.5
  * add support for new disk option
    'rs-discard-granularity' (module v8.4.7)
  * add support for new disk option
    'discard-zeroes-if-aligned' (module v8.4.7)
  * add support for v9 "path" commands
  * doc improvements/corrections
  * improvements to drbd ocf resource agent
    and pacemaker "constraint based fencing"
    (crm-fence-peer.sh)
  * drbd-overview improvements
  * Add an autoconf switch for building without man pages
  * Fix compatibility with the musl C library
  * Introduce the concept of paths within a connection to
    the config file; add support for paths to drbdadm adjust
  * Allow multiple connection-mesh statements within one resource
  * Document peer-device-options on the drbd-9.0 man pages
  * increase the lower boundary for al-extents from 7 to 67;
    drbdadm clamps al-extents to 67 implicitly if you configures
    something lower than 67
  * Document the events2 command on the drbd-8.4 man page
  * Fix environment variables for handlers
  * Rewrite the parser for configure options; Reuse the data
    structures describing drbdsetup options
  * No longer try to set peer-device-options with the connect
    or attach commands; Only do it with the up and attach commands
  * Fixed issues with stderr messages might go into arbitrary FDs
  * Allow recursive includes; drbdadm includes each config
    file only once
  * Fix parsing cut-off proxy sections
  * When converting 8.4 to 9.0 meta-data produce meta-data the drbd9
    kernel driver will accept
  * Obey max-peers for all volumes when creating meta-data
  * Do not re-register at usage.drbd.org when the module is not
    loaded when drbdadm is invoked</changelog>
  <changelog author="nwang@suse.com" date="1456228800">- bsc#967753. Fix different udev rules folder in Leap and openSUSE.</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to v8.9.6
  * Call "drbdsetup resize" only as often as necessary on
    "drbdadm resize"
  * Disconnect connection first on single path deletion from connection
  * Add unfence-peer handler
  * Fix "drbdadm adjust" for proxy configurations</changelog>
  <changelog author="nwang@suse.com" date="1457352001">- bsc#955177, fence when another node pacemaker shutdown.
  add patch fence-after-pacemaker-down.patch</changelog>
  <changelog author="nwang@suse.com" date="1457956800">- fate#320495. Support ha resource agent of drbd9.
  Add patch support-drbd9-ra.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
</package>
<package pkgid="c9890c577c97ddc3ee8bee54c3440167dd8e6185db5e89f812462a878e9fc207" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="3.1"/>
  <changelog author="nwang@suse.com" date="1450958400">- Update to v8.9.5
  * add support for new disk option
    'rs-discard-granularity' (module v8.4.7)
  * add support for new disk option
    'discard-zeroes-if-aligned' (module v8.4.7)
  * add support for v9 "path" commands
  * doc improvements/corrections
  * improvements to drbd ocf resource agent
    and pacemaker "constraint based fencing"
    (crm-fence-peer.sh)
  * drbd-overview improvements
  * Add an autoconf switch for building without man pages
  * Fix compatibility with the musl C library
  * Introduce the concept of paths within a connection to
    the config file; add support for paths to drbdadm adjust
  * Allow multiple connection-mesh statements within one resource
  * Document peer-device-options on the drbd-9.0 man pages
  * increase the lower boundary for al-extents from 7 to 67;
    drbdadm clamps al-extents to 67 implicitly if you configures
    something lower than 67
  * Document the events2 command on the drbd-8.4 man page
  * Fix environment variables for handlers
  * Rewrite the parser for configure options; Reuse the data
    structures describing drbdsetup options
  * No longer try to set peer-device-options with the connect
    or attach commands; Only do it with the up and attach commands
  * Fixed issues with stderr messages might go into arbitrary FDs
  * Allow recursive includes; drbdadm includes each config
    file only once
  * Fix parsing cut-off proxy sections
  * When converting 8.4 to 9.0 meta-data produce meta-data the drbd9
    kernel driver will accept
  * Obey max-peers for all volumes when creating meta-data
  * Do not re-register at usage.drbd.org when the module is not
    loaded when drbdadm is invoked</changelog>
  <changelog author="nwang@suse.com" date="1456228800">- bsc#967753. Fix different udev rules folder in Leap and openSUSE.</changelog>
  <changelog author="nwang@suse.com" date="1457352000">- Update to v8.9.6
  * Call "drbdsetup resize" only as often as necessary on
    "drbdadm resize"
  * Disconnect connection first on single path deletion from connection
  * Add unfence-peer handler
  * Fix "drbdadm adjust" for proxy configurations</changelog>
  <changelog author="nwang@suse.com" date="1457352001">- bsc#955177, fence when another node pacemaker shutdown.
  add patch fence-after-pacemaker-down.patch</changelog>
  <changelog author="nwang@suse.com" date="1457956800">- fate#320495. Support ha resource agent of drbd9.
  Add patch support-drbd9-ra.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
</package>
<package pkgid="1b1ab881a0bc395f20d30ba7e8d2fad8ddf1c071b9690be72f134b2b43968933" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.0.0" rel="6.1"/>
  <changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
</package>
<package pkgid="2a8580abe65aa1cce92747453ec6b0876c05b6b6cb589e68421eec75d9db3cab" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="6.1"/>
  <changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
</package>
<package pkgid="daad795d1115b7a28615462a664b876b34ce9b6fae2eb6f9b2c0638ee8e0cc06" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.4.0" rel="12.1"/>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap
- Remove patch Fix-no-bitmap-allocate-for-stacked-res.patch
  remove patch Fix-parsing-drbdsetup-show-for-adjust.patch
  remove patch Fix-peer_device-objects.patch
  remove patch fix-segfault-up-stacked-resource.patch
  remove patch Support-logfacility-local5.patch
  remove patch Support-pass-force-to-dump-md.patch
  remove patch Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1545134400">- bsc#1118974, remove the deprecated comment.
  Add patch remove-comment-of-drbdoverview.patch</changelog>
</package>
<package pkgid="296575412942deff026c79f64026332fa0fe3033175ea34c810288ebcd2d0b3b" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.4.0" rel="12.1"/>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap
- Remove patch Fix-no-bitmap-allocate-for-stacked-res.patch
  remove patch Fix-parsing-drbdsetup-show-for-adjust.patch
  remove patch Fix-peer_device-objects.patch
  remove patch fix-segfault-up-stacked-resource.patch
  remove patch Support-logfacility-local5.patch
  remove patch Support-pass-force-to-dump-md.patch
  remove patch Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1545134400">- bsc#1118974, remove the deprecated comment.
  Add patch remove-comment-of-drbdoverview.patch</changelog>
</package>
<package pkgid="ce001e7ec6c86d2a9fcc0aa2504e258017e9f2ee8cade087664b684bb0ff691c" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.4.0" rel="9.1"/>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap
- Remove patch Fix-no-bitmap-allocate-for-stacked-res.patch
  remove patch Fix-parsing-drbdsetup-show-for-adjust.patch
  remove patch Fix-peer_device-objects.patch
  remove patch fix-segfault-up-stacked-resource.patch
  remove patch Support-logfacility-local5.patch
  remove patch Support-pass-force-to-dump-md.patch
  remove patch Update-block-drbd-script-to-support-xen.patch</changelog>
</package>
<package pkgid="369a53797f74eb73a15c1776d637c91b6369a80b5c832c1039539e3bf58bb432" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.4.0" rel="9.1"/>
  <changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
  <changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1058770, fix possible kernel trace while starting
  the initial syncing of a stacked drbd
- Backport fix of peer_device objects
- Add patch Fix-peer_device-objects.patch
  Add patch Fix-parsing-drbdsetup-show-for-adjust.patch
  Add patch Fix-no-bitmap-allocate-for-stacked-res.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077176, support passing the string "--force"
  to "drbdadm dump-md".
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519387200">- bsc#1037109, drbdmeta does not propagate full bitmap
  fix keeping id when downgrade from v9 to v8
- Add patch keep-bitmap-in-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1519819200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1519905600">- bsc#1064402, remove the hardcoded local5 of logfacility.
- Add patch Support-logfacility-local5.patch</changelog>
  <changelog author="nwang@suse.com" date="1539259200">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap
- Remove patch Fix-no-bitmap-allocate-for-stacked-res.patch
  remove patch Fix-parsing-drbdsetup-show-for-adjust.patch
  remove patch Fix-peer_device-objects.patch
  remove patch fix-segfault-up-stacked-resource.patch
  remove patch Support-logfacility-local5.patch
  remove patch Support-pass-force-to-dump-md.patch
  remove patch Update-block-drbd-script-to-support-xen.patch</changelog>
</package>
<package pkgid="cd84e45e8ea09e65fbc50fab8c0255f0ad69a6a1a4ef211e243560cb2b6a23a9" name="drkonqi5" arch="x86_64">
  <version epoch="0" ver="5.8.7" rel="11.1"/>
  <changelog author="wbauer@tmo.at" date="1478952000">- Add Look-for-both-json-and-desktop-metadata.patch to fix adding a
  panel or plasmoid with the new json metadata files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1479902400">- Update to 5.8.4
  * New bugfix release
  * For more details please see:
    https://www.kde.org/announcements/plasma-5.8.4.php
- Changes since 5.8.3:
  * properly parse exec line before qprocessing it for autostart
  * Disable Qt's high DPI scaling on shutdown/switch user dialogs
  * Don't set PanelView visibilty when opening/closing config
  * Check KPluginInfo.service() returns a valid object
  * Revert "Port to new plasma-framework API"
  * Add plasma-discover to mappings
  * [Windowed Widgets Runner] Don't access invalid KPluginMetaData
  * Load screenpool at the same time as we connect to screenchanged signals
  * Avoid connecting to screen changed signals twice
  * Sync app config in sync with applets config
  * make sure all outputs are known
  * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome
  * [XWindowTasksModel] Check for service being empty before searching new ones
  * fix behavior of scrollable systray popups
  * Introduce new pre-layout script hook
  * Make sure we're looking both for json and desktop metadata
  * Port to new plasma-framework API
  * Modified distance function to keep aspect ratio as close as possible
- Remove patches, now upstream:
  * 0001-taskmanagerrulesrc-Add-Rewrite-Rule-for-Google-chrom.patch
  * 0002-make-sure-all-outputs-are-known.patch
  * 0003-Sync-app-config-in-sync-with-applets-config.patch
  * 0004-Avoid-connecting-to-screen-changed-signals-twice.patch
  * 0005-Load-screenpool-at-the-same-time-as-we-connect-to-sc.patch
  * Look-for-both-json-and-desktop-metadata.patch
  * keep-wallpaper-aspect-ratio-wallpaper-on-screen-resolution-change.diff
  * use-nearest-aspect-ratio-available-wallpaper.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1482840000">- Update to 5.8.5
  * New bugfix release
  * For more details please see:
    https://www.kde.org/announcements/plasma-5.8.5.php
- Changes since 5.8.4:
  * notice when the only screen changes
  * make sure  applet is removed from stack when destroyed
  * [Lock Screen] Wrap OSD in its own ColorScope
  * Move updating of primary screen in screenpool after fetching its id
  * Calendar: clear selection on opening
  * Fix regression in last commit, don't show battery life as 100 when it's 0
  * Fix "Unable to assign [undefined] to int" log
  * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry.
  * systemtray: Don't propagate unhandled wheel events
  * [Lock Screen] Add keyboard icon for keyboard layout switcher
  * remove categories not present on server anymore
  * Select correct index without timer
  * Expose rowCount as data role in TaskGroupingProxyModel.
  * [taskmanagerrulesrc] Add Rewrite Rule for chromium
  * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data
  * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata
  * [SDDM Theme] Remember last username
  * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser
  * fix config dialogs in ltr mode
- Fixes:
  * boo#1022119</changelog>
  <changelog author="wbauer@tmo.at" date="1487592000">- drkonqi can use konsole again, the problems there are fixed</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1487678400">- Update to 5.8.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.8.6.php
- Changes since 5.8.5:
  * Port to QMultiHash.
  * Only remove + announce if leader change actually occured, avoid excessive loop.
  * Fix crash.
  * [Notifications] Never manually hide() the NotificationPopup
  * Add comment laying out goals.
  * Fix crash when switching activities.
  * Tweak alphabetic (default) sort behavior.
  * turn the NotificationItem in a MouseArea
  * [DesktopView] show() ConfigView when it is already opened
  * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file
  * [System Tray Containment] Ungrab mouse before opening context menu
  * [KRunner] In doubt use primary screen for view position
  * Drop legacy fixup rule for VirtualBox.
  * fix isOutputRedundant logic
  * Fix group parents not appearing when disabling inline grouping.
  * Corona::screenGeometryChanged on qscreen resized
  * MediaController: Update position while queuedPositionUpdate timer is running
  * better clean up of duplicate containments
  * Fix "Pinned Chrome disappears when all Chrome windows are closed"
  * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type
  * Systray: Move all icon resolution to dataengine
  * use a native event filter to notice the screen was swapped
- Fixes:
  * kde#374531
  * kde#365617
  * kde#371858
  * kde#375507
  * kde#350468
  * kde#375574
  * kde#373698
  * kde#376055
- Revert upstream commit to allow use of our current slightly different fix:
  * 0001-Revert-Systray-Move-all-icon-resolution-to-dataengin.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Provide dbus(org.freedesktop.Notifications): plasmashell
  implements the Notifications interface.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1490356800">- Add upstream patch to fix disabling the OSD:
  * 0001-OSD-Allow-disabling-OSD-through-config-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1490356801">- Backport the global menu from 5.9/master (boo#1026534):
  * 0001-Clean-up-KAppMenu.patch
  * 0002-Move-SNI-s-libdbusmenu-qt-fork-to-the-root-directory.patch
  * 0003-Fix-build-of-DBusMenuImporter-the-ASYNCHRONOUS-argum.patch
  * 0004-Remove-duplicated-code-from-DBusMenu-importer.patch
  * 0005-Route-through-an-actionId-argument.patch
  * 0006-Sort-out-compile-warnings-on-unused-vars.patch
  * 0007-Add-small-app-for-testing-appmenu.patch
  * 0008-Add-missing-license-to-test-file.patch
  * 0009-Add-missing-CMakeLists.txt-in-subdir.patch
  * 0010-Reuse-QAction-and-QMenu-items-on-updates.patch
  * 0011-Replace-recursive-layout-loading-with-dynamic-loadin.patch
  * 0012-Simplify-AppMenu-menu-management.patch
  * 0013-Global-Menu-Applet.patch
  * 0014-Fix-compile-with-gcc-4.8.patch
  * 0015-Changes-to-global-menu-applet.patch
  * 0016-Take-into-account-devicePixelRatio-when-placing-appl.patch
  * 0017-Fine-tune-wording-for-disabled-app-menu.patch
  * 0018-Take-into-account-kiosk-restrictions-for-when-appmen.patch
  * 0019-Remove-unused-Connections-from-the-applet.patch
  * 0020-Don-t-pass-immutable-properties-from-updateAction.patch
  * 0021-Avoid-using-API-new-in-Qt-5.7.-Plasma-workspace-reli.patch
  * 0022-Fix-mapToGlobal.patch
  * 0023-Fix-calling-KWindowSystem-windowType-without-fetchin.patch
  * 0024-Keep-AppletMenu-as-small-as-possible.patch
  * 0025-Don-t-load-menu-when-switching-window-focus-to-the-d.patch
  * 0026-Don-t-hide-applet-when-it-needs-configuring.patch
  * 0027-Signal-which-menu-has-updated-in-libdbusmenu-qt.patch
  * 0028-pre-load-the-first-layer-of-sub-menus.patch
  * 0029-Generate-DBusMenu-Interface-for-libdbusmenuqt.patch
  * 0030-Don-t-re-evaluate-the-model-constantly-whilst-loopin.patch
  * 0031-Hide-menu-if-the-menu-disappears-off-DBus.patch
  * 0032-guard-against-menu-being-deleted-whilst-updating.patch
  * 0033-fix-dbus-xml-compilation.patch
  * 0034-try-to-put-annotations-before-parameters-definition.patch
  * 0035-Replace-std-bind-with-lambda.patch
  * 0036-add-include-QtQml-for-old-Qt-versions.patch
  * 0037-Appmenu-Applet-Check-whether-buttonGrid-has-a-window.patch
  * 0038-Fix-memory-leak-in-Appmenu-when-using-compact-menu.patch
  * 0039-AppMenu-Applet-Map-from-scene-after-mapping-from-glo.patch
  * 0040-Rename-Application-Menu-to-Global-Menu-to-avoid-conf.patch
  * 0041-re-enable-appmenu-directory.patch
  * 0042-Only-activate-kded-Appmenu-signals-if-menus-are-in-t.patch
  * 0043-Connect-aboutToHide-signal-from-QMenu-to-relevant-li.patch
  * 0044-Activation-support-in-appmenu.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1491652800">- Add cmake(KF5Prison)
- Add a link so kpackage can find Plasma/LayoutTemplate description
- Remove empty files in %_kf5_appstreamdir</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1491739200">- Add fixes to the logout dialog:
  * From Plasma/5.8: 0001-Logout-Screen-Show-suspend-button-only-if-supported.patch
  * From master: 0001-Some-UI-fixes-for-logout-dialog.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492603200">- Add various patches from Plasma/5.8:
  * 0001-When-deleting-the-panel-the-notifications-applet-is-.patch
  * 0002-Media-Controller-Use-double-for-length-instead-of-in.patch
  * 0003-Fix-off-by-one.patch
  * 0004-Media-Controller-Enforce-PlainText-format.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1495540800">- Update to 5.8.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.8.7.php
- Changes since 5.8.6:
  * remove useless debug
  * don't check for panel visible during startup
  * [Weather] Fix term used for thunderstorm in bbcukmet data db
  * [Weather] Add missing strings from bbcukmet data db
  * [Weather] Remove duplicated/bad strings from bbcukmet data db
  * [Weather] Fix lookup of bbcukmet translations strings, stored in lowercase
  * Update unit test to match change to reselecting top entry
  * Revert "launch autostart apps in ksmserver using KRun" (kde#379254)
  * selecting the topmost klipper item should always set it as clipboard contents (kde#348390,kde#251222)
  * use KProcess instead of QProcess to launch apps in ksmserver
  * launch autostart apps in ksmserver using KRun, not QProcess (kde#369391,kde#370528)
  * recognize the WM even if given with a full path
  * [Media Controller] Enforce PlainText format
  * Fix off-by-one.
  * [Media Controller] Use double for length instead of int (kde#377623)
  * When deleting the panel the notifications applet is in, the containment is being destroyed but the corona is still there and rightfully emits availableScreenRectChanged. This will cause us to crash when we try to access the no-longer existing containment.
  * Correctly handle when a new primary screen displaces the old
  * Fix TasksModel.anyTaskDemandsAttention not updating on window closure. (kde#378254)
  * [Calculator Runner] Use "approximate" approximation mode (kde#277011)
  * [OSD] Allow disabling OSD through config file
  * manage mouse events when out of the window (kde#377545)
  * don't emit availableScreenRectChanged when quitting
  * try proper order of corona()-&gt;availableScreenRect() (kde#377298)
  * Ignore NoDisplay=true .desktop entries when matching by Name.
  * try harder to make the selected wallpaper visible
  * [Logout Screen] Show suspend button only if supported (kde#376601)
- Remove patches, now upstream.
  * 0001-OSD-Allow-disabling-OSD-through-config-file.patch
  * 0001-Logout-Screen-Show-suspend-button-only-if-supported.patch
  * 0002-Media-Controller-Use-double-for-length-instead-of-in.patch
  * 0004-Media-Controller-Enforce-PlainText-format.patch
  * 0003-Fix-off-by-one.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1496232000">- Add xembedsniproxy-inject-mouse-clicks-with-XTest.patch and
  xembedsniproxy-fix-using-XTest.patch to fix clicking on system
  tray icons of certain applications, mainly GTK3 and Java
  (boo#1026999, kde#362941, kde#375017)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1497441600">- Disable the xembedsniproxy patches temporarily as they seem to
  break in some cases completely</changelog>
  <changelog author="wbauer@tmo.at" date="1497700800">- Re-enable the xembedsniproxy patches
- Add xembedsniproxy-fix-possible-crash.patch to fix a possible
  crash</changelog>
  <changelog author="wbauer@tmo.at" date="1498910400">- Add applauncher-allow-to-show-apps-by-name.patch to provide an
  option to display application names instead of the generic names
  in the desktop containment's application launcher mouse action
  (kde#358423, boo#974513)</changelog>
  <changelog author="wbauer@tmo.at" date="1499601600">- Add logoutdialog-honor-Offer-shutdown-options.patch to make the
  logout dialog respect the "Offer shutdown options" setting and
  hide "Reboot" and "Shutdown" if disabled (boo#1008844)</changelog>
  <changelog author="wbauer@tmo.at" date="1499860800">- Add Notifications-Check-for-corona-to-avoid-crash.patch to
  prevent a Plasma crash when removing a panel that has a system
  tray with the Notifications applet (boo#1046500, kde#378508)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511524800">- Add patches from upstream Plasma/5.8 branch:
  * 0002-Always-add-data-sources-in-SystemMonitorEngine-sourc.patch
  * 0003-don-t-show-logout-when-kauthorized-doesn-t-want-it.patch
  * 0004-fix-attachment-signals.patch
  * 0005-Notification-Item-Enforce-PlainText-for-summary.patch
  * 0006-Battery-Monitor-Fix-icon-size-for-InhibitionHint.patch
  * 0007-Fix-QSortFilterProxyModelPrivate-updateChildrenMappi.patch
  * 0008-Device-Notifier-Set-preferred-size-for-ActionItem.patch
- Rename  Notifications-Check-for-corona-to-avoid-crash.patch to
  0001-Notifications-Check-for-corona-to-avoid-crash.patch
- Fixes: kde#378508, kde#380209, kde#380344, kde#383213,
  kde#381006, kde#382541, boo#1069777
- Add patch from upstream Plasma/5.11 branch (kde#384861):
  * 0001-Unhide-autohidden-panel-when-using-global-menu.patch
- Refresh 0001-Some-UI-fixes-for-logout-dialog.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517832000">- Add patches from upstream Plasma/5.8 branch:
  * 0001-Notifications-Unset-Heading-default-height.patch
  * 0001-Add-license-header-to-test.patch
  * 0001-Sanitise-notification-HTML.patch
  * 0001-Notifications-Fix-grouping.patch
- Fixes kde#381154
- Might fix boo#1013550</changelog>
</package>
<package pkgid="4c2b77aa2b6ef4420e5a3a5ed23a95ed1275f99063fc47fa6a5735a707abc232" name="drkonqi5" arch="x86_64">
  <version epoch="0" ver="5.8.7" rel="8.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1478779200">- Backport several commits for better multiscreen handling:
  * 0001-taskmanagerrulesrc-Add-Rewrite-Rule-for-Google-chrom.patch
  * 0002-make-sure-all-outputs-are-known.patch
  * 0003-Sync-app-config-in-sync-with-applets-config.patch
  * 0004-Avoid-connecting-to-screen-changed-signals-twice.patch
  * 0005-Load-screenpool-at-the-same-time-as-we-connect-to-sc.patch
  * kde#372099,kde#371858,kde#371991,kde#371819,kde#371734
  * boo#1003438</changelog>
  <changelog author="wbauer@tmo.at" date="1478952000">- Add Look-for-both-json-and-desktop-metadata.patch to fix adding a
  panel or plasmoid with the new json metadata files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1479902400">- Update to 5.8.4
  * New bugfix release
  * For more details please see:
    https://www.kde.org/announcements/plasma-5.8.4.php
- Changes since 5.8.3:
  * properly parse exec line before qprocessing it for autostart
  * Disable Qt's high DPI scaling on shutdown/switch user dialogs
  * Don't set PanelView visibilty when opening/closing config
  * Check KPluginInfo.service() returns a valid object
  * Revert "Port to new plasma-framework API"
  * Add plasma-discover to mappings
  * [Windowed Widgets Runner] Don't access invalid KPluginMetaData
  * Load screenpool at the same time as we connect to screenchanged signals
  * Avoid connecting to screen changed signals twice
  * Sync app config in sync with applets config
  * make sure all outputs are known
  * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome
  * [XWindowTasksModel] Check for service being empty before searching new ones
  * fix behavior of scrollable systray popups
  * Introduce new pre-layout script hook
  * Make sure we're looking both for json and desktop metadata
  * Port to new plasma-framework API
  * Modified distance function to keep aspect ratio as close as possible
- Remove patches, now upstream:
  * 0001-taskmanagerrulesrc-Add-Rewrite-Rule-for-Google-chrom.patch
  * 0002-make-sure-all-outputs-are-known.patch
  * 0003-Sync-app-config-in-sync-with-applets-config.patch
  * 0004-Avoid-connecting-to-screen-changed-signals-twice.patch
  * 0005-Load-screenpool-at-the-same-time-as-we-connect-to-sc.patch
  * Look-for-both-json-and-desktop-metadata.patch
  * keep-wallpaper-aspect-ratio-wallpaper-on-screen-resolution-change.diff
  * use-nearest-aspect-ratio-available-wallpaper.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1482840000">- Update to 5.8.5
  * New bugfix release
  * For more details please see:
    https://www.kde.org/announcements/plasma-5.8.5.php
- Changes since 5.8.4:
  * notice when the only screen changes
  * make sure  applet is removed from stack when destroyed
  * [Lock Screen] Wrap OSD in its own ColorScope
  * Move updating of primary screen in screenpool after fetching its id
  * Calendar: clear selection on opening
  * Fix regression in last commit, don't show battery life as 100 when it's 0
  * Fix "Unable to assign [undefined] to int" log
  * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry.
  * systemtray: Don't propagate unhandled wheel events
  * [Lock Screen] Add keyboard icon for keyboard layout switcher
  * remove categories not present on server anymore
  * Select correct index without timer
  * Expose rowCount as data role in TaskGroupingProxyModel.
  * [taskmanagerrulesrc] Add Rewrite Rule for chromium
  * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data
  * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata
  * [SDDM Theme] Remember last username
  * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser
  * fix config dialogs in ltr mode
- Fixes:
  * boo#1022119</changelog>
  <changelog author="wbauer@tmo.at" date="1487592000">- drkonqi can use konsole again, the problems there are fixed</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1487678400">- Update to 5.8.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.8.6.php
- Changes since 5.8.5:
  * Port to QMultiHash.
  * Only remove + announce if leader change actually occured, avoid excessive loop.
  * Fix crash.
  * [Notifications] Never manually hide() the NotificationPopup
  * Add comment laying out goals.
  * Fix crash when switching activities.
  * Tweak alphabetic (default) sort behavior.
  * turn the NotificationItem in a MouseArea
  * [DesktopView] show() ConfigView when it is already opened
  * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file
  * [System Tray Containment] Ungrab mouse before opening context menu
  * [KRunner] In doubt use primary screen for view position
  * Drop legacy fixup rule for VirtualBox.
  * fix isOutputRedundant logic
  * Fix group parents not appearing when disabling inline grouping.
  * Corona::screenGeometryChanged on qscreen resized
  * MediaController: Update position while queuedPositionUpdate timer is running
  * better clean up of duplicate containments
  * Fix "Pinned Chrome disappears when all Chrome windows are closed"
  * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type
  * Systray: Move all icon resolution to dataengine
  * use a native event filter to notice the screen was swapped
- Fixes:
  * kde#374531
  * kde#365617
  * kde#371858
  * kde#375507
  * kde#350468
  * kde#375574
  * kde#373698
  * kde#376055
- Revert upstream commit to allow use of our current slightly different fix:
  * 0001-Revert-Systray-Move-all-icon-resolution-to-dataengin.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Provide dbus(org.freedesktop.Notifications): plasmashell
  implements the Notifications interface.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1490356800">- Add upstream patch to fix disabling the OSD:
  * 0001-OSD-Allow-disabling-OSD-through-config-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1490356801">- Backport the global menu from 5.9/master (boo#1026534):
  * 0001-Clean-up-KAppMenu.patch
  * 0002-Move-SNI-s-libdbusmenu-qt-fork-to-the-root-directory.patch
  * 0003-Fix-build-of-DBusMenuImporter-the-ASYNCHRONOUS-argum.patch
  * 0004-Remove-duplicated-code-from-DBusMenu-importer.patch
  * 0005-Route-through-an-actionId-argument.patch
  * 0006-Sort-out-compile-warnings-on-unused-vars.patch
  * 0007-Add-small-app-for-testing-appmenu.patch
  * 0008-Add-missing-license-to-test-file.patch
  * 0009-Add-missing-CMakeLists.txt-in-subdir.patch
  * 0010-Reuse-QAction-and-QMenu-items-on-updates.patch
  * 0011-Replace-recursive-layout-loading-with-dynamic-loadin.patch
  * 0012-Simplify-AppMenu-menu-management.patch
  * 0013-Global-Menu-Applet.patch
  * 0014-Fix-compile-with-gcc-4.8.patch
  * 0015-Changes-to-global-menu-applet.patch
  * 0016-Take-into-account-devicePixelRatio-when-placing-appl.patch
  * 0017-Fine-tune-wording-for-disabled-app-menu.patch
  * 0018-Take-into-account-kiosk-restrictions-for-when-appmen.patch
  * 0019-Remove-unused-Connections-from-the-applet.patch
  * 0020-Don-t-pass-immutable-properties-from-updateAction.patch
  * 0021-Avoid-using-API-new-in-Qt-5.7.-Plasma-workspace-reli.patch
  * 0022-Fix-mapToGlobal.patch
  * 0023-Fix-calling-KWindowSystem-windowType-without-fetchin.patch
  * 0024-Keep-AppletMenu-as-small-as-possible.patch
  * 0025-Don-t-load-menu-when-switching-window-focus-to-the-d.patch
  * 0026-Don-t-hide-applet-when-it-needs-configuring.patch
  * 0027-Signal-which-menu-has-updated-in-libdbusmenu-qt.patch
  * 0028-pre-load-the-first-layer-of-sub-menus.patch
  * 0029-Generate-DBusMenu-Interface-for-libdbusmenuqt.patch
  * 0030-Don-t-re-evaluate-the-model-constantly-whilst-loopin.patch
  * 0031-Hide-menu-if-the-menu-disappears-off-DBus.patch
  * 0032-guard-against-menu-being-deleted-whilst-updating.patch
  * 0033-fix-dbus-xml-compilation.patch
  * 0034-try-to-put-annotations-before-parameters-definition.patch
  * 0035-Replace-std-bind-with-lambda.patch
  * 0036-add-include-QtQml-for-old-Qt-versions.patch
  * 0037-Appmenu-Applet-Check-whether-buttonGrid-has-a-window.patch
  * 0038-Fix-memory-leak-in-Appmenu-when-using-compact-menu.patch
  * 0039-AppMenu-Applet-Map-from-scene-after-mapping-from-glo.patch
  * 0040-Rename-Application-Menu-to-Global-Menu-to-avoid-conf.patch
  * 0041-re-enable-appmenu-directory.patch
  * 0042-Only-activate-kded-Appmenu-signals-if-menus-are-in-t.patch
  * 0043-Connect-aboutToHide-signal-from-QMenu-to-relevant-li.patch
  * 0044-Activation-support-in-appmenu.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1491652800">- Add cmake(KF5Prison)
- Add a link so kpackage can find Plasma/LayoutTemplate description
- Remove empty files in %_kf5_appstreamdir</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1491739200">- Add fixes to the logout dialog:
  * From Plasma/5.8: 0001-Logout-Screen-Show-suspend-button-only-if-supported.patch
  * From master: 0001-Some-UI-fixes-for-logout-dialog.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492603200">- Add various patches from Plasma/5.8:
  * 0001-When-deleting-the-panel-the-notifications-applet-is-.patch
  * 0002-Media-Controller-Use-double-for-length-instead-of-in.patch
  * 0003-Fix-off-by-one.patch
  * 0004-Media-Controller-Enforce-PlainText-format.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1495540800">- Update to 5.8.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.8.7.php
- Changes since 5.8.6:
  * remove useless debug
  * don't check for panel visible during startup
  * [Weather] Fix term used for thunderstorm in bbcukmet data db
  * [Weather] Add missing strings from bbcukmet data db
  * [Weather] Remove duplicated/bad strings from bbcukmet data db
  * [Weather] Fix lookup of bbcukmet translations strings, stored in lowercase
  * Update unit test to match change to reselecting top entry
  * Revert "launch autostart apps in ksmserver using KRun" (kde#379254)
  * selecting the topmost klipper item should always set it as clipboard contents (kde#348390,kde#251222)
  * use KProcess instead of QProcess to launch apps in ksmserver
  * launch autostart apps in ksmserver using KRun, not QProcess (kde#369391,kde#370528)
  * recognize the WM even if given with a full path
  * [Media Controller] Enforce PlainText format
  * Fix off-by-one.
  * [Media Controller] Use double for length instead of int (kde#377623)
  * When deleting the panel the notifications applet is in, the containment is being destroyed but the corona is still there and rightfully emits availableScreenRectChanged. This will cause us to crash when we try to access the no-longer existing containment.
  * Correctly handle when a new primary screen displaces the old
  * Fix TasksModel.anyTaskDemandsAttention not updating on window closure. (kde#378254)
  * [Calculator Runner] Use "approximate" approximation mode (kde#277011)
  * [OSD] Allow disabling OSD through config file
  * manage mouse events when out of the window (kde#377545)
  * don't emit availableScreenRectChanged when quitting
  * try proper order of corona()-&gt;availableScreenRect() (kde#377298)
  * Ignore NoDisplay=true .desktop entries when matching by Name.
  * try harder to make the selected wallpaper visible
  * [Logout Screen] Show suspend button only if supported (kde#376601)
- Remove patches, now upstream.
  * 0001-OSD-Allow-disabling-OSD-through-config-file.patch
  * 0001-Logout-Screen-Show-suspend-button-only-if-supported.patch
  * 0002-Media-Controller-Use-double-for-length-instead-of-in.patch
  * 0004-Media-Controller-Enforce-PlainText-format.patch
  * 0003-Fix-off-by-one.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1496232000">- Add xembedsniproxy-inject-mouse-clicks-with-XTest.patch and
  xembedsniproxy-fix-using-XTest.patch to fix clicking on system
  tray icons of certain applications, mainly GTK3 and Java
  (boo#1026999, kde#362941, kde#375017)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1497441600">- Disable the xembedsniproxy patches temporarily as they seem to
  break in some cases completely</changelog>
  <changelog author="wbauer@tmo.at" date="1497700800">- Re-enable the xembedsniproxy patches
- Add xembedsniproxy-fix-possible-crash.patch to fix a possible
  crash</changelog>
  <changelog author="wbauer@tmo.at" date="1498910400">- Add applauncher-allow-to-show-apps-by-name.patch to provide an
  option to display application names instead of the generic names
  in the desktop containment's application launcher mouse action
  (kde#358423, boo#974513)</changelog>
  <changelog author="wbauer@tmo.at" date="1499601600">- Add logoutdialog-honor-Offer-shutdown-options.patch to make the
  logout dialog respect the "Offer shutdown options" setting and
  hide "Reboot" and "Shutdown" if disabled (boo#1008844)</changelog>
  <changelog author="wbauer@tmo.at" date="1499860800">- Add Notifications-Check-for-corona-to-avoid-crash.patch to
  prevent a Plasma crash when removing a panel that has a system
  tray with the Notifications applet (boo#1046500, kde#378508)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511524800">- Add patches from upstream Plasma/5.8 branch:
  * 0002-Always-add-data-sources-in-SystemMonitorEngine-sourc.patch
  * 0003-don-t-show-logout-when-kauthorized-doesn-t-want-it.patch
  * 0004-fix-attachment-signals.patch
  * 0005-Notification-Item-Enforce-PlainText-for-summary.patch
  * 0006-Battery-Monitor-Fix-icon-size-for-InhibitionHint.patch
  * 0007-Fix-QSortFilterProxyModelPrivate-updateChildrenMappi.patch
  * 0008-Device-Notifier-Set-preferred-size-for-ActionItem.patch
- Rename  Notifications-Check-for-corona-to-avoid-crash.patch to
  0001-Notifications-Check-for-corona-to-avoid-crash.patch
- Fixes: kde#378508, kde#380209, kde#380344, kde#383213,
  kde#381006, kde#382541, boo#1069777
- Add patch from upstream Plasma/5.11 branch (kde#384861):
  * 0001-Unhide-autohidden-panel-when-using-global-menu.patch
- Refresh 0001-Some-UI-fixes-for-logout-dialog.patch</changelog>
</package>
<package pkgid="65af1e3d8fe135ddce848c2d4cf3b0b9b1fcac3a9f493d62e9983deaa09e9906" name="drm" arch="src">
  <version epoch="0" ver="4.9.33" rel="10.2"/>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
  <changelog author="tiwai@suse.de" date="1504612800">- Backport the upstream DP-MST fixes, addressing a hang at S3
  resume (bsc#1055493):
  0201-drm-Add-driver-private-objects-to-atomic-state.patch
  0202-drm-dp-Introduce-MST-topology-state-to-track-availab.patch
- Backport upstream 4.9.x stable fixes up to 4.9.47 (bsc#1041744):
  0119-drm-amd-amdgpu-Return-error-if-initiating-read-out-o.patch
  0120-drm-radeon-ci-disable-mclk-switching-for-high-refres.patch
  0121-drm-radeon-Fix-eDP-for-single-display-iMac10-1-v2.patch
  0122-drm-ttm-Fix-use-after-free-in-ttm_bo_clean_mm.patch
  0123-drm-mst-Fix-error-handling-during-MST-sideband-messa.patch
  0124-drm-mst-Avoid-dereferencing-a-NULL-mstb-in-drm_dp_ms.patch
  0125-drm-mst-Avoid-processing-partially-received-up-down-.patch
  0126-drm-vmwgfx-Fix-gcc-7.1.1-warning.patch
  0127-drm-nouveau-disp-nv50-bump-max-chans-to-21.patch
  0128-drm-nouveau-bar-gf100-fix-access-to-upper-half-of-BA.patch
  0129-drm-rcar-du-Simplify-and-fix-probe-error-handling.patch
  0130-drm-msm-Ensure-that-the-hardware-write-pointer-is-va.patch
  0131-drm-msm-Put-back-the-vaddr-in-submit_reloc.patch
  0132-drm-msm-Verify-that-MSM_SUBMIT_BO_FLAGS-are-set.patch
  0133-drm-amdgpu-Fix-undue-fallthroughs-in-golden-register.patch
  0134-drm-virtio-fix-framebuffer-sparse-warning.patch
  0135-drm-etnaviv-Fix-off-by-one-error-in-reloc-checking.patch
  0136-drm-i915-Fix-out-of-bounds-array-access-in-bdw_load_.patch
  0137-drm-Release-driver-tracking-before-making-the-object.patch
  0138-drm-atomic-If-the-atomic-check-fails-return-its-valu.patch
  0139-drm-rcar-du-Fix-crash-in-encoder-failure-error-path.patch
  0140-drm-rcar-du-Fix-display-timing-controller-parameter.patch
  0141-drm-rcar-du-Fix-H-V-sync-signal-polarity-configurati.patch</changelog>
  <changelog author="tiwai@suse.de" date="1507291200">- Backport upstream 4.9.x stable fixes up to 4.9.53 (bsc#1041744):
  0142-drm-ttm-Fix-accounting-error-when-fail-to-get-pages-.patch
  0143-drm-nouveau-pci-msi-disable-MSI-on-big-endian-platfo.patch
  0144-drm-bridge-adv7511-Use-work_struct-to-defer-hotplug-.patch
  0145-drm-bridge-adv7511-Switch-to-using-drm_kms_helper_ho.patch
  0146-drm-sun4i-Implement-drm_driver-lastclose-to-restore-.patch
  0147-drm-radeon-disable-hard-reset-in-hibernate-for-APUs.patch
  0148-etnaviv-fix-gem-object-list-corruption.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510920000">- Conditionally build aarch64 as well (bsc#1066175);
  Fix build breakage by adv7511 hack on aarch64
- Replace
    0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch
  with
    0014-drm-dma_attrs-revert.patch
- Build host1x module (taken from the kernel-source) as well for
  avoiding the unneeded dependency on kernel-default-extra on
  ARM64 (bsc#1066175):
  0026-host1x-build-hack.patch
- Enable AMDGPU CIK and SI (bsc#1066175):
  0027-enable-AMDGPU-flavors.diff
- Add missing hisilicon hibmc driver (bsc#1066175):
  0301-drm-hisilicon-hibmc-Add-hisilicon-hibmc-drm-master-d.patch
  0302-drm-hisilicon-hibmc-Add-video-memory-management.patch
  0303-drm-hisilicon-hibmc-Add-support-for-frame-buffer.patch
  0304-drm-hisilicon-hibmc-Add-support-for-display-engine.patch
  0305-drm-hisilicon-hibmc-Add-support-for-VDAC.patch
  0306-drm-hisilicon-hibmc-Add-support-for-vblank-interrupt.patch
  0307-drm-hisilicon-hibmc-Checking-for-NULL-instead-of-IS_.patch
  0308-drm-hisilicon-hibmc-mark-PM-functions-__maybe_unused.patch
  0309-drm-hisilicon-hibmc-Fix-wrong-pointer-passed-to-PTR_.patch
- Add si_support and cik_support options to radeon and amdgpu
  (bsc#1066175):
  0401-drm-radeon-Add-module-param-to-control-CIK-support.patch
  0402-drm-radeon-Add-module-param-to-control-SI-support.patch
  0403-drm-radeon-Make-si_support-and-cik_support-parameter.patch
  0404-drm-amdgpu-Add-module-param-to-control-CIK-support.patch
  0405-drm-amdgpu-Add-module-param-to-control-SI-support.patch
  0406-drm-amdgpu-Update-Kconfig-help-for-SI-and-CIK-suppor.patch
  0407-drm-amdgpu-radeon-Use-radeon-by-default-for-CIK-GPUs.patch
  0408-amdgpu-Set-cik-si_support-to-1-by-default-if-radeon-.patch
- Remove stale Makefile from src
- Update Module.supported and apply it properly;
  following SLE12-SP3 kernel status</changelog>
  <changelog author="tiwai@suse.de" date="1511524800">- Backport upstream 4.9.x stable fixes up to 4.9.64 (bsc#1041744):
  0149-drm-i915-Fix-the-overlay-frontbuffer-tracking.patch
  0150-drm-i915-psr-disable-psr2-for-resolution-greater-tha.patch
  0151-drm-amdkfd-fix-improper-return-value-on-error.patch
  0152-drm-mali-dp-Fix-destination-size-handling-when-rotat.patch
  0153-drm-mali-dp-Fix-transposed-horizontal-vertical-flip.patch
  0154-drm-i915-bios-ignore-HDMI-on-port-A.patch
  0155-drm-i915-edp-Get-the-Panel-Power-Off-timestamp-after.patch
  0156-drm-i915-Read-timings-from-the-correct-transcoder-in.patch
  0157-drm-i915-bios-parse-DDI-ports-also-for-CHV-for-HDMI-.patch
  0158-drm-amdgpu-refuse-to-reserve-io-mem-for-split-VRAM-b.patch
  0159-drm-nouveau-gr-gf100-fix-ccache-error-logging.patch
  0160-drm-nouveau-bsp-g92-disable-by-default.patch
  0161-drm-nouveau-mmu-flush-tlbs-before-deleting-page-tabl.patch
  0162-drm-amd-powerplay-fix-uninitialized-variable.patch
  0163-drm-amdgpu-return-ENOENT-from-uvd-6.0-early-init-for.patch
  0164-drm-i915-edp-read-edp-display-control-registers-unco.patch
  0165-drm-msm-Fix-potential-buffer-overflow-issue.patch
  0166-drm-msm-fix-an-integer-overflow-test.patch
  0167-drm-amdgpu-when-dpm-disabled-also-need-to-stop-start.patch
  0168-drm-fsl-dcu-check-for-clk_prepare_enable-error.patch
  0169-drm-exynos-g2d-prevent-integer-overflow-in.patch
  0170-drm-drm_minor_register-Clean-up-debugfs-on-failure.patch
  0171-drm-mali-dp-fix-Lx_CONTROL-register-fields-clobber.patch
  0172-drm-i915-Do-not-rely-on-wm-preservation-for-ILK-wate.patch
  0173-drm-vmwgfx-Fix-Ubuntu-17.10-Wayland-black-screen-iss.patch
  0174-drm-bridge-adv7511-Rework-adv7511_power_on-off-so-th.patch
  0175-drm-bridge-adv7511-Reuse-__adv7511_power_on-off-when.patch
  0176-drm-bridge-adv7511-Re-write-the-i2c-address-before-E.patch
  0177-drm-sti-sti_vtg-Handle-return-NULL-error-from-devm_i.patch
  0178-drm-omap-panel-sony-acx565akm.c-Add-MODULE_ALIAS.patch
  0179-gpu-drm-mgag200-mgag200_main-Handle-error-from-pci_i.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513425600">- Backport upstream 4.9.x stable fixes up to 4.9.70 (bsc#1041744):
  0501-Revert-drm-i915-Do-not-rely-on-wm-preservation-for-I.patch
  0502-drm-sun4i-Fix-a-return-value-in-case-of-error.patch
  0503-drm-armada-Fix-compile-fail.patch
  0504-drm-Apply-range-restriction-after-color-adjustment-w.patch
  0505-drm-mediatek-don-t-use-drm_put_dev.patch
  0506-Revert-drm-radeon-dont-switch-vt-on-suspend.patch
  0507-drm-amdgpu-potential-uninitialized-variable-in-amdgp.patch
  0508-drm-amdgpu-Potential-uninitialized-variable-in-amdgp.patch
  0509-drm-radeon-fix-atombios-on-big-endian.patch
  0510-drm-panel-simple-Add-missing-panel_simple_unprepare-.patch
  0511-drm-hisilicon-Ensure-LDI-regs-are-properly-configure.patch
  0512-drm-ttm-once-more-fix-ttm_buffer_object_transfer.patch
  0513-drm-amd-pp-fix-typecast-error-in-powerplay.patch
  0514-drm-i915-Don-t-try-indexed-reads-to-alternate-slave-.patch
  0515-drm-i915-Prevent-zero-length-index-write.patch
  0516-drm-fsl-dcu-avoid-disabling-pixel-clock-twice-on-sus.patch
  0517-drm-fsl-dcu-enable-IRQ-before-drm_atomic_helper_resu.patch
  0518-drm-exynos-decon5433-update-shadow-registers-iff-the.patch
  0519-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-also-if.patch
  0520-drm-amdgpu-fix-bug-set-incorrect-value-to-vce-regist.patch
  0521-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-on-outp.patch
  0522-drm-amdgpu-fix-unload-driver-issue-for-virtual-displ.patch
  0523-drm-exynos-gem-Drop-NONCONTIG-flag-for-buffers-alloc.patch
  0524-Revert-drm-armada-Fix-compile-fail.patch
  0525-drm-amd-amdgpu-fix-console-deadlock-if-late-init-fai.patch</changelog>
  <changelog author="tiwai@suse.de" date="1518609600">- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744):
  0526-drm-amdgpu-fix-parser-init-error-path-to-avoid-crash.patch
  0527-drm-omap-fix-dmabuf-mmap-for-dma_alloc-ed-buffers.patch
  0528-drm-amd-remove-broken-include-path.patch
  0529-drm-radeon-si-add-dpm-quirk-for-Oland.patch
  0530-drm-radeon-reinstate-oland-workaround-for-sclk.patch
  0531-drm-vmwgfx-Potential-off-by-one-in-vmw_view_add.patch
  0532-drm-vc4-Account-for-interrupts-in-flight.patch
  0533-drm-amdgpu-Fix-SDMA-load-unload-sequence-on-HWS-disa.patch
  0534-drm-amdkfd-Fix-SDMA-ring-buffer-size-calculation.patch
  0535-drm-amdkfd-Fix-SDMA-oversubsription-handling.patch
  0536-drm-amdgpu-don-t-try-to-move-pinned-BOs.patch
  0537-drm-bridge-tc358767-do-no-fail-on-hi-res-displays.patch
  0538-drm-bridge-tc358767-filter-out-too-high-modes.patch
  0539-drm-bridge-tc358767-fix-DP0_MISC-register-set.patch
  0540-drm-bridge-tc358767-fix-timing-calculations.patch
  0541-drm-bridge-tc358767-fix-AUXDATAn-registers-access.patch
  0542-drm-bridge-tc358767-fix-1-lane-behavior.patch
  0543-drm-omap-Fix-error-handling-path-in-omap_dmm_probe.patch
  0544-drm-vc4-Move-IRQ-enable-to-PM-path.patch
  0545-drm-rcar-du-Use-the-VBK-interrupt-for-vblank-events.patch
  0546-drm-rcar-du-Fix-race-condition-when-disabling-planes.patch
- Limit the supplements for the default hardware support to only
  Intel Skylake / Kabylake and AMDGPU (bsc#1077885);
  4.9.x i915 seems more buggy than expected for old chipsets.</changelog>
</package>
<package pkgid="87cc70e2935eb84c6b5ff87acd29c6ed0475b1e354092ea5d0c8d2ceae384233" name="drm" arch="src">
  <version epoch="0" ver="4.9.33" rel="13.3"/>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
  <changelog author="tiwai@suse.de" date="1504612800">- Backport the upstream DP-MST fixes, addressing a hang at S3
  resume (bsc#1055493):
  0201-drm-Add-driver-private-objects-to-atomic-state.patch
  0202-drm-dp-Introduce-MST-topology-state-to-track-availab.patch
- Backport upstream 4.9.x stable fixes up to 4.9.47 (bsc#1041744):
  0119-drm-amd-amdgpu-Return-error-if-initiating-read-out-o.patch
  0120-drm-radeon-ci-disable-mclk-switching-for-high-refres.patch
  0121-drm-radeon-Fix-eDP-for-single-display-iMac10-1-v2.patch
  0122-drm-ttm-Fix-use-after-free-in-ttm_bo_clean_mm.patch
  0123-drm-mst-Fix-error-handling-during-MST-sideband-messa.patch
  0124-drm-mst-Avoid-dereferencing-a-NULL-mstb-in-drm_dp_ms.patch
  0125-drm-mst-Avoid-processing-partially-received-up-down-.patch
  0126-drm-vmwgfx-Fix-gcc-7.1.1-warning.patch
  0127-drm-nouveau-disp-nv50-bump-max-chans-to-21.patch
  0128-drm-nouveau-bar-gf100-fix-access-to-upper-half-of-BA.patch
  0129-drm-rcar-du-Simplify-and-fix-probe-error-handling.patch
  0130-drm-msm-Ensure-that-the-hardware-write-pointer-is-va.patch
  0131-drm-msm-Put-back-the-vaddr-in-submit_reloc.patch
  0132-drm-msm-Verify-that-MSM_SUBMIT_BO_FLAGS-are-set.patch
  0133-drm-amdgpu-Fix-undue-fallthroughs-in-golden-register.patch
  0134-drm-virtio-fix-framebuffer-sparse-warning.patch
  0135-drm-etnaviv-Fix-off-by-one-error-in-reloc-checking.patch
  0136-drm-i915-Fix-out-of-bounds-array-access-in-bdw_load_.patch
  0137-drm-Release-driver-tracking-before-making-the-object.patch
  0138-drm-atomic-If-the-atomic-check-fails-return-its-valu.patch
  0139-drm-rcar-du-Fix-crash-in-encoder-failure-error-path.patch
  0140-drm-rcar-du-Fix-display-timing-controller-parameter.patch
  0141-drm-rcar-du-Fix-H-V-sync-signal-polarity-configurati.patch</changelog>
  <changelog author="tiwai@suse.de" date="1507291200">- Backport upstream 4.9.x stable fixes up to 4.9.53 (bsc#1041744):
  0142-drm-ttm-Fix-accounting-error-when-fail-to-get-pages-.patch
  0143-drm-nouveau-pci-msi-disable-MSI-on-big-endian-platfo.patch
  0144-drm-bridge-adv7511-Use-work_struct-to-defer-hotplug-.patch
  0145-drm-bridge-adv7511-Switch-to-using-drm_kms_helper_ho.patch
  0146-drm-sun4i-Implement-drm_driver-lastclose-to-restore-.patch
  0147-drm-radeon-disable-hard-reset-in-hibernate-for-APUs.patch
  0148-etnaviv-fix-gem-object-list-corruption.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510920000">- Conditionally build aarch64 as well (bsc#1066175);
  Fix build breakage by adv7511 hack on aarch64
- Replace
    0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch
  with
    0014-drm-dma_attrs-revert.patch
- Build host1x module (taken from the kernel-source) as well for
  avoiding the unneeded dependency on kernel-default-extra on
  ARM64 (bsc#1066175):
  0026-host1x-build-hack.patch
- Enable AMDGPU CIK and SI (bsc#1066175):
  0027-enable-AMDGPU-flavors.diff
- Add missing hisilicon hibmc driver (bsc#1066175):
  0301-drm-hisilicon-hibmc-Add-hisilicon-hibmc-drm-master-d.patch
  0302-drm-hisilicon-hibmc-Add-video-memory-management.patch
  0303-drm-hisilicon-hibmc-Add-support-for-frame-buffer.patch
  0304-drm-hisilicon-hibmc-Add-support-for-display-engine.patch
  0305-drm-hisilicon-hibmc-Add-support-for-VDAC.patch
  0306-drm-hisilicon-hibmc-Add-support-for-vblank-interrupt.patch
  0307-drm-hisilicon-hibmc-Checking-for-NULL-instead-of-IS_.patch
  0308-drm-hisilicon-hibmc-mark-PM-functions-__maybe_unused.patch
  0309-drm-hisilicon-hibmc-Fix-wrong-pointer-passed-to-PTR_.patch
- Add si_support and cik_support options to radeon and amdgpu
  (bsc#1066175):
  0401-drm-radeon-Add-module-param-to-control-CIK-support.patch
  0402-drm-radeon-Add-module-param-to-control-SI-support.patch
  0403-drm-radeon-Make-si_support-and-cik_support-parameter.patch
  0404-drm-amdgpu-Add-module-param-to-control-CIK-support.patch
  0405-drm-amdgpu-Add-module-param-to-control-SI-support.patch
  0406-drm-amdgpu-Update-Kconfig-help-for-SI-and-CIK-suppor.patch
  0407-drm-amdgpu-radeon-Use-radeon-by-default-for-CIK-GPUs.patch
  0408-amdgpu-Set-cik-si_support-to-1-by-default-if-radeon-.patch
- Remove stale Makefile from src
- Update Module.supported and apply it properly;
  following SLE12-SP3 kernel status</changelog>
  <changelog author="tiwai@suse.de" date="1511524800">- Backport upstream 4.9.x stable fixes up to 4.9.64 (bsc#1041744):
  0149-drm-i915-Fix-the-overlay-frontbuffer-tracking.patch
  0150-drm-i915-psr-disable-psr2-for-resolution-greater-tha.patch
  0151-drm-amdkfd-fix-improper-return-value-on-error.patch
  0152-drm-mali-dp-Fix-destination-size-handling-when-rotat.patch
  0153-drm-mali-dp-Fix-transposed-horizontal-vertical-flip.patch
  0154-drm-i915-bios-ignore-HDMI-on-port-A.patch
  0155-drm-i915-edp-Get-the-Panel-Power-Off-timestamp-after.patch
  0156-drm-i915-Read-timings-from-the-correct-transcoder-in.patch
  0157-drm-i915-bios-parse-DDI-ports-also-for-CHV-for-HDMI-.patch
  0158-drm-amdgpu-refuse-to-reserve-io-mem-for-split-VRAM-b.patch
  0159-drm-nouveau-gr-gf100-fix-ccache-error-logging.patch
  0160-drm-nouveau-bsp-g92-disable-by-default.patch
  0161-drm-nouveau-mmu-flush-tlbs-before-deleting-page-tabl.patch
  0162-drm-amd-powerplay-fix-uninitialized-variable.patch
  0163-drm-amdgpu-return-ENOENT-from-uvd-6.0-early-init-for.patch
  0164-drm-i915-edp-read-edp-display-control-registers-unco.patch
  0165-drm-msm-Fix-potential-buffer-overflow-issue.patch
  0166-drm-msm-fix-an-integer-overflow-test.patch
  0167-drm-amdgpu-when-dpm-disabled-also-need-to-stop-start.patch
  0168-drm-fsl-dcu-check-for-clk_prepare_enable-error.patch
  0169-drm-exynos-g2d-prevent-integer-overflow-in.patch
  0170-drm-drm_minor_register-Clean-up-debugfs-on-failure.patch
  0171-drm-mali-dp-fix-Lx_CONTROL-register-fields-clobber.patch
  0172-drm-i915-Do-not-rely-on-wm-preservation-for-ILK-wate.patch
  0173-drm-vmwgfx-Fix-Ubuntu-17.10-Wayland-black-screen-iss.patch
  0174-drm-bridge-adv7511-Rework-adv7511_power_on-off-so-th.patch
  0175-drm-bridge-adv7511-Reuse-__adv7511_power_on-off-when.patch
  0176-drm-bridge-adv7511-Re-write-the-i2c-address-before-E.patch
  0177-drm-sti-sti_vtg-Handle-return-NULL-error-from-devm_i.patch
  0178-drm-omap-panel-sony-acx565akm.c-Add-MODULE_ALIAS.patch
  0179-gpu-drm-mgag200-mgag200_main-Handle-error-from-pci_i.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513425600">- Backport upstream 4.9.x stable fixes up to 4.9.70 (bsc#1041744):
  0501-Revert-drm-i915-Do-not-rely-on-wm-preservation-for-I.patch
  0502-drm-sun4i-Fix-a-return-value-in-case-of-error.patch
  0503-drm-armada-Fix-compile-fail.patch
  0504-drm-Apply-range-restriction-after-color-adjustment-w.patch
  0505-drm-mediatek-don-t-use-drm_put_dev.patch
  0506-Revert-drm-radeon-dont-switch-vt-on-suspend.patch
  0507-drm-amdgpu-potential-uninitialized-variable-in-amdgp.patch
  0508-drm-amdgpu-Potential-uninitialized-variable-in-amdgp.patch
  0509-drm-radeon-fix-atombios-on-big-endian.patch
  0510-drm-panel-simple-Add-missing-panel_simple_unprepare-.patch
  0511-drm-hisilicon-Ensure-LDI-regs-are-properly-configure.patch
  0512-drm-ttm-once-more-fix-ttm_buffer_object_transfer.patch
  0513-drm-amd-pp-fix-typecast-error-in-powerplay.patch
  0514-drm-i915-Don-t-try-indexed-reads-to-alternate-slave-.patch
  0515-drm-i915-Prevent-zero-length-index-write.patch
  0516-drm-fsl-dcu-avoid-disabling-pixel-clock-twice-on-sus.patch
  0517-drm-fsl-dcu-enable-IRQ-before-drm_atomic_helper_resu.patch
  0518-drm-exynos-decon5433-update-shadow-registers-iff-the.patch
  0519-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-also-if.patch
  0520-drm-amdgpu-fix-bug-set-incorrect-value-to-vce-regist.patch
  0521-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-on-outp.patch
  0522-drm-amdgpu-fix-unload-driver-issue-for-virtual-displ.patch
  0523-drm-exynos-gem-Drop-NONCONTIG-flag-for-buffers-alloc.patch
  0524-Revert-drm-armada-Fix-compile-fail.patch
  0525-drm-amd-amdgpu-fix-console-deadlock-if-late-init-fai.patch</changelog>
  <changelog author="tiwai@suse.de" date="1518609600">- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744):
  0526-drm-amdgpu-fix-parser-init-error-path-to-avoid-crash.patch
  0527-drm-omap-fix-dmabuf-mmap-for-dma_alloc-ed-buffers.patch
  0528-drm-amd-remove-broken-include-path.patch
  0529-drm-radeon-si-add-dpm-quirk-for-Oland.patch
  0530-drm-radeon-reinstate-oland-workaround-for-sclk.patch
  0531-drm-vmwgfx-Potential-off-by-one-in-vmw_view_add.patch
  0532-drm-vc4-Account-for-interrupts-in-flight.patch
  0533-drm-amdgpu-Fix-SDMA-load-unload-sequence-on-HWS-disa.patch
  0534-drm-amdkfd-Fix-SDMA-ring-buffer-size-calculation.patch
  0535-drm-amdkfd-Fix-SDMA-oversubsription-handling.patch
  0536-drm-amdgpu-don-t-try-to-move-pinned-BOs.patch
  0537-drm-bridge-tc358767-do-no-fail-on-hi-res-displays.patch
  0538-drm-bridge-tc358767-filter-out-too-high-modes.patch
  0539-drm-bridge-tc358767-fix-DP0_MISC-register-set.patch
  0540-drm-bridge-tc358767-fix-timing-calculations.patch
  0541-drm-bridge-tc358767-fix-AUXDATAn-registers-access.patch
  0542-drm-bridge-tc358767-fix-1-lane-behavior.patch
  0543-drm-omap-Fix-error-handling-path-in-omap_dmm_probe.patch
  0544-drm-vc4-Move-IRQ-enable-to-PM-path.patch
  0545-drm-rcar-du-Use-the-VBK-interrupt-for-vblank-events.patch
  0546-drm-rcar-du-Fix-race-condition-when-disabling-planes.patch
- Limit the supplements for the default hardware support to only
  Intel Skylake / Kabylake and AMDGPU (bsc#1077885);
  4.9.x i915 seems more buggy than expected for old chipsets.</changelog>
  <changelog author="tiwai@suse.de" date="1522152000">- Disable DP-MST fixes due to regression wrt suspend/resume
  (bsc#1087047)</changelog>
  <changelog author="tiwai@suse.de" date="1523188800">- Fix NULL dereference at reset_common_ring() in i915 driver
  (bsc#1088569):
  1015-drm-i915-gpu-reset-oops-fix.patch</changelog>
</package>
<package pkgid="d00bbae2a5e3260b915bdc8fa3e7cafbbd95a82737eec5b583fdfe56ec46bf08" name="drm" arch="src">
  <version epoch="0" ver="4.9.33" rel="5.2"/>
  <changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
  <changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
  <changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
</package>
<package pkgid="defec84acc8ff24aff6861db6e8413f26ca47301cd502530ac04a08e49e4bccd" name="drm" arch="src">
  <version epoch="0" ver="4.9.33" rel="7.1"/>
  <changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
  <changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
  <changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
</package>
<package pkgid="a780c735b0cb902d77c0434ef76de54869c0ba06a3ad7875a60c5451ea6fe2a2" name="drm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.9.33_k4.4.114_42" rel="7.1"/>
  <changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
  <changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
  <changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
</package>
<package pkgid="c5d5ab3ec3d40f1824e1247af5ec1e7fac888d38c3988525c54aad0f76ecf8ac" name="drm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.9.33_k4.4.120_45" rel="10.2"/>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
  <changelog author="tiwai@suse.de" date="1504612800">- Backport the upstream DP-MST fixes, addressing a hang at S3
  resume (bsc#1055493):
  0201-drm-Add-driver-private-objects-to-atomic-state.patch
  0202-drm-dp-Introduce-MST-topology-state-to-track-availab.patch
- Backport upstream 4.9.x stable fixes up to 4.9.47 (bsc#1041744):
  0119-drm-amd-amdgpu-Return-error-if-initiating-read-out-o.patch
  0120-drm-radeon-ci-disable-mclk-switching-for-high-refres.patch
  0121-drm-radeon-Fix-eDP-for-single-display-iMac10-1-v2.patch
  0122-drm-ttm-Fix-use-after-free-in-ttm_bo_clean_mm.patch
  0123-drm-mst-Fix-error-handling-during-MST-sideband-messa.patch
  0124-drm-mst-Avoid-dereferencing-a-NULL-mstb-in-drm_dp_ms.patch
  0125-drm-mst-Avoid-processing-partially-received-up-down-.patch
  0126-drm-vmwgfx-Fix-gcc-7.1.1-warning.patch
  0127-drm-nouveau-disp-nv50-bump-max-chans-to-21.patch
  0128-drm-nouveau-bar-gf100-fix-access-to-upper-half-of-BA.patch
  0129-drm-rcar-du-Simplify-and-fix-probe-error-handling.patch
  0130-drm-msm-Ensure-that-the-hardware-write-pointer-is-va.patch
  0131-drm-msm-Put-back-the-vaddr-in-submit_reloc.patch
  0132-drm-msm-Verify-that-MSM_SUBMIT_BO_FLAGS-are-set.patch
  0133-drm-amdgpu-Fix-undue-fallthroughs-in-golden-register.patch
  0134-drm-virtio-fix-framebuffer-sparse-warning.patch
  0135-drm-etnaviv-Fix-off-by-one-error-in-reloc-checking.patch
  0136-drm-i915-Fix-out-of-bounds-array-access-in-bdw_load_.patch
  0137-drm-Release-driver-tracking-before-making-the-object.patch
  0138-drm-atomic-If-the-atomic-check-fails-return-its-valu.patch
  0139-drm-rcar-du-Fix-crash-in-encoder-failure-error-path.patch
  0140-drm-rcar-du-Fix-display-timing-controller-parameter.patch
  0141-drm-rcar-du-Fix-H-V-sync-signal-polarity-configurati.patch</changelog>
  <changelog author="tiwai@suse.de" date="1507291200">- Backport upstream 4.9.x stable fixes up to 4.9.53 (bsc#1041744):
  0142-drm-ttm-Fix-accounting-error-when-fail-to-get-pages-.patch
  0143-drm-nouveau-pci-msi-disable-MSI-on-big-endian-platfo.patch
  0144-drm-bridge-adv7511-Use-work_struct-to-defer-hotplug-.patch
  0145-drm-bridge-adv7511-Switch-to-using-drm_kms_helper_ho.patch
  0146-drm-sun4i-Implement-drm_driver-lastclose-to-restore-.patch
  0147-drm-radeon-disable-hard-reset-in-hibernate-for-APUs.patch
  0148-etnaviv-fix-gem-object-list-corruption.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510920000">- Conditionally build aarch64 as well (bsc#1066175);
  Fix build breakage by adv7511 hack on aarch64
- Replace
    0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch
  with
    0014-drm-dma_attrs-revert.patch
- Build host1x module (taken from the kernel-source) as well for
  avoiding the unneeded dependency on kernel-default-extra on
  ARM64 (bsc#1066175):
  0026-host1x-build-hack.patch
- Enable AMDGPU CIK and SI (bsc#1066175):
  0027-enable-AMDGPU-flavors.diff
- Add missing hisilicon hibmc driver (bsc#1066175):
  0301-drm-hisilicon-hibmc-Add-hisilicon-hibmc-drm-master-d.patch
  0302-drm-hisilicon-hibmc-Add-video-memory-management.patch
  0303-drm-hisilicon-hibmc-Add-support-for-frame-buffer.patch
  0304-drm-hisilicon-hibmc-Add-support-for-display-engine.patch
  0305-drm-hisilicon-hibmc-Add-support-for-VDAC.patch
  0306-drm-hisilicon-hibmc-Add-support-for-vblank-interrupt.patch
  0307-drm-hisilicon-hibmc-Checking-for-NULL-instead-of-IS_.patch
  0308-drm-hisilicon-hibmc-mark-PM-functions-__maybe_unused.patch
  0309-drm-hisilicon-hibmc-Fix-wrong-pointer-passed-to-PTR_.patch
- Add si_support and cik_support options to radeon and amdgpu
  (bsc#1066175):
  0401-drm-radeon-Add-module-param-to-control-CIK-support.patch
  0402-drm-radeon-Add-module-param-to-control-SI-support.patch
  0403-drm-radeon-Make-si_support-and-cik_support-parameter.patch
  0404-drm-amdgpu-Add-module-param-to-control-CIK-support.patch
  0405-drm-amdgpu-Add-module-param-to-control-SI-support.patch
  0406-drm-amdgpu-Update-Kconfig-help-for-SI-and-CIK-suppor.patch
  0407-drm-amdgpu-radeon-Use-radeon-by-default-for-CIK-GPUs.patch
  0408-amdgpu-Set-cik-si_support-to-1-by-default-if-radeon-.patch
- Remove stale Makefile from src
- Update Module.supported and apply it properly;
  following SLE12-SP3 kernel status</changelog>
  <changelog author="tiwai@suse.de" date="1511524800">- Backport upstream 4.9.x stable fixes up to 4.9.64 (bsc#1041744):
  0149-drm-i915-Fix-the-overlay-frontbuffer-tracking.patch
  0150-drm-i915-psr-disable-psr2-for-resolution-greater-tha.patch
  0151-drm-amdkfd-fix-improper-return-value-on-error.patch
  0152-drm-mali-dp-Fix-destination-size-handling-when-rotat.patch
  0153-drm-mali-dp-Fix-transposed-horizontal-vertical-flip.patch
  0154-drm-i915-bios-ignore-HDMI-on-port-A.patch
  0155-drm-i915-edp-Get-the-Panel-Power-Off-timestamp-after.patch
  0156-drm-i915-Read-timings-from-the-correct-transcoder-in.patch
  0157-drm-i915-bios-parse-DDI-ports-also-for-CHV-for-HDMI-.patch
  0158-drm-amdgpu-refuse-to-reserve-io-mem-for-split-VRAM-b.patch
  0159-drm-nouveau-gr-gf100-fix-ccache-error-logging.patch
  0160-drm-nouveau-bsp-g92-disable-by-default.patch
  0161-drm-nouveau-mmu-flush-tlbs-before-deleting-page-tabl.patch
  0162-drm-amd-powerplay-fix-uninitialized-variable.patch
  0163-drm-amdgpu-return-ENOENT-from-uvd-6.0-early-init-for.patch
  0164-drm-i915-edp-read-edp-display-control-registers-unco.patch
  0165-drm-msm-Fix-potential-buffer-overflow-issue.patch
  0166-drm-msm-fix-an-integer-overflow-test.patch
  0167-drm-amdgpu-when-dpm-disabled-also-need-to-stop-start.patch
  0168-drm-fsl-dcu-check-for-clk_prepare_enable-error.patch
  0169-drm-exynos-g2d-prevent-integer-overflow-in.patch
  0170-drm-drm_minor_register-Clean-up-debugfs-on-failure.patch
  0171-drm-mali-dp-fix-Lx_CONTROL-register-fields-clobber.patch
  0172-drm-i915-Do-not-rely-on-wm-preservation-for-ILK-wate.patch
  0173-drm-vmwgfx-Fix-Ubuntu-17.10-Wayland-black-screen-iss.patch
  0174-drm-bridge-adv7511-Rework-adv7511_power_on-off-so-th.patch
  0175-drm-bridge-adv7511-Reuse-__adv7511_power_on-off-when.patch
  0176-drm-bridge-adv7511-Re-write-the-i2c-address-before-E.patch
  0177-drm-sti-sti_vtg-Handle-return-NULL-error-from-devm_i.patch
  0178-drm-omap-panel-sony-acx565akm.c-Add-MODULE_ALIAS.patch
  0179-gpu-drm-mgag200-mgag200_main-Handle-error-from-pci_i.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513425600">- Backport upstream 4.9.x stable fixes up to 4.9.70 (bsc#1041744):
  0501-Revert-drm-i915-Do-not-rely-on-wm-preservation-for-I.patch
  0502-drm-sun4i-Fix-a-return-value-in-case-of-error.patch
  0503-drm-armada-Fix-compile-fail.patch
  0504-drm-Apply-range-restriction-after-color-adjustment-w.patch
  0505-drm-mediatek-don-t-use-drm_put_dev.patch
  0506-Revert-drm-radeon-dont-switch-vt-on-suspend.patch
  0507-drm-amdgpu-potential-uninitialized-variable-in-amdgp.patch
  0508-drm-amdgpu-Potential-uninitialized-variable-in-amdgp.patch
  0509-drm-radeon-fix-atombios-on-big-endian.patch
  0510-drm-panel-simple-Add-missing-panel_simple_unprepare-.patch
  0511-drm-hisilicon-Ensure-LDI-regs-are-properly-configure.patch
  0512-drm-ttm-once-more-fix-ttm_buffer_object_transfer.patch
  0513-drm-amd-pp-fix-typecast-error-in-powerplay.patch
  0514-drm-i915-Don-t-try-indexed-reads-to-alternate-slave-.patch
  0515-drm-i915-Prevent-zero-length-index-write.patch
  0516-drm-fsl-dcu-avoid-disabling-pixel-clock-twice-on-sus.patch
  0517-drm-fsl-dcu-enable-IRQ-before-drm_atomic_helper_resu.patch
  0518-drm-exynos-decon5433-update-shadow-registers-iff-the.patch
  0519-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-also-if.patch
  0520-drm-amdgpu-fix-bug-set-incorrect-value-to-vce-regist.patch
  0521-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-on-outp.patch
  0522-drm-amdgpu-fix-unload-driver-issue-for-virtual-displ.patch
  0523-drm-exynos-gem-Drop-NONCONTIG-flag-for-buffers-alloc.patch
  0524-Revert-drm-armada-Fix-compile-fail.patch
  0525-drm-amd-amdgpu-fix-console-deadlock-if-late-init-fai.patch</changelog>
  <changelog author="tiwai@suse.de" date="1518609600">- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744):
  0526-drm-amdgpu-fix-parser-init-error-path-to-avoid-crash.patch
  0527-drm-omap-fix-dmabuf-mmap-for-dma_alloc-ed-buffers.patch
  0528-drm-amd-remove-broken-include-path.patch
  0529-drm-radeon-si-add-dpm-quirk-for-Oland.patch
  0530-drm-radeon-reinstate-oland-workaround-for-sclk.patch
  0531-drm-vmwgfx-Potential-off-by-one-in-vmw_view_add.patch
  0532-drm-vc4-Account-for-interrupts-in-flight.patch
  0533-drm-amdgpu-Fix-SDMA-load-unload-sequence-on-HWS-disa.patch
  0534-drm-amdkfd-Fix-SDMA-ring-buffer-size-calculation.patch
  0535-drm-amdkfd-Fix-SDMA-oversubsription-handling.patch
  0536-drm-amdgpu-don-t-try-to-move-pinned-BOs.patch
  0537-drm-bridge-tc358767-do-no-fail-on-hi-res-displays.patch
  0538-drm-bridge-tc358767-filter-out-too-high-modes.patch
  0539-drm-bridge-tc358767-fix-DP0_MISC-register-set.patch
  0540-drm-bridge-tc358767-fix-timing-calculations.patch
  0541-drm-bridge-tc358767-fix-AUXDATAn-registers-access.patch
  0542-drm-bridge-tc358767-fix-1-lane-behavior.patch
  0543-drm-omap-Fix-error-handling-path-in-omap_dmm_probe.patch
  0544-drm-vc4-Move-IRQ-enable-to-PM-path.patch
  0545-drm-rcar-du-Use-the-VBK-interrupt-for-vblank-events.patch
  0546-drm-rcar-du-Fix-race-condition-when-disabling-planes.patch
- Limit the supplements for the default hardware support to only
  Intel Skylake / Kabylake and AMDGPU (bsc#1077885);
  4.9.x i915 seems more buggy than expected for old chipsets.</changelog>
</package>
<package pkgid="61eab14e74006c08960e2437e9e83ef054e5940415102cb7eef7fb5832facde0" name="drm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.9.33_k4.4.126_48" rel="13.3"/>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
  <changelog author="tiwai@suse.de" date="1504612800">- Backport the upstream DP-MST fixes, addressing a hang at S3
  resume (bsc#1055493):
  0201-drm-Add-driver-private-objects-to-atomic-state.patch
  0202-drm-dp-Introduce-MST-topology-state-to-track-availab.patch
- Backport upstream 4.9.x stable fixes up to 4.9.47 (bsc#1041744):
  0119-drm-amd-amdgpu-Return-error-if-initiating-read-out-o.patch
  0120-drm-radeon-ci-disable-mclk-switching-for-high-refres.patch
  0121-drm-radeon-Fix-eDP-for-single-display-iMac10-1-v2.patch
  0122-drm-ttm-Fix-use-after-free-in-ttm_bo_clean_mm.patch
  0123-drm-mst-Fix-error-handling-during-MST-sideband-messa.patch
  0124-drm-mst-Avoid-dereferencing-a-NULL-mstb-in-drm_dp_ms.patch
  0125-drm-mst-Avoid-processing-partially-received-up-down-.patch
  0126-drm-vmwgfx-Fix-gcc-7.1.1-warning.patch
  0127-drm-nouveau-disp-nv50-bump-max-chans-to-21.patch
  0128-drm-nouveau-bar-gf100-fix-access-to-upper-half-of-BA.patch
  0129-drm-rcar-du-Simplify-and-fix-probe-error-handling.patch
  0130-drm-msm-Ensure-that-the-hardware-write-pointer-is-va.patch
  0131-drm-msm-Put-back-the-vaddr-in-submit_reloc.patch
  0132-drm-msm-Verify-that-MSM_SUBMIT_BO_FLAGS-are-set.patch
  0133-drm-amdgpu-Fix-undue-fallthroughs-in-golden-register.patch
  0134-drm-virtio-fix-framebuffer-sparse-warning.patch
  0135-drm-etnaviv-Fix-off-by-one-error-in-reloc-checking.patch
  0136-drm-i915-Fix-out-of-bounds-array-access-in-bdw_load_.patch
  0137-drm-Release-driver-tracking-before-making-the-object.patch
  0138-drm-atomic-If-the-atomic-check-fails-return-its-valu.patch
  0139-drm-rcar-du-Fix-crash-in-encoder-failure-error-path.patch
  0140-drm-rcar-du-Fix-display-timing-controller-parameter.patch
  0141-drm-rcar-du-Fix-H-V-sync-signal-polarity-configurati.patch</changelog>
  <changelog author="tiwai@suse.de" date="1507291200">- Backport upstream 4.9.x stable fixes up to 4.9.53 (bsc#1041744):
  0142-drm-ttm-Fix-accounting-error-when-fail-to-get-pages-.patch
  0143-drm-nouveau-pci-msi-disable-MSI-on-big-endian-platfo.patch
  0144-drm-bridge-adv7511-Use-work_struct-to-defer-hotplug-.patch
  0145-drm-bridge-adv7511-Switch-to-using-drm_kms_helper_ho.patch
  0146-drm-sun4i-Implement-drm_driver-lastclose-to-restore-.patch
  0147-drm-radeon-disable-hard-reset-in-hibernate-for-APUs.patch
  0148-etnaviv-fix-gem-object-list-corruption.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510920000">- Conditionally build aarch64 as well (bsc#1066175);
  Fix build breakage by adv7511 hack on aarch64
- Replace
    0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch
  with
    0014-drm-dma_attrs-revert.patch
- Build host1x module (taken from the kernel-source) as well for
  avoiding the unneeded dependency on kernel-default-extra on
  ARM64 (bsc#1066175):
  0026-host1x-build-hack.patch
- Enable AMDGPU CIK and SI (bsc#1066175):
  0027-enable-AMDGPU-flavors.diff
- Add missing hisilicon hibmc driver (bsc#1066175):
  0301-drm-hisilicon-hibmc-Add-hisilicon-hibmc-drm-master-d.patch
  0302-drm-hisilicon-hibmc-Add-video-memory-management.patch
  0303-drm-hisilicon-hibmc-Add-support-for-frame-buffer.patch
  0304-drm-hisilicon-hibmc-Add-support-for-display-engine.patch
  0305-drm-hisilicon-hibmc-Add-support-for-VDAC.patch
  0306-drm-hisilicon-hibmc-Add-support-for-vblank-interrupt.patch
  0307-drm-hisilicon-hibmc-Checking-for-NULL-instead-of-IS_.patch
  0308-drm-hisilicon-hibmc-mark-PM-functions-__maybe_unused.patch
  0309-drm-hisilicon-hibmc-Fix-wrong-pointer-passed-to-PTR_.patch
- Add si_support and cik_support options to radeon and amdgpu
  (bsc#1066175):
  0401-drm-radeon-Add-module-param-to-control-CIK-support.patch
  0402-drm-radeon-Add-module-param-to-control-SI-support.patch
  0403-drm-radeon-Make-si_support-and-cik_support-parameter.patch
  0404-drm-amdgpu-Add-module-param-to-control-CIK-support.patch
  0405-drm-amdgpu-Add-module-param-to-control-SI-support.patch
  0406-drm-amdgpu-Update-Kconfig-help-for-SI-and-CIK-suppor.patch
  0407-drm-amdgpu-radeon-Use-radeon-by-default-for-CIK-GPUs.patch
  0408-amdgpu-Set-cik-si_support-to-1-by-default-if-radeon-.patch
- Remove stale Makefile from src
- Update Module.supported and apply it properly;
  following SLE12-SP3 kernel status</changelog>
  <changelog author="tiwai@suse.de" date="1511524800">- Backport upstream 4.9.x stable fixes up to 4.9.64 (bsc#1041744):
  0149-drm-i915-Fix-the-overlay-frontbuffer-tracking.patch
  0150-drm-i915-psr-disable-psr2-for-resolution-greater-tha.patch
  0151-drm-amdkfd-fix-improper-return-value-on-error.patch
  0152-drm-mali-dp-Fix-destination-size-handling-when-rotat.patch
  0153-drm-mali-dp-Fix-transposed-horizontal-vertical-flip.patch
  0154-drm-i915-bios-ignore-HDMI-on-port-A.patch
  0155-drm-i915-edp-Get-the-Panel-Power-Off-timestamp-after.patch
  0156-drm-i915-Read-timings-from-the-correct-transcoder-in.patch
  0157-drm-i915-bios-parse-DDI-ports-also-for-CHV-for-HDMI-.patch
  0158-drm-amdgpu-refuse-to-reserve-io-mem-for-split-VRAM-b.patch
  0159-drm-nouveau-gr-gf100-fix-ccache-error-logging.patch
  0160-drm-nouveau-bsp-g92-disable-by-default.patch
  0161-drm-nouveau-mmu-flush-tlbs-before-deleting-page-tabl.patch
  0162-drm-amd-powerplay-fix-uninitialized-variable.patch
  0163-drm-amdgpu-return-ENOENT-from-uvd-6.0-early-init-for.patch
  0164-drm-i915-edp-read-edp-display-control-registers-unco.patch
  0165-drm-msm-Fix-potential-buffer-overflow-issue.patch
  0166-drm-msm-fix-an-integer-overflow-test.patch
  0167-drm-amdgpu-when-dpm-disabled-also-need-to-stop-start.patch
  0168-drm-fsl-dcu-check-for-clk_prepare_enable-error.patch
  0169-drm-exynos-g2d-prevent-integer-overflow-in.patch
  0170-drm-drm_minor_register-Clean-up-debugfs-on-failure.patch
  0171-drm-mali-dp-fix-Lx_CONTROL-register-fields-clobber.patch
  0172-drm-i915-Do-not-rely-on-wm-preservation-for-ILK-wate.patch
  0173-drm-vmwgfx-Fix-Ubuntu-17.10-Wayland-black-screen-iss.patch
  0174-drm-bridge-adv7511-Rework-adv7511_power_on-off-so-th.patch
  0175-drm-bridge-adv7511-Reuse-__adv7511_power_on-off-when.patch
  0176-drm-bridge-adv7511-Re-write-the-i2c-address-before-E.patch
  0177-drm-sti-sti_vtg-Handle-return-NULL-error-from-devm_i.patch
  0178-drm-omap-panel-sony-acx565akm.c-Add-MODULE_ALIAS.patch
  0179-gpu-drm-mgag200-mgag200_main-Handle-error-from-pci_i.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513425600">- Backport upstream 4.9.x stable fixes up to 4.9.70 (bsc#1041744):
  0501-Revert-drm-i915-Do-not-rely-on-wm-preservation-for-I.patch
  0502-drm-sun4i-Fix-a-return-value-in-case-of-error.patch
  0503-drm-armada-Fix-compile-fail.patch
  0504-drm-Apply-range-restriction-after-color-adjustment-w.patch
  0505-drm-mediatek-don-t-use-drm_put_dev.patch
  0506-Revert-drm-radeon-dont-switch-vt-on-suspend.patch
  0507-drm-amdgpu-potential-uninitialized-variable-in-amdgp.patch
  0508-drm-amdgpu-Potential-uninitialized-variable-in-amdgp.patch
  0509-drm-radeon-fix-atombios-on-big-endian.patch
  0510-drm-panel-simple-Add-missing-panel_simple_unprepare-.patch
  0511-drm-hisilicon-Ensure-LDI-regs-are-properly-configure.patch
  0512-drm-ttm-once-more-fix-ttm_buffer_object_transfer.patch
  0513-drm-amd-pp-fix-typecast-error-in-powerplay.patch
  0514-drm-i915-Don-t-try-indexed-reads-to-alternate-slave-.patch
  0515-drm-i915-Prevent-zero-length-index-write.patch
  0516-drm-fsl-dcu-avoid-disabling-pixel-clock-twice-on-sus.patch
  0517-drm-fsl-dcu-enable-IRQ-before-drm_atomic_helper_resu.patch
  0518-drm-exynos-decon5433-update-shadow-registers-iff-the.patch
  0519-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-also-if.patch
  0520-drm-amdgpu-fix-bug-set-incorrect-value-to-vce-regist.patch
  0521-drm-exynos-decon5433-set-STANDALONE_UPDATE_F-on-outp.patch
  0522-drm-amdgpu-fix-unload-driver-issue-for-virtual-displ.patch
  0523-drm-exynos-gem-Drop-NONCONTIG-flag-for-buffers-alloc.patch
  0524-Revert-drm-armada-Fix-compile-fail.patch
  0525-drm-amd-amdgpu-fix-console-deadlock-if-late-init-fai.patch</changelog>
  <changelog author="tiwai@suse.de" date="1518609600">- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744):
  0526-drm-amdgpu-fix-parser-init-error-path-to-avoid-crash.patch
  0527-drm-omap-fix-dmabuf-mmap-for-dma_alloc-ed-buffers.patch
  0528-drm-amd-remove-broken-include-path.patch
  0529-drm-radeon-si-add-dpm-quirk-for-Oland.patch
  0530-drm-radeon-reinstate-oland-workaround-for-sclk.patch
  0531-drm-vmwgfx-Potential-off-by-one-in-vmw_view_add.patch
  0532-drm-vc4-Account-for-interrupts-in-flight.patch
  0533-drm-amdgpu-Fix-SDMA-load-unload-sequence-on-HWS-disa.patch
  0534-drm-amdkfd-Fix-SDMA-ring-buffer-size-calculation.patch
  0535-drm-amdkfd-Fix-SDMA-oversubsription-handling.patch
  0536-drm-amdgpu-don-t-try-to-move-pinned-BOs.patch
  0537-drm-bridge-tc358767-do-no-fail-on-hi-res-displays.patch
  0538-drm-bridge-tc358767-filter-out-too-high-modes.patch
  0539-drm-bridge-tc358767-fix-DP0_MISC-register-set.patch
  0540-drm-bridge-tc358767-fix-timing-calculations.patch
  0541-drm-bridge-tc358767-fix-AUXDATAn-registers-access.patch
  0542-drm-bridge-tc358767-fix-1-lane-behavior.patch
  0543-drm-omap-Fix-error-handling-path-in-omap_dmm_probe.patch
  0544-drm-vc4-Move-IRQ-enable-to-PM-path.patch
  0545-drm-rcar-du-Use-the-VBK-interrupt-for-vblank-events.patch
  0546-drm-rcar-du-Fix-race-condition-when-disabling-planes.patch
- Limit the supplements for the default hardware support to only
  Intel Skylake / Kabylake and AMDGPU (bsc#1077885);
  4.9.x i915 seems more buggy than expected for old chipsets.</changelog>
  <changelog author="tiwai@suse.de" date="1522152000">- Disable DP-MST fixes due to regression wrt suspend/resume
  (bsc#1087047)</changelog>
  <changelog author="tiwai@suse.de" date="1523188800">- Fix NULL dereference at reset_common_ring() in i915 driver
  (bsc#1088569):
  1015-drm-i915-gpu-reset-oops-fix.patch</changelog>
</package>
<package pkgid="f5ea8a545bc50af9ec6b3813a1acfd242f00b4525a01c6dbb5516e35b2823c13" name="drm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.9.33_k4.4.79_4" rel="5.2"/>
  <changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
  <changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
  <changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
  <changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
  <changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
  <changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
  <changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
  <changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
  <changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>
</package>
<package pkgid="430a2910d85e62f3b4f049adc74e887c7dffa52d80f27349e73709616b39555c" name="ecryptfs-utils" arch="src">
  <version epoch="0" ver="103" rel="7.1"/>
  <changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
  <changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
  <changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
  <changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
  <changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
  <changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
  <changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
  <changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
  <changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
  <changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
  <changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
  <changelog author="meissner@suse.com" date="1453118400">- validate-mount-destination-fs-type.patch:
  Fixed mounting over specific system mounts that could be used to
  escalate privileges by local users. (bsc#962052 CVE-2016-1572)
- ecryptfs-utils-CVE-2014-9687.patch: Do not use a default salt to
  encrypt the mount passphrase, which would make it easier for attackers
  to obtain user passwords via a brute force attack. (bsc#920160
  CVE-2014-9687)</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Fix for CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning (bsc#989121)
- Added CVE-2015-8946.patch
- Fix for CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive (bsc#989122)
- Added CVE-2016-6224.patch</changelog>
</package>
<package pkgid="c735ef881e7c8cb4c7f4a737d12e5c73d5e5ad8012bc493123eb24d7e363b762" name="ecryptfs-utils" arch="x86_64">
  <version epoch="0" ver="103" rel="7.1"/>
  <changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
  <changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
  <changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
  <changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
  <changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
  <changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
  <changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
  <changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
  <changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
  <changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
  <changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
  <changelog author="meissner@suse.com" date="1453118400">- validate-mount-destination-fs-type.patch:
  Fixed mounting over specific system mounts that could be used to
  escalate privileges by local users. (bsc#962052 CVE-2016-1572)
- ecryptfs-utils-CVE-2014-9687.patch: Do not use a default salt to
  encrypt the mount passphrase, which would make it easier for attackers
  to obtain user passwords via a brute force attack. (bsc#920160
  CVE-2014-9687)</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Fix for CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning (bsc#989121)
- Added CVE-2015-8946.patch
- Fix for CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive (bsc#989122)
- Added CVE-2016-6224.patch</changelog>
</package>
<package pkgid="8ff4896532d37984aeaf62d2b5342708cadae1c8c240278da9767b9f3ddf82f1" name="ecryptfs-utils-32bit" arch="x86_64">
  <version epoch="0" ver="103" rel="7.1"/>
  <changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
  <changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
  <changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
  <changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
  <changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
  <changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
  <changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
  <changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
  <changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
  <changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
  <changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
  <changelog author="meissner@suse.com" date="1453118400">- validate-mount-destination-fs-type.patch:
  Fixed mounting over specific system mounts that could be used to
  escalate privileges by local users. (bsc#962052 CVE-2016-1572)
- ecryptfs-utils-CVE-2014-9687.patch: Do not use a default salt to
  encrypt the mount passphrase, which would make it easier for attackers
  to obtain user passwords via a brute force attack. (bsc#920160
  CVE-2014-9687)</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Fix for CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning (bsc#989121)
- Added CVE-2015-8946.patch
- Fix for CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive (bsc#989122)
- Added CVE-2016-6224.patch</changelog>
</package>
<package pkgid="1bc6187670f249a99044c18d95e0a973971c61cf1d3bd86c26c8e8623ea93e89" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="5.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
</package>
<package pkgid="98416b9b0d3ade0c1ee529ae1c3277381abcca9b3687f858a199a3620c237b28" name="editorconfig-core-c" arch="src">
  <version epoch="0" ver="0.12.1" rel="5.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
</package>
<package pkgid="b06b9cb5ca7c3d8a363310774e554e05e15d920414a3ae56d9d8c5ac4ea7cd44" name="emacs" arch="src">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="c7ea2ff33e04611598c35c62ea7ca2f31bcdfae2cde1ef928bea74c31422f577" name="emacs" arch="x86_64">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="46a4569ed25fecef20d129a77ff38050b8ba3e404b0d856ea5fb9fa6183f24aa" name="emacs-el" arch="noarch">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="b35faf44584b6d012d65fc896c763d4b6d5ca56af67cd581e0b322b64a6d05a1" name="emacs-info" arch="noarch">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="69efde50510b7c67db69f687e74a96fe205ecf5e8fe36adae5df2c88b068e868" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="f1ce9b1b4ce2f2b83acf7aa5138c7b43d512157826adac223aaffeb38e0f1fa1" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="19f163ae7312cb6bca4e2f4fe5751aac376f3d12f90b040facafafa3448994e7" name="empathy" arch="src">
  <version epoch="0" ver="3.12.13" rel="6.1"/>
  <changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>
</package>
<package pkgid="ee2a46fcc7cec15f10336a75721517d126ca4d4aec9885d1f5927dd472e82c34" name="empathy" arch="x86_64">
  <version epoch="0" ver="3.12.13" rel="6.1"/>
  <changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>
</package>
<package pkgid="b2bc11c1e55844cabb7750e5ee8e96f4d061c538fe5d5419081967f73d5502bc" name="empathy-lang" arch="noarch">
  <version epoch="0" ver="3.12.13" rel="6.1"/>
  <changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>
</package>
<package pkgid="c01fdbe41eb453a14332b98d88cd64c2e9f43935794e4d3d1b9386276414721d" name="endless-sky" arch="src">
  <version epoch="0" ver="0.9.6" rel="2.3.1"/>
  <changelog author="mailaender@opensuse.org" date="1446292800">- initial packaging</changelog>
  <changelog author="mailaender@opensuse.org" date="1448107200">- update to 0.8.7
- use scons to install the game
- Added fix-data-path.patch to fix installation path of data.</changelog>
  <changelog author="rpm@fthiessen.de" date="1449662400">- Update to 0.8.8:
  * Fixed various bugs with how the game determines which ship is
    your "flagship."
  * The "Uninhabited" government on Ruin will no longer fine the
    player for illegal outfits.
  * Fixed a crash that could happen while taking off if missions
    failed due to lack of space.
  * For detailed changes see changelog in tar-ball.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471176000">- update to 0.9.2
- see changelog file to list of changes</changelog>
  <changelog author="mailaender@opensuse.org" date="1472299200">- add license, copyright information and changelog
- add an appdata.xml file</changelog>
  <changelog author="mailaender@opensuse.org" date="1479556800">- update to 0.9.4
  * Vara Ke'sok no longer starts out as an Unfettered planet.
  * Fixed a hang that occurred when maximizing the window.
  * Systems created by game events are now properly connected to the map.
  * The info panel can now handle ships with many more outfits or weapons.
- drop appdata.patch (applied upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to 0.9.6
  * Fixed a depreciation bug causing random prices for outfits on some systems.
  * Eliminated "death benefits." Depreciation is now the main way that plundering is balanced.
  * Depreciation happens about 3 times slower than it did in 0.9.5.
  * Coalition jobs now "repeat" instead of only being offered once.
  * Fixed a bug where "surveillance" ships scan the player's ship over and over.
  * Added images for all the Coalition and Heliarch outfits.</changelog>
  <changelog author="sparschauer@suse.de" date="1545048000">- Prevent that the game blocks the main menu buttons due to broken
  symlinks in the data directory caused by brp-25-symlink not handling
  spaces in paths properly (boo#1119628, boo#1119674)
  * Let fdupes create hardlinks instead of symlinks as a workaround</changelog>
</package>
<package pkgid="e94946c21c9e1c9a23091e45a37e4f3bd8f2b9c3018329c411dc84beee1ff4f9" name="endless-sky" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="2.3.1"/>
  <changelog author="mailaender@opensuse.org" date="1446292800">- initial packaging</changelog>
  <changelog author="mailaender@opensuse.org" date="1448107200">- update to 0.8.7
- use scons to install the game
- Added fix-data-path.patch to fix installation path of data.</changelog>
  <changelog author="rpm@fthiessen.de" date="1449662400">- Update to 0.8.8:
  * Fixed various bugs with how the game determines which ship is
    your "flagship."
  * The "Uninhabited" government on Ruin will no longer fine the
    player for illegal outfits.
  * Fixed a crash that could happen while taking off if missions
    failed due to lack of space.
  * For detailed changes see changelog in tar-ball.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471176000">- update to 0.9.2
- see changelog file to list of changes</changelog>
  <changelog author="mailaender@opensuse.org" date="1472299200">- add license, copyright information and changelog
- add an appdata.xml file</changelog>
  <changelog author="mailaender@opensuse.org" date="1479556800">- update to 0.9.4
  * Vara Ke'sok no longer starts out as an Unfettered planet.
  * Fixed a hang that occurred when maximizing the window.
  * Systems created by game events are now properly connected to the map.
  * The info panel can now handle ships with many more outfits or weapons.
- drop appdata.patch (applied upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to 0.9.6
  * Fixed a depreciation bug causing random prices for outfits on some systems.
  * Eliminated "death benefits." Depreciation is now the main way that plundering is balanced.
  * Depreciation happens about 3 times slower than it did in 0.9.5.
  * Coalition jobs now "repeat" instead of only being offered once.
  * Fixed a bug where "surveillance" ships scan the player's ship over and over.
  * Added images for all the Coalition and Heliarch outfits.</changelog>
  <changelog author="sparschauer@suse.de" date="1545048000">- Prevent that the game blocks the main menu buttons due to broken
  symlinks in the data directory caused by brp-25-symlink not handling
  spaces in paths properly (boo#1119628, boo#1119674)
  * Let fdupes create hardlinks instead of symlinks as a workaround</changelog>
</package>
<package pkgid="6ab3a5fe7a635e0ec726a59ebb219b982f87cf9d260c82b45634e616ea5d93d6" name="enigmail" arch="src">
  <version epoch="0" ver="1.9.8.3" rel="5.1"/>
  <changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
  <changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
  <changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
</package>
<package pkgid="1935675f0c28847a3b1b23138017d8137727df80e832a2619336529be6529fdc" name="enigmail" arch="x86_64">
  <version epoch="0" ver="1.9.8.3" rel="5.1"/>
  <changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
  <changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
  <changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
</package>
<package pkgid="4422e7bfaa06423dd35c559ca34535b1288eb64f6dfe40818c40df83af61e396" name="enigmail" arch="src">
  <version epoch="0" ver="1.9.9" rel="9.1"/>
  <changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
  <changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
  <changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
</package>
<package pkgid="7293019e08c6e9a0439ec3ddb703d9bbf6ab16de400c1c7c9b8aff3368ffefcc" name="enigmail" arch="x86_64">
  <version epoch="0" ver="1.9.9" rel="9.1"/>
  <changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
  <changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
  <changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
</package>
<package pkgid="5dbb48e4352184225d3da72a153d75118331c9c9c1e360ce15e394f6c369d52c" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.4" rel="12.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="794321f4dfdb3e13ae98df93b9909f31c9c3bc98eacad82d2875859be3066154" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="12.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="708699e0b34132c40d2cee4add98a148032f3b758b903c4baa55f965c647d294" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.5" rel="15.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="1d18286906a74a5f478c027c95e9befe966091aecd5b1b924ec9b8efdb2bb486" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="15.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="f79decfa7ce13ab8a4f5af41a64fc1da5ed9706f48a75e1e32784b8fa08bcff5" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.6" rel="18.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="a481f13efb3054067674a4b6d9eddcfc24659a24fdf076aac9ba3ffc2cfdc427" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="18.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="83029df21cee7aef681ca68730e3614ef718e21ad72f2b33546ff992815abd25" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.7" rel="21.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="d0da4ecf8ac37b7c2c57daf6b21d04b2cff899dee37f79138a386b89b0f8677f" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="21.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="3f6773eaa5e0c5fc60efb6c172915e322a37143066d3ffd8fbf99199b3b18404" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.8" rel="24.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="3ea914a43202de3aaf1e0632a13486fb723af81f1f3231dce27a04fbce493612" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="24.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="1ac4de3ddfd361b0d74bba11c98abb9c5fb1fb2fa0671fd0cec188b6de61c425" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.9" rel="27.1"/>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
</package>
<package pkgid="d28b4700a933a40116e92339e6ff8971cd8e939d0906d58fe44ae3f8ec107f4b" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="27.1"/>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
</package>
<package pkgid="2e7ae4b2cad6e4cdac0d0a22754fc8c7df992c5f7c431a2eb631b09162373814" name="enlightenment-theme-openSUSE" arch="noarch">
  <version epoch="0" ver="20170726" rel="3.1"/>
  <changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
  <changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
  <changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
  <changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
  <changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
  <changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
  <changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
  <changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
  <changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
  <changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
  <changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
  <changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
  <changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
  <changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
  <changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
  <changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
  <changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
  <changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
  <changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>
</package>
<package pkgid="50b16f82e4efaf2db02a49c5ab90473a5ecc084c90b26f36b9af23144656e2b8" name="enlightenment-theme-openSUSE" arch="src">
  <version epoch="0" ver="20170726" rel="3.1"/>
  <changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
  <changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
  <changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
  <changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
  <changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
  <changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
  <changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
  <changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
  <changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
  <changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
  <changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
  <changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
  <changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
  <changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
  <changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
  <changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
  <changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
  <changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
  <changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>
</package>
<package pkgid="66c39c0f72d350759d30b62cc0905d12aff28df4d736b045e0364f2bfac8714f" name="erlang" arch="src">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="4e07969a9720f8740e78ea5e53b86013e1547332ef893f76de1e21083d58cf06" name="erlang" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="6487b60e6e7e4157642af91283f6f486bfc853916c05bb22310942183bf1a08d" name="erlang" arch="src">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="4410499ed33c8c108292da816866e2d2115437ac1a12ef307cd7e6cc88d2c38f" name="erlang" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="14674fb0d1aeb724a8101249df5c038d802e5a83773be720be13bfe7032e8eb4" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="9e6ea6be9e209a600af14d34837816683d1e725994a82d8125c26c3af38fbead" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="2fdba2d61f8c529257151e050b48f99a126000ea4b4f7b3b8363bd838f4498ee" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="4792b33856230087031fd8eb4c6b876b29d13a6150f5a2731d9992b1acbf0a69" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="2479f6a2e3b421cd953dea300efaa7d1fbe9ac0efe0f4aaac475bbcbf847a6fb" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="d70abaa697edb8239f3463306d3111c9a9be00b47600712209b16194e0d24b1e" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="a495595c9d943b080211c12e2103df08242185b86bdaf498bedc4c9fb998f6fd" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="97d5b75c827150e714763ca6b369369efedc4d5d60484e1a776a892163a0beee" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="7aa8804c0976aa0ed54d55a3aeaf13e886b651e1913496338f466fe579316eb8" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="2468ec8a6568893c8061b258c122196bc4f904a8456bbb92bb292d27f1c1e440" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="e73840f81cde2fa55ce5ee65da34339feca5e3742c4ac75eaeedcc9f5ae0c9d9" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="40cffde16a94461ffd924a25c2d1ebc521353e506c0eb0c013cc4332afc7b4f5" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="53c1636c3f498777a4bd77472ff1a7ffcdcd1eede23c2c26565316e7491efc4a" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="aecacda2fd1469d4c36747c731b2e62a498b6826c00d873a8911fb3a77396052" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="ae73a9367f5ba39f8be1d56bd833e661aafa1aef34ececa3d12fada9e479fc22" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="f350fab4f2a4a407d91284192badfd7b1bf4147cf08f9c0df8cf552cef632991" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="2592c02cc22b8a47fde3486d259c83202686c2372c4fab539260db1f2944e85f" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="a500b8e613d2dffac28ceb12a0c979fc8003a2c6b25a2337018add883ce5ae36" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="51d6d48ccc91b9d433a07381fbf575b2ee17f98f3d963567468621d0ffeccb18" name="erlang-et-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="e9bc1f7a29a03543d95d5698a77a89adca6bb050b41f1feb9f163feb1d61ce77" name="erlang-et-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="4e79d28d613dc638c00d7eada2b44616c7a01c3f8bb28b2499fe32bb54441bd6" name="erlang-gs" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="0b2800ec1a9a28cb76ddc16c4e1305a5fba06d432c6f49516311618c469ec04c" name="erlang-gs" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="07e7d54fd513694ea9618d364de45c6bb8737f55875393c74c909ecd017e2186" name="erlang-gs-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="25da9b63b45d5ddbf25faefe380549812a37a8cdab4b152517110a0e9915d501" name="erlang-gs-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="1d322e5b596588177b7f6ccfd117b4ed43c8bf72a674a8be988e1ea4c0af8bd5" name="erlang-jinterface" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="8f519d5253bd90e6559fb7a6928c970d4ff817e92020a98bd5aeb56d30fe437a" name="erlang-jinterface" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="e1c575ef36d7bcf257531936a6cde5cfce7682eb967dfc90686ff3366af9aedf" name="erlang-jinterface-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="75759457037bce9604eda3ab54183578b22d9157c895f53e27c30319c510a3d0" name="erlang-jinterface-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="6b333f8c3684e97ffdd29a4d65d511978c4725f621f5b4954107d79d1280787e" name="erlang-observer" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="9bd7758a5995e120db3b220b9f3b949974383437689681c9ada82e9044f0eec0" name="erlang-observer" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="30bc4ab243767939233badc1133b0a5c823b541c8d87b6a399a21ca28d756b70" name="erlang-observer-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="89ac423cc998ff651fcf9e971dc84391b625a4cb14537d1c8f23f0ef554a9d63" name="erlang-observer-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="92d6b7d6f5ef0409c2f5332d69c20cb703ccc65c4d02eb44cd542a306752bc1f" name="erlang-reltool" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="3a83aea6aee01e28bd431a36f22c86bc89bf77f4e63a461638ba06404cd2526f" name="erlang-reltool" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="aca564808e7de98b98054bca358eaa92a9222a7615fb9852a8d80e8024e2c352" name="erlang-reltool-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="ac367e95ab8fd25198d108ec365b44d60730d56a9eb83a90e0109fabf5c209a9" name="erlang-reltool-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="955670cdae16cd6431e624267780502559e00affb2aa495532d2ba7c3aa5bdd6" name="erlang-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="00830364836a2f3fd9e87e70595504cfb529629d3be4cd124e58eada76b06c0e" name="erlang-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="a761dfcda6d57d87dcaef9c5385c2520f688c5f929062f42c7817ff63b9c78df" name="erlang-wx" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="c09ef5e382966f8f24145898f6ec87d697e3e802497c5989459d947b02c0cabe" name="erlang-wx" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="4c4aaf061d689ef9c028ac3716d2f0782b386a19f07ce4037d869c34d9e4648b" name="erlang-wx-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.11" rel="9.3"/>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 18.3.4.8:
  * ssh: Default exec is disabled when a user-defined shell is
    enabled</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 18.3.4.9:
  * ssh: Fix rare spurios shutdowns of ssh servers when
    receiveing {'EXIT',_,normal} messages.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 18.3.4.11 (boo#1118867).
- Changes for 18.3.4.11:
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
- Changes for 18.3.4.10:
  * erts: Fixed small memory leak that could occur when sending to a
    terminating port.</changelog>
</package>
<package pkgid="6288471ebb07f88ffa3e571b8dd70cc3ed1e19c84ce0ea1f565967e2fada4b47" name="erlang-wx-src" arch="x86_64">
  <version epoch="0" ver="18.3.4.7" rel="6.1"/>
  <changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
  <changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
  <changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>
</package>
<package pkgid="196aec1b0654558184ccd29a60d73c13e18f033e225a91eac79dd8cb420b5f6a" name="etags" arch="x86_64">
  <version epoch="0" ver="24.3" rel="28.1"/>
  <changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
  <changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
  <changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
  <changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
  <changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
  <changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
  <changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
  <changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
  <changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
  <changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
  <changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
  <changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
  <changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
</package>
<package pkgid="6d2ab1600ab2ef20bbab6c0c2fad415d449d2ca130b445eb39698f14925621e8" name="etc-update" arch="noarch">
  <version epoch="0" ver="2.3.31" rel="11.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1359892800">- initial version of the package, patched current version from portage</changelog>
  <changelog author="mhrusecky@suse.cz" date="1359892801">- use upstream files and separate patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1359979200">- move tool to %_sbin where it belongs</changelog>
  <changelog author="mhrusecky@suse.cz" date="1360238400">- osc service localrun format_spec_file</changelog>
  <changelog author="mhrusecky@suse.cz" date="1360324800">- include license file</changelog>
  <changelog author="tampakrap@opensuse.org" date="1447416000">- Version bump 2.2.24:
  * Test portageq and etc-update for Gentoo bug #462412.
  * CONFIG_PROTECT: handle non-existent files
  * etc-update: symlink support for Gentoo bug #485598
  * Add support for SUSE based distros in etc-update, Gentoo bug #456128
  * FEATURES=case-insensitive-fs for Gentoo bug #524236
  * Various minor updates in the makefile
- New URL due to redesign of all the Gentoo webpages
- Remove rpm-distribution.patch as it is merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 2.3.31:
  * Few small fixes
  * Update to support archlinux config files out of the box
- Use full portage archive in order to allow "automatic" updating
  instead of copying files</changelog>
  <changelog author="tchvatal@suse.com" date="1524744000">- Add patch etc-update-opensuse.patch to really work on Leap</changelog>
  <changelog author="tchvatal@suse.com" date="1525089600">- Refresh etc-update-opensuse.patch to match for rpmnew files too.
  Now it matched only rpmsave and rpmorig
  * etc-update-opensuse.patch</changelog>
</package>
<package pkgid="7eb9d7589e5d9da81abe1fd749c8dc8322bf9ca25291743f52e886ad844c6727" name="etc-update" arch="src">
  <version epoch="0" ver="2.3.31" rel="11.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1359892800">- initial version of the package, patched current version from portage</changelog>
  <changelog author="mhrusecky@suse.cz" date="1359892801">- use upstream files and separate patch</changelog>
  <changelog author="mhrusecky@suse.cz" date="1359979200">- move tool to %_sbin where it belongs</changelog>
  <changelog author="mhrusecky@suse.cz" date="1360238400">- osc service localrun format_spec_file</changelog>
  <changelog author="mhrusecky@suse.cz" date="1360324800">- include license file</changelog>
  <changelog author="tampakrap@opensuse.org" date="1447416000">- Version bump 2.2.24:
  * Test portageq and etc-update for Gentoo bug #462412.
  * CONFIG_PROTECT: handle non-existent files
  * etc-update: symlink support for Gentoo bug #485598
  * Add support for SUSE based distros in etc-update, Gentoo bug #456128
  * FEATURES=case-insensitive-fs for Gentoo bug #524236
  * Various minor updates in the makefile
- New URL due to redesign of all the Gentoo webpages
- Remove rpm-distribution.patch as it is merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 2.3.31:
  * Few small fixes
  * Update to support archlinux config files out of the box
- Use full portage archive in order to allow "automatic" updating
  instead of copying files</changelog>
  <changelog author="tchvatal@suse.com" date="1524744000">- Add patch etc-update-opensuse.patch to really work on Leap</changelog>
  <changelog author="tchvatal@suse.com" date="1525089600">- Refresh etc-update-opensuse.patch to match for rpmnew files too.
  Now it matched only rpmsave and rpmorig
  * etc-update-opensuse.patch</changelog>
</package>
<package pkgid="c225f0b587698a28d85265171a1cd77cc83f7a3a54624ea07034e92d29e00494" name="evince" arch="src">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="afbdf07a85778a0a8a5c0fe90010227839e55fc3816615cd1ff2195b9d7d4e53" name="evince" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="8f46ed297e79f664c42804899b81a3ac127e0bcfa32178ff5b59333655414d9c" name="evince" arch="src">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="69b8977731f27190d3b2ca7fa55d2baf649c0de885b32a2331d9274df831cf0b" name="evince" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="6625d789d0b6dc36e64a0738836ea282b3f91692b7f2872a9fb7b5d68ac41791" name="evince-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="75defc5e4e3c6a606330f1d6f4db01261d7ca530a763eae166eeac17f737bcd4" name="evince-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="fcad8aabfeda43f05cff5869de71b5df75b7b2e09cfa99c32142ef55cd485761" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="33053dc0d07d72500d4d5bbd514a77f3fc92506605d22058f59ba9ef76fa3bde" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="2e1f54eedede6f501ff105f39c8930548b9734037b5bf364d4e8043fe8c302e3" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="0c22b5b96aa1d1145fdbbfdeb51f5673f0e8914b9db2cd13a1d7f689c45ef96d" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="28beb1936a0d9d2929bb8c5f2731c26616b4a7a25d764eaa9c36385119c66ddd" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="1cf698a5a4c801fe52be827797f94e746c3cac0b4272e7a7690b74b1fd34db16" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="289b810fa7945812ab9790db1bc58e74eb3b1778c5a8e1bf0f325662726ff7b0" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="5d5ee72e15f2940b0a06c713db2ceb85341e00eef483010e30db2d02621e5a38" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="cf3e495e7bcce658211f8e11242a93a5a7e742dd9da03f1c1282cadd51dcfe25" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="b2dfdba8c54f68342d3d57bd03b4bc953feaa4f80777d683a45f209f879964b1" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="5d8ae0a3131db74842606852f3780a503b3f624de293facb8ad3bb6c5454e0f4" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="1fe25a95b7071f1562b0254046c682d52fe0ab39744be8861a7b530023af0cc8" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="f9a13f867406ae607a13a059f7e516f31e929dbb2b98093ad4e89d1eea476b6a" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="e834d41a5f8ce40baacf3f6a214bd7f0753fcaf653910977566d632cbefb9c19" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="9e5b257ae219918d68dcc030a6f7188886ac3ef941611c2ff39145ac3f71ff79" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="72df59f85638ca25e70d8fea4933df15efe78336fdc915de1e2736f00e82be6b" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="a2674feb991f56a7371670d48ef080750f8348dd4d63c2ea0e74f495224fe66b" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
</package>
<package pkgid="3298780641cb59f2954a875e6dfd4212c172f5f1af161f963c1057938853f11a" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="9.1"/>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
  <changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1512388800">- Add evince-dvi-command-injection.patch to mitigate command line
  injections via filenames when printing to a file. (bgo#784947
  bnc#1070046)</changelog>
</package>
<package pkgid="7d5b9f24e504864f244c550469d110f25e792727fd45ce69cdcf726de266e8ff" name="evolution" arch="src">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="7681e542d223ffd0f61fbe4a2d8b46c5f36a6cd6710c8b607b11212963c8da32" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="5721e5c9d5f356b17576020e625afaac4ab5123b00797ad2eddc230cc5f5a0ed" name="evolution" arch="src">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="bc596c31b208fa0da3544dd985074500c9b5e3fdafbef1889405425fa5deb242" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="7f8d09461188500801e4cd2b94f9d33d1c7848353817d4491b94f8a6e3f2845d" name="evolution-data-server" arch="src">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="bc1eb55274d209b0a3c1818c507bbf310dd219ee5a8a006b18305ee1e026ae28" name="evolution-data-server" arch="x86_64">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="5a887b6b7d67eaecfc0249c39af6eb28b9ec0c8b488ac1073630b8b66513b05f" name="evolution-data-server-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="a9cd24448e466b1987fddfc0d8a6c91ede9748c56eb4ea1deb0b2c670d8854a2" name="evolution-data-server-devel" arch="x86_64">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="6abce4806c738b80ae0163cedf367d48798a3da5f8d6928e2403931354cab293" name="evolution-data-server-doc" arch="x86_64">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="4873231711ad6e5e1c2d1fc4ba82d368ec7ae377dba67b233f4a5062fd30c7ca" name="evolution-data-server-lang" arch="noarch">
  <version epoch="0" ver="3.22.7" rel="7.3.1"/>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + [IMAPx]: 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + [Camel]: Set default connection timeout to 90 seconds.
  + [IMAPx]: Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Bugs fixed: bgo#634294, bgo#767786, bgo#767865, bgo#767780,
    bgo#768000.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + [CalDAV]:
  - Instead of query for UID, try to get the object directly.
  - Backend not initialized when asked to authenticate.
  + [IMAPx]:
  - Add default folder names as iCloud provides them.
  - Release idle_lock before disconnecting the cancellable.
  - Crash under imapx_server_info_changed_cb().
  + Bugs fixed: bgo#728496, bgo#764977, bgo#235681.
  + Updated translations.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Possible use-after-free on factory subprocess close.
  + Add error checks around factory subprocess backend loading.
  + [IMAPx] 'STARTTLS not supported' error ignored.
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Bugs fixed: bgo#571723, bgo#687038, bgo#740627, bgo#765646,
    bgo#765857.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + e-webdav-discover-widget: Show all supported types for the
    source in the table.
  + Fix two memory leaks.
  + [CamelGpgContext] Provide signer photos when available.
  + Introduce an ENetworkMonitor.
  + Fix a GCC compiler warning.
  + Address some of the clang compiler warnings.
  + ENetworkMonitor: Implement also the async part of the
    GNetworkMonitor interface.
  + [Camel] Set default connection timeout to 90 seconds.
  + Bugs fixed: bgo#766747, bgo#766682, bgo#767056, bgo#767134,
    bgo#634294.
  + Updated translations.
- Bump so_camel (also in baselibs) following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Move Camel dependency into Requires.private in
    libedataserver/ui.pc.
  + Always build ESExp structure as a GObject descendant.
  + Correct version number reference in a developer comment.
  + Build developer documentation sections and types on the fly.
  + [POP3] Default to "Leave messages on server" for new accounts.
  + [IMAPx] Possible deadlock in
    camel_imapx_server_stop_idle_sync().
  + Add Language headers to po files.
  + Bugs fixed: bgo#767786, bgo#767865, bgo#767780, bgo#764065,
    bgo#443716, bgo#768000, bgo#768258, bgo#768496.
  + Updated translations.
- Bump so_camel and so_edataserver (also in baselibs) following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Drop unused 'Deletes' table from folders.db (bgo#768599).
  + Incorrect times provided in e_cal_recur_generate_instances()
    (bgo#766346).
  + Port to WebKit2 (bgo#751588).
  + Junk check fails due to empty cache file (bgo#767564).
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + build: Rename webkitgtk_minimum_version to
    webkit2gtk_minimum_version.
  + Add translator comments above '%s : %s' explaining its purpose.
  + [Camel] Folder summary can be leaked after its folder is freed.
  + Bugs fixed: bgo#742117, bgo#761450, bgo#767786, bgo#768672,
    bgo#769620, bgo#770198.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Bugs fixed: bgo#770452, bgo#770570, bgo#770746, bgo#761450,
    bgo#770854.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Add eds-Internal_Google_OAuth2_authentication.patch: Internal
  Google OAuth2 authentication fails with expired token
  (bgo#771547).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Stop passing V=1 to make, we do debugging locally.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Internal Google OAuth2 authentication fails with expired token
    (bgo#771547).
  + Fix console runtime warnings from vFolder/vStore code on
    application quit.
  + Fix build with --disable-google-auth.
  + Updated translations.
- Drop eds-Internal_Google_OAuth2_authentication.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + [IMAPx] Avoid crash when untagged response doesn't have a
    token.
  + Bugs fixed: bgo#772095, bgo#772347, bgo#767807, bgo#773248,
    bgo#773363.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + IMAPx:
  - Local flag changes could be missed and left unsaved on the
    server.
  - Notify about new messages early during folder update.
  + Fix possible use-after-free in CamelVeeFolder with
    parent_vee_store.
  + Test for parent_store availability around
    camel_folder_changed().
  + Bugs fixed: bgo#774180, bgo#774103, bgo#774698, bgo#772292,
    bgo#774496, bgo#774841, bgo#775618, bgo#775699.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.6 (boo#1016000):
  + Junk check fails due to empty cache file (bgo#767564).
  + [IMAPx]: Avoid crash when untagged response doesn't have a
    token.
  + Improve handling of the Google OAuth2 tokens in Calendar.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Correct new module detection when installed by file rename.
  + camel-stream-process: Avoid call of g_debug() in the fork
    process.
  + Replace deprecated icalproperty_remove_parameter() with
    icalproperty_remove_parameter_by_kind().
  + Replace deprecated icaltime_from_timet() with
    icaltime_from_timet_with_zone().
  + [IMAPx] Fix a memory leak.
  + Bugs fixed: bgo#776152, bgo#774304, bgo#777085.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Ignore errors when getting message for a body-contains search.
  + Fix a ref/unref imbalance of CamelIMAPXStoreInfo.
  + Fix a memory leak in camel_imapx_server_append_message_sync().
  + Unable to add additional Google calendar.
  + [IMAPx] Avoid unneeded full flags folder update when no changes
    made.
  + Bugs fixed: bgo#777431, bgo#777695, bgo#777781, bgo#778222,
    bgo#778069, bgo#778265.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.7:
  + Bugs fixed: bgo#778775, bgo#778768, bgo#778235, bgo#775699,
    bgo#779156, bgo#779161, bgo#779761, bgo#779886.
  + Updated translations.</changelog>
</package>
<package pkgid="3738f5a8dbadd323a4d00863de86ba9b51cdfd1f6314e49765d38bc8b3ea9544" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="f57795a99cda9d3e8a6c956c46e4d494993db198020d0f23ee24f9ffab8d00da" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="abab99ca557f7458bbcf7452a3d4b86d9df00f2b7ab6750dac36b3ecc1bf6017" name="evolution-ews" arch="src">
  <version epoch="0" ver="3.22.6" rel="4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#764976, bgo#765209, bgo#765398.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan.
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Bugs fixed: bgo#766021, bgo#767030.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Bugs fixed: bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Customized timezones not recognized (bgo#769044).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#763991, bgo#764110, bgo#764977, bgo#764976,
    bgo#765209.
  + Updated translations.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Fix some issues found by Coverity Scan.
  + Bugs fixed: bgo#765398, bgo#766021.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Fix a memory leak when creating a contact.
  + Address some of the clang compiler warnings.
  + Bugs fixed: bgo#767030, bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Always build ESExp structure as a GObject descendant.
  + Add Language headers to po files.
  + Bugs fixed: bgo#764065.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Customized timezones not recognized (bgo#769044).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Do not restrict/remove From address on message send
    (bgo#758374).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Bugs fixed: bgo#771370, bgo#771931.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + Runtime warnings when calling ResolveNames.
  + Bugs fixed: bgo#770936, bgo#738093, bgo#773379.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + Autodiscover can cause deadlock in GCancellable code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Fix few memory leaks.
  + Bugs fixed: bgo#775951, bgo#775649.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Bugs fixed: bgo#777946.</changelog>
  <changelog author="federico@suse.com" date="1516363200">- Update to version 3.22.6:
  + Updated translations.</changelog>
  <changelog author="gboiko@suse.com" date="1520510400">- Fix a libsoup issue with evolution-ews (bsc#1071254).</changelog>
</package>
<package pkgid="b981e5f8ffcb82c55f0291bca1721f869fc0edf226560e7e673b867f2d94079d" name="evolution-ews" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#764976, bgo#765209, bgo#765398.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan.
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Bugs fixed: bgo#766021, bgo#767030.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Bugs fixed: bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Customized timezones not recognized (bgo#769044).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#763991, bgo#764110, bgo#764977, bgo#764976,
    bgo#765209.
  + Updated translations.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Fix some issues found by Coverity Scan.
  + Bugs fixed: bgo#765398, bgo#766021.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Fix a memory leak when creating a contact.
  + Address some of the clang compiler warnings.
  + Bugs fixed: bgo#767030, bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Always build ESExp structure as a GObject descendant.
  + Add Language headers to po files.
  + Bugs fixed: bgo#764065.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Customized timezones not recognized (bgo#769044).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Do not restrict/remove From address on message send
    (bgo#758374).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Bugs fixed: bgo#771370, bgo#771931.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + Runtime warnings when calling ResolveNames.
  + Bugs fixed: bgo#770936, bgo#738093, bgo#773379.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + Autodiscover can cause deadlock in GCancellable code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Fix few memory leaks.
  + Bugs fixed: bgo#775951, bgo#775649.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Bugs fixed: bgo#777946.</changelog>
  <changelog author="federico@suse.com" date="1516363200">- Update to version 3.22.6:
  + Updated translations.</changelog>
  <changelog author="gboiko@suse.com" date="1520510400">- Fix a libsoup issue with evolution-ews (bsc#1071254).</changelog>
</package>
<package pkgid="331fa644f1a2bfeb7967411696e75529d7cffaba9c7ebdc61efd37c878f1f7cb" name="evolution-ews-devel" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#764976, bgo#765209, bgo#765398.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan.
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Bugs fixed: bgo#766021, bgo#767030.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Bugs fixed: bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Customized timezones not recognized (bgo#769044).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#763991, bgo#764110, bgo#764977, bgo#764976,
    bgo#765209.
  + Updated translations.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Fix some issues found by Coverity Scan.
  + Bugs fixed: bgo#765398, bgo#766021.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Fix a memory leak when creating a contact.
  + Address some of the clang compiler warnings.
  + Bugs fixed: bgo#767030, bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Always build ESExp structure as a GObject descendant.
  + Add Language headers to po files.
  + Bugs fixed: bgo#764065.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Customized timezones not recognized (bgo#769044).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Do not restrict/remove From address on message send
    (bgo#758374).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Bugs fixed: bgo#771370, bgo#771931.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + Runtime warnings when calling ResolveNames.
  + Bugs fixed: bgo#770936, bgo#738093, bgo#773379.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + Autodiscover can cause deadlock in GCancellable code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Fix few memory leaks.
  + Bugs fixed: bgo#775951, bgo#775649.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Bugs fixed: bgo#777946.</changelog>
  <changelog author="federico@suse.com" date="1516363200">- Update to version 3.22.6:
  + Updated translations.</changelog>
  <changelog author="gboiko@suse.com" date="1520510400">- Fix a libsoup issue with evolution-ews (bsc#1071254).</changelog>
</package>
<package pkgid="3474fac63cc44253a1ba346b4243d43608130afcaab1b5d33ad3ff167b79a37d" name="evolution-ews-lang" arch="noarch">
  <version epoch="0" ver="3.22.6" rel="4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#764976, bgo#765209, bgo#765398.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan.
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Bugs fixed: bgo#766021, bgo#767030.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Bugs fixed: bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + Customized timezones not recognized (bgo#769044).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657601">- Update to version 3.21.1:
  + Ask for password after NTLM/SSO authentication failure.
  + Bugs fixed: bgo#763991, bgo#764110, bgo#764977, bgo#764976,
    bgo#765209.
  + Updated translations.
- Drop evolution-ews-ntlm-auth-test-failure.patch: Fixed upstream.
- Bump base version following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657602">- Update to version 3.21.2:
  + Fix some issues found by Coverity Scan.
  + Bugs fixed: bgo#765398, bgo#766021.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657603">- Update to version 3.21.3:
  + Initialize connection variable to NULL in
    camel_ews_folder_get_message().
  + Fix a memory leak when creating a contact.
  + Address some of the clang compiler warnings.
  + Bugs fixed: bgo#767030, bgo#722193, bgo#767335, bgo#634294.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657604">- Update to version 3.21.4:
  + Always build ESExp structure as a GObject descendant.
  + Add Language headers to po files.
  + Bugs fixed: bgo#764065.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471262400">- Update to version 3.21.90:
  + Customized timezones not recognized (bgo#769044).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 3.21.91:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.92:
  + Do not restrict/remove From address on message send
    (bgo#758374).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.22.1:
  + Bugs fixed: bgo#771370, bgo#771931.</changelog>
  <changelog author="zaitor@opensuse.org" date="1478520000">- Update to version 3.22.2:
  + Runtime warnings when calling ResolveNames.
  + Bugs fixed: bgo#770936, bgo#738093, bgo#773379.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481544000">- Update to version 3.22.3:
  + Autodiscover can cause deadlock in GCancellable code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Update to version 3.22.4:
  + Fix few memory leaks.
  + Bugs fixed: bgo#775951, bgo#775649.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Bugs fixed: bgo#777946.</changelog>
  <changelog author="federico@suse.com" date="1516363200">- Update to version 3.22.6:
  + Updated translations.</changelog>
  <changelog author="gboiko@suse.com" date="1520510400">- Fix a libsoup issue with evolution-ews (bsc#1071254).</changelog>
</package>
<package pkgid="af0c4c76683225f16683f58e5ea9e8b70645a8eb84d4ac4532de2b25da78629b" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="261dbad550abbdc53a4a5ddc73e0f1ae0ba7e7247c5faba5f76f864997a2c611" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="cab249535ae5576bd16c2f3dd981bcabecf7a5df1c41bac28bbcae46264d27ac" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="5f7bb22a504e256d1de37fd57c6ec589e0c872079b2b257ab783adc6ac80d942" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="66e15d5e8971ac7f5500255ee8651cdf90df194a866047e0cbb35d26f9adfa3d" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="f7e3c64ba85e4fd675aab7c872040725c8642c50d2b3ce6f830e3b23645c8d82" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="a315238bfd6903cc1cdea69929d14da8e24edf35f919bb359cf84718ba735f96" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="1f74ab0832adff5d7af32545374469c163e73f8e89495d5a73f53f8d057d36a1" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="c3655cb27a70c0f6a4e3100c6efef368a249585866391eb2577396e7b43f597b" name="exempi" arch="src">
  <version epoch="0" ver="2.2.2" rel="6.3.1"/>
  <changelog author="hfiguiere@suse.de" date="1205496000">- New upstream version 1.99.9
  + Typo fix in API
  + Buffer overflow fix in GIF handler (bgo #484105)</changelog>
  <changelog author="vuntz@suse.de" date="1207137600">- New upstream version 2.0.0:
  + Bug fdo#14614, Bug fdo#15263: endian detection in configure.
  + Bug fdo#14615: missing includes for Solaris.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mauro@suse.de" date="1218024000">-Update to 2.0.1
  + bgo#14612: no stdbool.h for Sun compilers.
  + bgo#14613: check for iconv() const-ness.
  + Make the error checking more robust.
  + Make error code thread-safe (ie local to the thread).</changelog>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- CVE-2018-7728.patch: Fix a heap-based buffer overflow, which allowed denial
  of service via crafted TIFF image in third-party/zuid/interfaces/MD5.cpp:MD5Update()
  (CVE-2018-7728 bsc#1085297)
- CVE-2018-7730.patch: Fix a heap-based buffer overflow in
  XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp:PSD_MetaHandler::CacheFileData().
  (CVE-2018-7730.patch bsc#1085295)</changelog>
</package>
<package pkgid="0fb0d2ed48252ad969435452ab549c6c2e0767c0a34b9c186411cf4df40be5fe" name="exempi" arch="src">
  <version epoch="0" ver="2.2.2" rel="6.8.1"/>
  <changelog author="mauro@suse.de" date="1218024000">-Update to 2.0.1
  + bgo#14612: no stdbool.h for Sun compilers.
  + bgo#14613: check for iconv() const-ness.
  + Make the error checking more robust.
  + Make error code thread-safe (ie local to the thread).</changelog>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- CVE-2018-7728.patch: Fix a heap-based buffer overflow, which allowed denial
  of service via crafted TIFF image in third-party/zuid/interfaces/MD5.cpp:MD5Update()
  (CVE-2018-7728 bsc#1085297)
- CVE-2018-7730.patch: Fix a heap-based buffer overflow in
  XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp:PSD_MetaHandler::CacheFileData().
  (CVE-2018-7730.patch bsc#1085295)</changelog>
  <changelog author="qzheng@suse.com" date="1536667200">- CVE-2017-18236.patch: Fix a function which allows remote
  attackers to cause adenial of service (CVE-2017-18236,
  bsc#1085589).</changelog>
  <changelog author="qzheng@suse.com" date="1536753600">- CVE-2017-18238.patch: Fix a function which allows remote
  attackers to cause adenial of service (CVE-2017-18238,
  bsc#1085583).</changelog>
  <changelog author="qzheng@suse.com" date="1536753601">- CVE-2017-18233.patch: Fix a integer overflow which allows remote
  attackers to cause a denial of service (CVE-2017-18233,
  bsc#1085584).</changelog>
</package>
<package pkgid="08bca215153502ff52a9132f3c653371051cc9df1c9a5ac55b3ab249344104c4" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="6.3.1"/>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- CVE-2018-7728.patch: Fix a heap-based buffer overflow, which allowed denial
  of service via crafted TIFF image in third-party/zuid/interfaces/MD5.cpp:MD5Update()
  (CVE-2018-7728 bsc#1085297)
- CVE-2018-7730.patch: Fix a heap-based buffer overflow in
  XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp:PSD_MetaHandler::CacheFileData().
  (CVE-2018-7730.patch bsc#1085295)</changelog>
</package>
<package pkgid="d40c6f72b6e0ea95340eb33de6fa0c0ee9824a854b84189fc6eaf479dbf49b5e" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="6.8.1"/>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- CVE-2018-7728.patch: Fix a heap-based buffer overflow, which allowed denial
  of service via crafted TIFF image in third-party/zuid/interfaces/MD5.cpp:MD5Update()
  (CVE-2018-7728 bsc#1085297)
- CVE-2018-7730.patch: Fix a heap-based buffer overflow in
  XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp:PSD_MetaHandler::CacheFileData().
  (CVE-2018-7730.patch bsc#1085295)</changelog>
  <changelog author="qzheng@suse.com" date="1536667200">- CVE-2017-18236.patch: Fix a function which allows remote
  attackers to cause adenial of service (CVE-2017-18236,
  bsc#1085589).</changelog>
  <changelog author="qzheng@suse.com" date="1536753600">- CVE-2017-18238.patch: Fix a function which allows remote
  attackers to cause adenial of service (CVE-2017-18238,
  bsc#1085583).</changelog>
  <changelog author="qzheng@suse.com" date="1536753601">- CVE-2017-18233.patch: Fix a integer overflow which allows remote
  attackers to cause a denial of service (CVE-2017-18233,
  bsc#1085584).</changelog>
</package>
<package pkgid="91802474a7daef6e5c724c87fc16ec70473da4d1ea80cbc574fb10836755c4bc" name="exercism" arch="x86_64">
  <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>
  <changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
  <changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
  <changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>
</package>
<package pkgid="e2a30e23373ffad3da2a52d9401f6cfe25742084c710152c528551cefeed11fa" name="exim" arch="src">
  <version epoch="0" ver="4.86.2" rel="14.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="a5e79e00eb729abdd16fa5e6c0b61c3e0f5b07a66a0dfe2bb0375ca6940e9cdb" name="exim" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="14.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="f88aa5ddc3c73e9522df154c7980f18d503abbbd5529fc922d75c5cfe1ac383f" name="exim" arch="src">
  <version epoch="0" ver="4.86.2" rel="17.1"/>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
</package>
<package pkgid="476811fb26a580c2bccc742ee0e5ef32dec1372917c9f105ca7882d066d7f36d" name="exim" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="17.1"/>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
</package>
<package pkgid="85e9c032485de233c73cb3646010f71dcad860c863c518dd880970211a8a04bd" name="exim" arch="src">
  <version epoch="0" ver="4.86.2" rel="20.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kbabioch@suse.com" date="1518523200">- Added CVE-2018-6789.patch: Fixed a buffer overflow in the base64decode
  function, which could be used to execute code remotely. (bsc#1079832
  CVE-2018-6789)</changelog>
</package>
<package pkgid="657e80cb2d5d048212cb83d499eb185747b036f3112ccb68c9c9b7c86b4adbb9" name="exim" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="20.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kbabioch@suse.com" date="1518523200">- Added CVE-2018-6789.patch: Fixed a buffer overflow in the base64decode
  function, which could be used to execute code remotely. (bsc#1079832
  CVE-2018-6789)</changelog>
</package>
<package pkgid="a6e5ecbb7f06815a60fc0f3515e63e2cba388bb28d1eb09078f5b010a03d288c" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="14.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="ad56c7ad560708aeef05a68ce45fb2a3bb17ee142e788abc739e18c7abdac0c8" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="17.1"/>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
</package>
<package pkgid="bc67c023bfc5c6a2b8774e41db6174d6ebe523566677e37d59d07826c80ac16d" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="20.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kbabioch@suse.com" date="1518523200">- Added CVE-2018-6789.patch: Fixed a buffer overflow in the base64decode
  function, which could be used to execute code remotely. (bsc#1079832
  CVE-2018-6789)</changelog>
</package>
<package pkgid="b9dc5db481b0eacf4d518a75ff9117efe9e5ceec86bcc906850a4230229dc95b" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="14.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="e9eb74afb08c762bd09fa4eeb6638570cc7dd66ffdb3d8a29a068c004ca9659d" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="17.1"/>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
</package>
<package pkgid="2094391651eb23ea21c3faed2ed3c0710dfc21e173aad8598a91de33c207ed3f" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="20.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kbabioch@suse.com" date="1518523200">- Added CVE-2018-6789.patch: Fixed a buffer overflow in the base64decode
  function, which could be used to execute code remotely. (bsc#1079832
  CVE-2018-6789)</changelog>
</package>
<package pkgid="166053bb7a21a729acb4cdedf29a24f058bb7d1ec877f95b9ac7391545211990" name="exiv2" arch="src">
  <version epoch="0" ver="0.25" rel="10.1"/>
  <changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
  <changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
  <changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
  <changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
  <changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>
</package>
<package pkgid="e0cd38c4ce83a4669fc07b819fcc138f90404d9c09dc7f80a82ec0ae091c4906" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.25" rel="10.1"/>
  <changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
  <changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
  <changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
  <changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
  <changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>
</package>
<package pkgid="2c673dd3c69f8f928d19af8538e742c7e799c6ebb9f354c75888274293d9e473" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.25" rel="10.1"/>
  <changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
  <changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
  <changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
  <changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
  <changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>
</package>
<package pkgid="fc559a51a50c334e0048941a23171c259ecb6bdbcbe311e338da5028db799ce7" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
  <changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
  <changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
  <changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
  <changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
  <changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>
</package>
<package pkgid="864be36f3524ad72344c7e8838dbfa00dc68413f98631c63bba5c99d046b4d0d" name="expat" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
  <changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
  <changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
  <changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
  <changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
  <changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>
</package>
<package pkgid="c17d7c45098f890598bd7c2100fa4b64c28c18e77fd3e04acf106a2b8c65d6b2" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.2" rel="26.1"/>
  <changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
  <changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
</package>
<package pkgid="b350852a592724a2d7b4cff5d9c8dbe25f3aae93a3e13c2497b26a6e947a3a35" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.2" rel="26.1"/>
  <changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
  <changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
</package>
<package pkgid="e22a9796ecad21bdf4a3fce2500863949df31bd09d5814421c73b277054c5b8b" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.3" rel="29.1"/>
  <changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
</package>
<package pkgid="7ce4abb7463ad557c77d0b7bf37d7d713d5f00927e0103d77c109afe3a9e8475" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.3" rel="29.1"/>
  <changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
</package>
<package pkgid="f9d3a08dec095f684af1014d3d531b539e8d3dafcb8589170b80e068471a67fe" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.4" rel="32.1"/>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
</package>
<package pkgid="1f0cf014661fbaa5600f6330c943d312910ffc644d8b2036688354983dfe11aa" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.4" rel="32.1"/>
  <changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
  <changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
</package>
<package pkgid="664b0d91d0cb44bcfe676fc48f70125bd782f36ef5e225f5f5601085cce832c6" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.5" rel="35.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="9dea5114367fa323820a0042b48fe1f204845410bd6473b4545fa92247d89a37" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.5" rel="35.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="ac9f34c65608a49d9b7b9a47ffc726ad84a9b8bd89833ad36481fa14dfe68d53" name="feh" arch="src">
  <version epoch="0" ver="2.27.1" rel="8.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="49eb165a91107a951d1c95cb847306ed27d44af7d7b3a8bcf10a8683e580dab5" name="feh" arch="x86_64">
  <version epoch="0" ver="2.27.1" rel="8.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="598ae7644b4825759d8bebfd74b244e0ffa9803fcfb667a92b4b07f43ea2b3b8" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1413201600">- Backport security and bug fixes (bnc#900879) (CVE-2014-0104)
  - fence_rhevm: Use https:// prefix also with --ssl-secure and --ssl-insecure
  - fence_apc: --shell-timeout was used instead of --power-timeout
  - fence_rsb: Fix 62d90e3a0827fcdc5be632bdf4103d3c08b39622
  - fence_wti: Fix invalid "eol"
  - fence_pve: Add support for --ssl-secure and --ssl-insecure
- Added patches:
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1413460800">- Update to 4.0.12:
  * new up-to-date wiki page with STDIN / command line arguments
    http://fedorahosted.org/cluster/wiki/FenceArguments
  * Fence agent fence_pve now supports --ssl-secure and --ssl-insecure
  (check certificate or not)
  * Fence agent for RHEV-M supports cookie based authentication
  (--use-cookies)
  * improvements in build system
  * Fix issue with regular expression in fence_rsb
  * Fix uninitialized EOL in fence_wti
- Remove backported patches:
  - 0001-fence_brocade-Add-support-for-list-action.patch
  - 0002-fencing-Monitor-is-not-working-correctly-without-lis.patch
  - 0003-fence_apc_snmp-Add-support-for-firmware-6.x.patch
  - 0004-fence_zvm-Add-support-for-on-and-status.patch
  - 0005-fence_zvm-Add-current-XML-metadata-to-test-suite.patch
  - 0006-build-Fix-automake-files-so-make-distcheck-works.patch
  - 0007-fencing-Add-new-options-ssl-secure-and-ssl-insecure.patch
  - 0008-tests-Update-XML-metadata-of-fence-agents.patch
  - 0009-fence_cisco_ucs-fence_vmware_soap-Logout-has-to-be-p.patch
  - 0010-fence_zvm-Fixes-for-better-upstream-inclusion.patch
  - 0011-fence_zvm-Add-support-for-on-improve-documentation.patch
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
</package>
<package pkgid="8fe06206ed6cb1263c36ae651d4100dc14bd0af6f33c688618b7dfcf56213fc1" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1413201600">- Backport security and bug fixes (bnc#900879) (CVE-2014-0104)
  - fence_rhevm: Use https:// prefix also with --ssl-secure and --ssl-insecure
  - fence_apc: --shell-timeout was used instead of --power-timeout
  - fence_rsb: Fix 62d90e3a0827fcdc5be632bdf4103d3c08b39622
  - fence_wti: Fix invalid "eol"
  - fence_pve: Add support for --ssl-secure and --ssl-insecure
- Added patches:
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1413460800">- Update to 4.0.12:
  * new up-to-date wiki page with STDIN / command line arguments
    http://fedorahosted.org/cluster/wiki/FenceArguments
  * Fence agent fence_pve now supports --ssl-secure and --ssl-insecure
  (check certificate or not)
  * Fence agent for RHEV-M supports cookie based authentication
  (--use-cookies)
  * improvements in build system
  * Fix issue with regular expression in fence_rsb
  * Fix uninitialized EOL in fence_wti
- Remove backported patches:
  - 0001-fence_brocade-Add-support-for-list-action.patch
  - 0002-fencing-Monitor-is-not-working-correctly-without-lis.patch
  - 0003-fence_apc_snmp-Add-support-for-firmware-6.x.patch
  - 0004-fence_zvm-Add-support-for-on-and-status.patch
  - 0005-fence_zvm-Add-current-XML-metadata-to-test-suite.patch
  - 0006-build-Fix-automake-files-so-make-distcheck-works.patch
  - 0007-fencing-Add-new-options-ssl-secure-and-ssl-insecure.patch
  - 0008-tests-Update-XML-metadata-of-fence-agents.patch
  - 0009-fence_cisco_ucs-fence_vmware_soap-Logout-has-to-be-p.patch
  - 0010-fence_zvm-Fixes-for-better-upstream-inclusion.patch
  - 0011-fence_zvm-Add-support-for-on-improve-documentation.patch
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
</package>
<package pkgid="0be3bd3e4c1b306b87af1916a49f56b2b8910a82638b87c6cbb387fe7b520120" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1528891200">- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260)
- Drop compute patches now included in new patch
  * Add 0001-fence_compute-Add-support-for-keystone-v3-authentica.patch
  * Add 0002-fence_evacuate-Add-evacuate-agent-bsc-1097260.patch
  * Remove 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Remove 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Remove 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Remove 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="ygao@suse.com" date="1532088000">- fence_compute fixes (pull#142)
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
- fence_compute: fix to avoid breaking nova (pull#111)
  * 0008-fence_compute-fix-to-avoid-breaking-nova.patch
- fence_evacuate: Add evacuate agent (bsc#1097260) (pull#142)
  * 0009-Compute-Handle-differences-in-Nova-API-argument-pass.patch
  * 0010-Compute-Split-out-evacation-functionality.patch
  * 0011-evacuate-Handle-changes-to-the-nova-API.patch
  * 0012-compute-Fix-unfencing-and-ensure-fencing-occurs-in-p.patch
  * 0013-compute-update-metadata.patch
  * 0014-evacuate-add-expected-metadata.patch
- fencing: Add consistency between command-line and STDIN
  * 0015-fencing-Add-consistency-between-command-line-and-STD.patch
- fix for ignored options (pull#146)
  * 0016-fix-for-ignored-options.patch
  * 0017-Maintain-ABI-compatibility-for-external-agents.patch
- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852) (pull#149)
  * 0018-fencing-include-timestamps-when-logging-to-STDERR-an.patch
- fencing: fix help for --quiet (pull#150)
  * 0019-fencing-fix-help-for-quiet.patch
- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260) (bsc#1096412)
  * 0020-compute-Add-support-for-keystone-v3-authentication.patch
- fence_compute/evacuate: update-metadata (pull#162)
  * 0021-fence_compute-evacuate-update-metadata.patch
- Log the proper nova_versions variable (pull#165)
  * 0022-Log-the-proper-nova_versions-variable.patch
- move fence_evacuate into its own subdirectory (pull#167)
  * 0023-move-fence_evacuate-into-its-own-subdirectory.patch
- fence_compute/fence_evacuate: revert to old parameters (pull#191)
  * 0024-fence_compute-fence_evacuate-revert-to-old-parameter.patch
- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Rename 0010-Make-pywsman-dependency-optional.patch to 0100-Make-pywsman-dependency-optional.patch</changelog>
</package>
<package pkgid="37298a853c41c2d1ae3c06f3a48f5f7cc073ed358ed8eccab67ec360537b6e44" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1528891200">- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260)
- Drop compute patches now included in new patch
  * Add 0001-fence_compute-Add-support-for-keystone-v3-authentica.patch
  * Add 0002-fence_evacuate-Add-evacuate-agent-bsc-1097260.patch
  * Remove 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Remove 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Remove 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Remove 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="ygao@suse.com" date="1532088000">- fence_compute fixes (pull#142)
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
- fence_compute: fix to avoid breaking nova (pull#111)
  * 0008-fence_compute-fix-to-avoid-breaking-nova.patch
- fence_evacuate: Add evacuate agent (bsc#1097260) (pull#142)
  * 0009-Compute-Handle-differences-in-Nova-API-argument-pass.patch
  * 0010-Compute-Split-out-evacation-functionality.patch
  * 0011-evacuate-Handle-changes-to-the-nova-API.patch
  * 0012-compute-Fix-unfencing-and-ensure-fencing-occurs-in-p.patch
  * 0013-compute-update-metadata.patch
  * 0014-evacuate-add-expected-metadata.patch
- fencing: Add consistency between command-line and STDIN
  * 0015-fencing-Add-consistency-between-command-line-and-STD.patch
- fix for ignored options (pull#146)
  * 0016-fix-for-ignored-options.patch
  * 0017-Maintain-ABI-compatibility-for-external-agents.patch
- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852) (pull#149)
  * 0018-fencing-include-timestamps-when-logging-to-STDERR-an.patch
- fencing: fix help for --quiet (pull#150)
  * 0019-fencing-fix-help-for-quiet.patch
- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260) (bsc#1096412)
  * 0020-compute-Add-support-for-keystone-v3-authentication.patch
- fence_compute/evacuate: update-metadata (pull#162)
  * 0021-fence_compute-evacuate-update-metadata.patch
- Log the proper nova_versions variable (pull#165)
  * 0022-Log-the-proper-nova_versions-variable.patch
- move fence_evacuate into its own subdirectory (pull#167)
  * 0023-move-fence_evacuate-into-its-own-subdirectory.patch
- fence_compute/fence_evacuate: revert to old parameters (pull#191)
  * 0024-fence_compute-fence_evacuate-revert-to-old-parameter.patch
- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Rename 0010-Make-pywsman-dependency-optional.patch to 0100-Make-pywsman-dependency-optional.patch</changelog>
</package>
<package pkgid="4afc6376cd1682b8651bb5cffa00f47b526224b6e56ac2c0fd10974d1d2172b4" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1413201600">- Backport security and bug fixes (bnc#900879) (CVE-2014-0104)
  - fence_rhevm: Use https:// prefix also with --ssl-secure and --ssl-insecure
  - fence_apc: --shell-timeout was used instead of --power-timeout
  - fence_rsb: Fix 62d90e3a0827fcdc5be632bdf4103d3c08b39622
  - fence_wti: Fix invalid "eol"
  - fence_pve: Add support for --ssl-secure and --ssl-insecure
- Added patches:
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1413460800">- Update to 4.0.12:
  * new up-to-date wiki page with STDIN / command line arguments
    http://fedorahosted.org/cluster/wiki/FenceArguments
  * Fence agent fence_pve now supports --ssl-secure and --ssl-insecure
  (check certificate or not)
  * Fence agent for RHEV-M supports cookie based authentication
  (--use-cookies)
  * improvements in build system
  * Fix issue with regular expression in fence_rsb
  * Fix uninitialized EOL in fence_wti
- Remove backported patches:
  - 0001-fence_brocade-Add-support-for-list-action.patch
  - 0002-fencing-Monitor-is-not-working-correctly-without-lis.patch
  - 0003-fence_apc_snmp-Add-support-for-firmware-6.x.patch
  - 0004-fence_zvm-Add-support-for-on-and-status.patch
  - 0005-fence_zvm-Add-current-XML-metadata-to-test-suite.patch
  - 0006-build-Fix-automake-files-so-make-distcheck-works.patch
  - 0007-fencing-Add-new-options-ssl-secure-and-ssl-insecure.patch
  - 0008-tests-Update-XML-metadata-of-fence-agents.patch
  - 0009-fence_cisco_ucs-fence_vmware_soap-Logout-has-to-be-p.patch
  - 0010-fence_zvm-Fixes-for-better-upstream-inclusion.patch
  - 0011-fence_zvm-Add-support-for-on-improve-documentation.patch
  - 0012-fence_rhevm-Use-https-prefix-also-with-ssl-secure-an.patch
  - 0013-fence_apc-shell-timeout-was-used-instead-of-power-ti.patch
  - 0014-fence_rsb-Fix-62d90e3a0827fcdc5be632bdf4103d3c08b396.patch
  - 0015-fence_wti-Fix-invalid-eol.patch
  - 0016-fence_pve-Add-support-for-ssl-secure-and-ssl-insecur.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
</package>
<package pkgid="02464127f918208b35cd072baf975bdb5450fb243807624a7ef5db1df5fd97ce" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1485179354.eb43835" rel="2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1418644800">- Update to 4.0.13:
  * new fence agent based on mpathpersist that offers better handling of
    multipath devices
  * improve support of fence_ilo_ssh on older firmwares
  * required packages are also required by autoconf during build time
  * fence_zvm now supports action 'monitor' (thanks to Neale Ferguson)
  * introduce --gnutlscli-path --sudo-path --ssh-path and --telnet-path;
    they are no longer hard-coded
  * order of XML parameters or options in --help is more stable now
  * fence_cisco_ucs did not set protocol prefix correctly with
  - -ssl-(in)secure
  * logging to syslog now works correctly also with \x00 as input
- Add patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1420632000">- Update to 4.0.14:
  * fence_zvmip for IBM z/VM is rewritten to Python
  * new fence agent for Emerson devices
  * fix invalid default ports for fence_eps and fence_amt
  * properly escape XML in other fields of metadata
  * a lot of refactoring and cleaning</changelog>
  <changelog author="kgronlund@suse.com" date="1423483200">- Update to 4.0.15:
  * Tripp Lite PDUs are now supported by fence_tripplite_snmp (symlink to
    fence_apc_snmp)
  * Default values in metadata sometimes differ to those actually used,
    this is fixed now
  * improvements in testing
- Remove patch: 0001-Avoid-problem-with-broken-make-variable-expansion.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1425902400">- Update to 4.0.16:
  * fence_kdump has implemented 'monitor' action that check if local node
    is capable of working with kdump
  * path to smnp(walk|get|set) can be set at runtime
  * new operation 'validate-all' for majority of agents that checks if
    entered parameters are sufficient without connecting to fence
    device. Be aware that some checks can be done only after we receive
    information from fence device, so these are not tested.
  * new operation 'list-status' that present CSV output (plug_number,
    plug_alias, plug_status) where status is ON/OFF/UNKNOWN</changelog>
  <changelog author="kgronlund@suse.com" date="1428408000">- Update to 4.0.17:
  * HP iLO2 with firmware 2.27 has broken implementation of TLS negotation
    and SSLv3 is disabled by default (POODLE attack). Options --tls1.0
    (tls1.0 on stdin) was added to force using TLS v1.0. This options allows
    users to use that firmware with fence agents.
  * Fence agent for AMT password was not put correctly into environment.
  * Fix login process on bladecenter where 'last login' can occur in
    message of the day what mislead fence agent.
  * Cipher for fence_ipmilan was previously set to 0. It was found out
    that this not good default value, we will use default value (3) of
    ipmitool instead.</changelog>
  <changelog author="kgronlund@suse.com" date="1433937600">- Update to 4.0.18:
  * fence_scsi has now implemented action 'monitor'
    (thanks to John Ruemker)
  * fence_scsi is now able to unfence devices added later
    (thanks to John Ruemker)
  * simplification of code thanks to auto-generation of help texts
  * when 'name' is entered on STDIN instead of 'name=value', warning
    is generated</changelog>
  <changelog author="kgronlund@suse.com" date="1435752000">- Update to 4.0.19:
  * New fence agent for Nova compute machines (thanks to Andrew
    Beekhof and Fabio)
  * Fixed issues with whitespaces in few fence agents (thanks to
    Christoph Berg)
  * User of RHEV-M can have less privileges with updated
    fence_rhevm (thanks to Rik Theys)
  * Verbose output now captures also text before command prompt is
    found
  * Support for HP Integrity Superdome X was added to fence_hpblade
    (thanks to Han Pilmeyer)
  * Fence agent for IBM z/VM now uses API that require less resource
    of device</changelog>
  <changelog author="kgronlund@suse.com" date="1439294400">- Update to 4.0.20:
  * In some cases password string was expected twice what lead to 'Unable
    to login'
  * New fence agent fence_rcd_serial for DYI fence device (look at
    https://smcleod.net/rcd-stonith/ ; thanks to Sam McLeod)
  * Fence_pve should default to SSL (thanks to Thomas Lamprecht)
  * Fixes nroff error for fence_virsh (thanks to Adrian Vondendriesch)
  * Improve monitoring for fence_scsi
  * Fixes for devices which do not have port and obtaining status is not
    possible
  * fence_ipmilan no longer print password to debug info
  * Possibility to do force-ON even if device is already ON
  * Possibility to declare that device does not have ON or OFF (usually
    only reboot works)</changelog>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1526472000">- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Add 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1528891200">- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260)
- Drop compute patches now included in new patch
  * Add 0001-fence_compute-Add-support-for-keystone-v3-authentica.patch
  * Add 0002-fence_evacuate-Add-evacuate-agent-bsc-1097260.patch
  * Remove 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Remove 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Remove 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Remove 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="ygao@suse.com" date="1532088000">- fence_compute fixes (pull#142)
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
- fence_compute: fix to avoid breaking nova (pull#111)
  * 0008-fence_compute-fix-to-avoid-breaking-nova.patch
- fence_evacuate: Add evacuate agent (bsc#1097260) (pull#142)
  * 0009-Compute-Handle-differences-in-Nova-API-argument-pass.patch
  * 0010-Compute-Split-out-evacation-functionality.patch
  * 0011-evacuate-Handle-changes-to-the-nova-API.patch
  * 0012-compute-Fix-unfencing-and-ensure-fencing-occurs-in-p.patch
  * 0013-compute-update-metadata.patch
  * 0014-evacuate-add-expected-metadata.patch
- fencing: Add consistency between command-line and STDIN
  * 0015-fencing-Add-consistency-between-command-line-and-STD.patch
- fix for ignored options (pull#146)
  * 0016-fix-for-ignored-options.patch
  * 0017-Maintain-ABI-compatibility-for-external-agents.patch
- fencing: include timestamps when logging to STDERR and debug file (bsc#1049852) (pull#149)
  * 0018-fencing-include-timestamps-when-logging-to-STDERR-an.patch
- fencing: fix help for --quiet (pull#150)
  * 0019-fencing-fix-help-for-quiet.patch
- fence_compute: Add support for keystone v3 authentication (bsc#1074000) (bsc#1097260) (bsc#1096412)
  * 0020-compute-Add-support-for-keystone-v3-authentication.patch
- fence_compute/evacuate: update-metadata (pull#162)
  * 0021-fence_compute-evacuate-update-metadata.patch
- Log the proper nova_versions variable (pull#165)
  * 0022-Log-the-proper-nova_versions-variable.patch
- move fence_evacuate into its own subdirectory (pull#167)
  * 0023-move-fence_evacuate-into-its-own-subdirectory.patch
- fence_compute/fence_evacuate: revert to old parameters (pull#191)
  * 0024-fence_compute-fence_evacuate-revert-to-old-parameter.patch
- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Rename 0010-Make-pywsman-dependency-optional.patch to 0100-Make-pywsman-dependency-optional.patch</changelog>
</package>
<package pkgid="03730fbe5d7810899464dc173558cad1cd9961824f1df149e2f421157ab0013b" name="fetchmail" arch="src">
  <version epoch="0" ver="6.3.26" rel="21.3.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1519992000">- Allow --syslog option in daemon mode (bsc#1033081).
  * By default, the status messages are redirected to
    /var/log/fetchmail. The syslog option or no-logging are also
    available.</changelog>
</package>
<package pkgid="e35fb97c37e72ec97444ea739dfbc7b78e2790a66d05b02004287cb5a9fe02d0" name="fetchmail" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="21.3.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1519992000">- Allow --syslog option in daemon mode (bsc#1033081).
  * By default, the status messages are redirected to
    /var/log/fetchmail. The syslog option or no-logging are also
    available.</changelog>
</package>
<package pkgid="c7ed1d432410e56e30ca0d352b5bbd77fa3000072cebadf25ef85ca62f4e1042" name="fetchmailconf" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="21.3.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1519992000">- Allow --syslog option in daemon mode (bsc#1033081).
  * By default, the status messages are redirected to
    /var/log/fetchmail. The syslog option or no-logging are also
    available.</changelog>
</package>
<package pkgid="82a4f4b36085cc1b57cb8508a50383de85ffd217184c45e2aff7b619fa2ed66e" name="fetchmsttfonts" arch="noarch">
  <version epoch="0" ver="11.4" rel="23.1"/>
  <changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
  <changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
  <changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
  <changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
  <changelog author="meissner@suse.de" date="1312804800">- Add COPYING file bnc#656777</changelog>
  <changelog author="jdelvare@suse.de" date="1319025600">- Drop references to legacy package agfa-fonts.
- Properly reference all files and directories so that they are
  deleted on package removal.</changelog>
  <changelog author="meissner@suse.de" date="1323432000">- post (and display) EULA.html to text as post-install message.</changelog>
  <changelog author="meissner@suse.com" date="1348056000">- /etc/sysconfig/proxy could be missing bnc#777151</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416052800">- fix bashisms in fetchmsttfonts.sh script</changelog>
  <changelog author="meissner@suse.com" date="1431345600">- remove voxel from server list (gone) bsc#930338</changelog>
  <changelog author="astieger@suse.com" date="1449748800">- verify md5 and sha1 checksums (sourced from upstream),
  SHA-512 checksums (generated locally) boo#958651
- no longer download the Andale file twice
- update license text for new FSF address</changelog>
  <changelog author="9@cirno.systems" date="1502452800">- Remove unnecessary BuildRequires
- Refactor download script (bsc#1057119)
  * Use sf.net automatic mirror selection
  * Remove proxy settings code as it is already applied as part of
    openSUSE?s default /etc/profile.sh
  * Fix some issues pointed out by shellcheck</changelog>
</package>
<package pkgid="d4a8dd92e630c98c2c470ffdc867b03e239c66c313acb0ae819e41aacd20acdd" name="fetchmsttfonts" arch="src">
  <version epoch="0" ver="11.4" rel="23.1"/>
  <changelog author="meissner@suse.de" date="1214308800">- initial package
  - included fetchmsttfonts.sh script from 10.3</changelog>
  <changelog author="dmueller@suse.de" date="1227873600">- update for 11.1
  * add eula to package</changelog>
  <changelog author="meissner@suse.de" date="1227873601">- reviewed and adjusted server list. Some servers no longer
  carried the fonts.</changelog>
  <changelog author="coolo@suse.de" date="1228046400">- according to my test case, it works if there is no provides/obsoletes
  to the old name</changelog>
  <changelog author="ro@suse.de" date="1228132800">- insert newline after macro to help macro expansion ...</changelog>
  <changelog author="meissner@suse.de" date="1228478400">- require coreutils (for /usr/bin/id) and fonts-config
  for minimal builds. bnc#456795</changelog>
  <changelog author="meissner@suse.de" date="1229515200">- exit 0 when we are running non-chrooted (oS 11.1 bug in some
  installation methods) bnc#456795</changelog>
  <changelog author="meissner@suse.de" date="1233144000">- %ghost the font files so they get removed on -e
- run font-config on %postun (for removal), buildrequire it and
  freetype2 for it.</changelog>
  <changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
  <changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
  <changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
  <changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
  <changelog author="meissner@suse.de" date="1312804800">- Add COPYING file bnc#656777</changelog>
  <changelog author="jdelvare@suse.de" date="1319025600">- Drop references to legacy package agfa-fonts.
- Properly reference all files and directories so that they are
  deleted on package removal.</changelog>
  <changelog author="meissner@suse.de" date="1323432000">- post (and display) EULA.html to text as post-install message.</changelog>
  <changelog author="meissner@suse.com" date="1348056000">- /etc/sysconfig/proxy could be missing bnc#777151</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416052800">- fix bashisms in fetchmsttfonts.sh script</changelog>
  <changelog author="meissner@suse.com" date="1431345600">- remove voxel from server list (gone) bsc#930338</changelog>
  <changelog author="astieger@suse.com" date="1449748800">- verify md5 and sha1 checksums (sourced from upstream),
  SHA-512 checksums (generated locally) boo#958651
- no longer download the Andale file twice
- update license text for new FSF address</changelog>
  <changelog author="9@cirno.systems" date="1502452800">- Remove unnecessary BuildRequires
- Refactor download script (bsc#1057119)
  * Use sf.net automatic mirror selection
  * Remove proxy settings code as it is already applied as part of
    openSUSE?s default /etc/profile.sh
  * Fix some issues pointed out by shellcheck</changelog>
</package>
<package pkgid="9f3f3afc289aec23a1f3306f8e76a93f09b8470918593ca890c9cc35eb9c7043" name="ffmpeg-2" arch="src">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="41a40d37ca795a9c56f7e2ffd9ceb385b8512b6291277e67d371c46c6bb43177" name="ffmpeg-2" arch="src">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="8b2012a355dc5c38ee732fb73d78bbae8fcf078eef80ec9149e62d5b347e571f" name="ffmpeg-2-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="95779224c8f57c23cdcdab597991e382b7d55e0d18a047b86f921464a00fee35" name="ffmpeg-2-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0333674a6aef35e0c1fc2042c05f97d9f5e78f384845bae46316d8100e56e0ad" name="ffmpeg-2-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="14e5212fb51737a09ff9bfbf46e06b5544d8a9021d99bd7c3db86fb57ba169d1" name="ffmpeg-2-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="21b23c8d1ee79b437736ab6595af2a404b518d5a71cd41b15e94cf3b9fef5097" name="ffmpeg-2-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="b8fc8c5b287bbbe624636520c2fddbf3f3d217b405c269b9fefef01f0890ad09" name="ffmpeg-2-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6387c8e840ba816c3e772f5bc4ac3fccdcbed4a6febdece303f113997d2e55af" name="ffmpeg-2-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="8786bf6b76a1ca9d11f56dc55814136b1dbffc9416d30a7e7f019f6e052e30b6" name="ffmpeg-2-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4b846b7b60f3b895a498a5e6287692c890a29c96b62807fd74bff4c9e869ef60" name="ffmpeg-2-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="8dcb888218a846c9086bb68257de62b6dcbc2957e543681268066fa8255e4f05" name="ffmpeg-2-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c306252c8e75c9bb2a774ba24c98f7e2ed0d87ae8cec04ab0cc1c6195ca84a7e" name="ffmpeg-2-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="517840b3a2c7ebbefbda665b2a87a39fd009f381339f2387abbd7b92237b09dc" name="ffmpeg-2-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="46009724f858daae3eece64f41acff2cf507ec1c786fa712418a8253f6cf2cc1" name="ffmpeg-2-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="90619ee9affcccd085a22cb448414280381a5bcc20c9bd2644f88c24084b40e9" name="ffmpeg-2-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0ae420cbd475d2f6f634ed4cf220806fa89fe5fad9ca7aae68327e3b5807423a" name="ffmpeg-2-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="99cc927a479d2efd83ed45ece671ae3514daa08f798594a0af78b4d864d86784" name="ffmpeg-2-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="bea2db36c7a7c56acebe9d8fa4452b844bf2a3fb72fb8e892401687286b4f88f" name="ffmpeg-2-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
</package>
<package pkgid="f2dd08a67195ad9ed52b64433b03f7d9050c524e3ade8628788d1393564cef39" name="ffmpeg-2-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="2.8.15" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Update to new bugfix release 2.8.14:
  * Various fixes around, merging the patches previously applied
  * See included Changelog for details
- Drop merged patches:
  * 0001-avcodec-exr-Check-tile-positions.patch
  * 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  * 0001-avformat-mov-Fix-DoS-in-read_tfra.patch
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Split back all the develpackages to match up ffmpeg3 and ffmpeg4</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Fix copy&amp;pasto in package name</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Disable the full build as we are not primary package anywhere</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 2.8.15:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/imgconvert: fix possible null pointer dereference
  * swresample/arm: rename labels to fix xcode build error
  * avformat/utils: fix mixed declarations and code
  * libwebpenc_animencoder: add missing braces to struct initialization
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Sanity check nmeans
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avcodec/mjpegdec: Check input buffer size.
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avformat/hvcc: zero initialize the nal buffers past the last written byte</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="50da7b94b160e2d38e09f8486c0844e030f7cbd287b6e8962cd941f6c7c0c2fd" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="8ee57d058c39be29f86a475c773b5740c74baf889aaa99b88a37632bcf92b629" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="2849881a0bd70f0f6cd52938fb4a67c4783b1a36ead8af29ef87c5da7dbaba7c" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="8350d4891a7508c280c2452192040cf872c565faa577becd31159fd0c828b751" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="58f1bf0272a0ffd6f477c48e6db1986111d21cf235a3bc8bcd1e015c7f6a0dc9" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a0489fe26540c821f9718bbe4d081da529b1e09277839fb6353f0a7f0844feed" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="a263d221fcd4e194d57218a613e94fa04c1b6c43f9866e62ab0a55c933935a52" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="49b51c3584806b2beef12d75edc20df96a084330143fc155e759f9d46cac3247" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="5961dd16bb220243c70f1d3f38166f951619fd0103e1755408571920617f2052" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="f1a48d7620c46653d5ca3256326f890b794667ad6859fb455307226f2b18237e" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b0da28440a3b937288a081725cb37c511a491c842ef9d1a8a202af5ea90a27dc" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="7a7d8ceb4339908206d79fc342a7c5539bdbb233f26e507c9bd06aa453607538" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="cac731e1b50c21fc7df5a6a5955434d5d6a18a2425461ee5f2efe7c957a41ab0" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="7d8e9a9077dd6a1981772aa1366b86c15c2fb7f2e2147d038b6b93bd56ab4d22" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b4a6b63ba94b42e7260c703e171773b4b3482ba2a9c3f0a8c0afb5ac452fbc22" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="959a62f2da514512bb488d232d35ee291437b2b0f1992e13741af28270e15d8d" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="1e6eebccb5e22d80c2a3f7ea03eb8c1accd8113c7b5de8e651ecc3427e619bd0" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="e1da525be9c8ed9dbf32a03869945cb08cb9c32307f9e3f1542f7ccbc23e0097" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7b1a1d619a2e21251311fc972d4673089c760baa022d41afaf64511917a266e2" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="39c18c3efec2ffa124c1fd43e90e2ffa6aca494f45200367c74ab14e21713dca" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4a87e6611709b4b4e3032083f9461e4e1a48acb4cfe2e2c41b9bff1dcc52845d" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9a41acda4dc35081844a2474eab7f52471b9c27ed9a5c16aa96bb476e811a93a" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4fb38703b154457bf17cd64960d37a00b3230f5afb1089c8cc636d287c620e0b" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="bb2fb4c212bf90e78f184fbc0b35f778a421c837248b4aa92ce2a36f6fca08bc" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="ce8374e1739f9ee324ef9aadf7302c3136fdf2d7e3b16506b1bb3b0a0cc42562" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.3.4" rel="7.1"/>
  <changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
  <changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
  <changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
  <changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
  <changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
  <changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
  <changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>
</package>
<package pkgid="e84ed1f7fae19d5c2216e3bde3890e81901716a0562ba7367e472f5bb9c748b4" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.3.4" rel="7.1"/>
  <changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
  <changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
  <changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
  <changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
  <changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
  <changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
  <changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>
</package>
<package pkgid="75956983d2828e5c5e06553f47bfcee55204a8539262308822bea633a15347c2" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="10.1"/>
  <changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
  <changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
  <changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
  <changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
  <changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508155200">- Update to new upstream release 3.4
  * New video filters: deflicker, doublewave, lumakey, pixscope,
    oscilloscope, robterts, limiter, libvmaf, unpremultiply,
    tlut2, floodifll, pseudocolor, despill, convolve, vmafmotion.
  * New audio filters: afir, crossfeed, surround, headphone,
    superequalizer, haas.
  * Some video filters with several inputs now use a common set
    of options: blend, libvmaf, lut3d, overlay, psnr, ssim. They
    must always be used by name.
  * librsvg support for svg rasterization
  * spec-compliant VP9 muxing support in MP4
  * Remove the libnut and libschroedinger muxer/demuxer wrappers
  * drop deprecated qtkit input device (use avfoundation instead)
  * SUP/PGS subtitle muxer
  * VP9 tile threading support
  * KMS screen grabber
  * CUDA thumbnail filter
  * V4L2 mem2mem HW assisted codecs
  * Rockchip MPP hardware decoding
  * (Not in openSUSE builds, only original ones:)
  * Gremlin Digital Video demuxer and decoder
  * Additional frame format support for Interplay MVE movies
  * Dolby E decoder and SMPTE 337M demuxer
  * raw G.726 muxer and demuxer, left- and right-justified
  * NewTek NDI input/output device
  * FITS demuxer, muxer, decoder and encoder
- Fixed a double free in huffyuv [boo#1064577, CVE-2017-15186]
- Fixed an out-of-bounds in ffv1dec [boo#1066428, CVE-2017-15672]</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Get rid of ffmpeg-pkgconfig-version.patch.</changelog>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.patch
  [boo#1072366, CVE-2017-17555].</changelog>
</package>
<package pkgid="a9da3211b246bbab45717707d18573e1081993f4bba5dbc895ded3056a588062" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="10.1"/>
  <changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
  <changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
  <changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
  <changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
  <changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508155200">- Update to new upstream release 3.4
  * New video filters: deflicker, doublewave, lumakey, pixscope,
    oscilloscope, robterts, limiter, libvmaf, unpremultiply,
    tlut2, floodifll, pseudocolor, despill, convolve, vmafmotion.
  * New audio filters: afir, crossfeed, surround, headphone,
    superequalizer, haas.
  * Some video filters with several inputs now use a common set
    of options: blend, libvmaf, lut3d, overlay, psnr, ssim. They
    must always be used by name.
  * librsvg support for svg rasterization
  * spec-compliant VP9 muxing support in MP4
  * Remove the libnut and libschroedinger muxer/demuxer wrappers
  * drop deprecated qtkit input device (use avfoundation instead)
  * SUP/PGS subtitle muxer
  * VP9 tile threading support
  * KMS screen grabber
  * CUDA thumbnail filter
  * V4L2 mem2mem HW assisted codecs
  * Rockchip MPP hardware decoding
  * (Not in openSUSE builds, only original ones:)
  * Gremlin Digital Video demuxer and decoder
  * Additional frame format support for Interplay MVE movies
  * Dolby E decoder and SMPTE 337M demuxer
  * raw G.726 muxer and demuxer, left- and right-justified
  * NewTek NDI input/output device
  * FITS demuxer, muxer, decoder and encoder
- Fixed a double free in huffyuv [boo#1064577, CVE-2017-15186]
- Fixed an out-of-bounds in ffv1dec [boo#1066428, CVE-2017-15672]</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Get rid of ffmpeg-pkgconfig-version.patch.</changelog>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.patch
  [boo#1072366, CVE-2017-17555].</changelog>
</package>
<package pkgid="7b9326b20bd8ecf7644bc060edf0b7790e75c2fe4b9b193cdd197bfb2defd6ba" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="9b1c2b415e77ae3bd5949cf8f7fcab9abff75aa395133efc99560fc205bbaf42" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="a4f76f61435a2f9f2570ae9e4c09a40814682d3861b44c44623ef73bb59bb8dd" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="450d7b9b2cd8cbc54abcbfb557783ec700241ca624d1651114e94a84cef11605" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="b0a54e6f6971e73283264da54000f092720c79a22f5efe3896a9ea4f06b5a3e9" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="3db25dc9b02f3d801d0f65fad2ef882d97afd275108dfa5c683966082d4af737" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="def84d4e9031ef7f6f4fa01edb17f09c9c08a040cc044d611ab634ce1e6a1c40" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="a0601a51b5fd080ed75b352311f34902850e530ff34e2447ecab9ef6c911af7a" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="b81e3e23a2fe3d280cf29cb74073b2e17522107b71d6fa09306edea710fa4b70" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="d104cf0ed5c5b557f4de81e44f1716ad47f66c6bef32ce58568c0c4ba5ffd50a" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="dea340f04de206e0e8522eb65f2e95849ca457f6443df5decc450368c30bf0ef" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="ca51a303ac3ef47dd2efa817e5fae16f030f07276c8136eaff3d5381677d1397" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="6f14e08bd2714708701b5eb063d884e9e3aa2dbe4ca448f04446dcb5a8a5251d" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="be073e47fbf9d8e2da00acb9a76732dfe3c7fddb7935aabcac40c96bd690c482" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="63a284da5c0013c8a923641b6879bcba7373eed6a87d3aa6dfd9f2bc8e722d74" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="4bed9778bc71375d755c1db043f761b7afb35d815a32054a15a1149475bd8378" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="a4766d3faa9cc21066fbfdd6254bd06fbc72babc0a1bdce2ed5d387df887e0f3" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0f724fd611c3258bed35656ae78167de40e707e0a8ba7be8bf4b624a8c1cbe9d" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="81e9769ce8d4eaae4c30dc7b072e9b41e3c80828051b147bcac9e27dd8f66103" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="a0da890dc2e24737d65b92567502cc91139e14ae85f2cd76db6291db14f7ad38" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="e1df2dc17f93a4139b3741c6cd36780fc9ae1af66c290bb72a59774e5e7bb997" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="83cdf50f5b01f351956d64e44cfa0ee0c25c0d70c544de129b358ef0e24364e3" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f0da98d72547ff90be6167d08021e431d549f6d2f05f42dc26d6e725596a3adc" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="07614dcd0bedec28ec46f64331d7b4178f2a9c5ac4d70fe1f947db9974e1288d" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="e4a907e28acad4953d2148dedd79dd0ef0578407a1a21844062009ba42b760af" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="8414e78a8535995601ad72b7f962fca98be8d37c2204a0593787940657f13a71" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="0980d6599b61eeb1aee03f75f1efc57965133b24db0859643de44a7ce38f7af1" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="d3cd93db4bfaaca720cb486f99974740188cddf9333af55d0d105be43cd30577" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="45db3f09930d962a4d49b17b1f785637a9c63c09c39f6cfbc33a2d4f34ba1d1e" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0ae679bbb9c058dcbafc936bdbeefd1ec1aa679438d6f6a418c71b3f4ee833e9" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="b35c5c818ec0309c8c1e426ce5d325fbba27ad5d0146116db13e07ab7eff0f10" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="6d86f87bfc1c9145d4092f4a043047dabef3cd0ff7e2f5e6a768899dde5759f5" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="6a5d802f3979d624e733050680f0f1f4ebea8c36b40f1a02dd96b89ba886c710" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="33fe7966fc4f4b5ca4ba8abfa18e96dc950d0a8502fa3affd8c721a2e735714d" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="faa6eec3cd0b5de66d4dc23b1710f0462582066be6be3ec5a01f6ef5005708bc" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="aafdba7ccbc2a868dcefab2a5d2e878503566657cdad243f17b53fb3b15f6c5e" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="afc5f8d0a05057f72a903ab4f23519d54aa7f94e2930ec985725dbf1a0a313ea" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="8f1304d5480f028590923be5b4dc9f9a792d3f3dbdc8c49160c4466752c26ac4" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f5d83c3e11e8eb1ece9b361416abff5e4cc45c91adf684546e44401cf919cf2b" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="162b1bc39228014affb90221a9f80f233029780c736ce71bd9fabd16dbcfe0f2" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="61c5e2245a46246bbef1566e1e47af006c95d4277d0cb13c05ad9ab6d7b81520" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6e735aadd1b7198a7f21f0db307fef941f64f1fd6e10b9e6b5ece9deee58b136" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="9b20cc68a95283bf452f437f5b337b8aa59457dd54cd48d00772a8e44a384269" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="0244c7a684f9c783bfbfa9a6428b6fb11df17d615cfef3ee1d54f42a2dc56beb" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="675233c09f038d78613758bc8dcae12e1820fd0b6ade20be837ba3c8914bd0fc" name="ffmpeg2" arch="src">
  <version epoch="0" ver="2.8.13" rel="32.1"/>
  <changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
  <changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
  <changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
  <changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
</package>
<package pkgid="a46ee0391218006de50c7c5956162d41752c1be520fa4f70ccea11c56622e37d" name="ffmpeg2-devel" arch="x86_64">
  <version epoch="0" ver="2.8.13" rel="32.1"/>
  <changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
  <changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
  <changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
  <changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
  <changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
  <changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
  <changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
  <changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
  <changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
  <changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
  <changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
  <changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
  <changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>
</package>
<package pkgid="63868438bf8142f7670ae07f9758e7e74fbeb797e7d80bacf7eae1f28b64e609" name="file" arch="src">
  <version epoch="0" ver="5.22" rel="10.1"/>
  <changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
</package>
<package pkgid="e619f225b365a57fe14b435827e47fffce7f3ca193058f69c20f4e802f2a4c1d" name="file" arch="x86_64">
  <version epoch="0" ver="5.22" rel="10.1"/>
  <changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
</package>
<package pkgid="294fd970989e6b1a0c22e9f766b1923b1f0f3e3f3829c42d53d16e6e98d4a927" name="file" arch="src">
  <version epoch="0" ver="5.22" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
  <changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>
</package>
<package pkgid="7b78407533759f9a67c9831eaffc0f5a3ca8c2f9f63a3aa3a601838293444789" name="file" arch="x86_64">
  <version epoch="0" ver="5.22" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
  <changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>
</package>
<package pkgid="e876c2fa49f9bfeacf1e7e74f6c5ec8d83b4b476858fc7deddf4cb0e56e63708" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.22" rel="10.1"/>
  <changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
</package>
<package pkgid="a65d11cd6c01740ed3d0fc72ab0e04b6f328847534430239991f7408d95a3dae" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.22" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
  <changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>
</package>
<package pkgid="b01ab8d5a67f3d15b93c2b9420fb7631d495ae9b895150689c92b9d596072739" name="file-magic" arch="x86_64">
  <version epoch="0" ver="5.22" rel="10.1"/>
  <changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
</package>
<package pkgid="13a0a828a95786c1e063a94548151c66cc659ebcda913e9f9715f5c5128c160d" name="file-magic" arch="x86_64">
  <version epoch="0" ver="5.22" rel="13.1"/>
  <changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
  <changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
  <changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
  <changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
  <changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
  <changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
  <changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
  <changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
  <changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
  <changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
  <changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
  <changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
  <changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
  <changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
  <changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>
</package>
<package pkgid="46796a243cb945790c4ab1f54dcbcc37c35e744b7c00e5a46f6e15275229789c" name="finch" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="10.3.1"/>
  <changelog author="tiwai@suse.de" date="1404993600">- Add pidgin-use-default-alsa.patch:
  Use ALSA as default for avoiding broken volume control of pa sink
  (bnc#886670).</changelog>
  <changelog author="dimstar@opensuse.org" date="1414152000">- Update to version 2.10.10:
  + General:
  - Check the basic constraints extension when validating
    SSL/TLS certificates. This fixes a security hole that allowed
    a malicious man-in-the-middle to impersonate an IM server or
    any other https endpoint. This affected both the NSS and
    GnuTLS plugins (CVE-2014-3694, boo#902495).
  - Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin
    for SSL (im#15909).
  + libpurple3 compatibility:
  - Encrypted account passwords are preserved until the new one
    is set.
  - Fix loading Google Talk and Facebook XMPP accounts.
  + Windows-Specific Changes: Don't allow overwriting arbitrary
    files on the file system when the user installs a smiley theme
    via drag-and-drop (CVE-2014-3697).
  + Finch: Fix build against Python 3 (im#15969).
  + Gadu-Gadu: Updated internal libgadu to version 1.12.0.
  + Groupwise: Fix potential remote crash parsing server message
    that indicates that a large amount of memory should be
    allocated (CVE-2014-3696, boo#902410).
  + IRC: Fix a possible leak of unencrypted data when using /me
    command with OTR (im#15750).
  + MXit: Fix potential remote crash parsing a malformed emoticon
    response (CVE-2014-3695, boo#902409).
  + XMPP:
  - Fix potential information leak where a malicious XMPP server
    and possibly even a malicious remote user could create a
    carefully crafted XMPP message that causes libpurple to send
    an XMPP message containing arbitrary memory (CVE-2014-3698,
    boo#902408).
  - Fix Facebook XMPP roster quirks (im#15041, im#15957).
  + Yahoo: Fix login when using the GnuTLS library for TLS
    connections (im#16172, boo#874606).
- Drop pidgin-gstreamer1.patch: causes crashes and Video still does
  not work (boo#853038). Drop BuildRequires conditions switching to
  GStreamer 1.0.
- Rebase pidgin-crash-missing-gst-registry.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1414238400">- Remove pidgin-mono-buildfix.patch: Mono bindings are deprecated
  upstream and no plugin exists making use of them.
- Rebase pidgin-gnome-keyring.patch.
- Make openSUSE 11.1 (SLE 11) minimal requirement.
- Remove obsoletions of gaim: incredibly old.
- Move Tango and NLD emoticons to separate packages.
- Spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416830400">- Update to version 2.10.11:
  + General:
  - Fix handling of Self-Signed SSL/TLS Certificates when using
    the NSS plugin (pidgin.im#16412).
  - Improve default cipher suites used with the NSS plugin
    (pidgin.im#16262).
  - Add NSS Preferences plugin which allows the SSL/TLS Versions
    and cipher suites to be configured (pidgin.im#8061).
  + Gadu-Gadu:
  - Fix a bug that prevented plugin to load when compiled without
    GnuTLS (pidgin.im#16431).
  - Fix build for platforms without AF_LOCAL definition
    (pidgin.im#16404).
  + MSN:
  - Fix broken login due to server change (pidgin.im#16451,
    pidgin.im#16455).
  - Fail early when buddy list is unavailable instead of wasting
    bandwidth endlessly re-trying.</changelog>
  <changelog author="dimstar@opensuse.org" date="1417176000">- Add patches to address CVE issues:
  + pidgin-CVE-2014-3698: bnc#902408: remote information leak via
    crafted XMPP message.
  + pidgin-CVE-2014-3696: bnc#902410: denial of service parsing
    Groupwise server message.
  + pidgin-CVE-2014-3695: bnc#902409: crash in MXit protocol
    plug-in.</changelog>
  <changelog author="tbehrens@suse.com" date="1421755200">- Remove pidgin-ssl-cache.patch: testing with the usual suspects in
  irc land suggests this workaround is no longer necessary</changelog>
  <changelog author="dimstar@opensuse.org" date="1435665600">- Re-attempt port to GStreamer 1.0 (based on work by David):
  + Add patches, from upstream:
  - pidgin-port-to-gst-1.0.patch
  - pidgin-2.10.11-gst-references.patch
  - pidgin-2.10.11-add-dtmf-support.patch
  - pidgin-2.10.11-application-media.patch
  - pidgin-2.10.11-init-media-optional.patch
  - pidgin-2.10.11-send-video-enum.patch
  - pidgin-2.10.11-private-media.patch
  + Replace gstreamer-0_10-devel and
    gstreamer-0_10-plugins-base-devel BuildRequires with
    pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0) and
    pkgconfig(farstream-0.2).
  + Switch --disable-vv configure paramter to --enable-vv.
  + Pass --with-gstreamer=1.0 to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439294400">- Add a Recommends: gstreamer-plugins-good, this plugin provides
  wav support that pidgin needs.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1439812800">- Fix build with earlier openSUSE.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1440763200">- Add pidgin-2.10.11-fix-sound-play-fd-leak.patch: fix a file
  desriptor leak while playing sound files
  (pidgin.im#16752, boo#942818).
- Remove GConf schemas generation: GConf is considered obsolete.
- Make perl dependency less strict.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add pidgin-ncurses-6.0-accessors.patch: Fix build with NCurses
  6.0 with WINDOW_OPAQUE set to 1 (pidgin.im#16764).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451736000">- Update to 2.10.12:
  + General:
  - purple-url-handler now works with Python 3.x.
  - Fix an issue where transient startup statuses could be
    deleted (pidgin.im#16762).
  + Pidgin: The shout smile now matches the default theme.
  + Gadu-Gadu: Update internal libgadu to version 1.12.1.
- Use tarball signing.
- Rebase pidgin-gnome-keyring.patch.
- Remove pidgin-2.10.11-add-dtmf-support.patch,
  pidgin-2.10.11-gst-references.patch,
  pidgin-2.10.11-send-video-enum.patch,
  pidgin-2.10.11-application-media.patch,
  pidgin-2.10.11-init-media-optional.patch,
  pidgin-2.10.11-fix-sound-play-fd-leak.patch,
  pidgin-2.10.11-private-media.patch and
  pidgin-port-to-gst-1.0.patch: added upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466510400">- Update to version 2.11.0:
  + General:
  - 2.10.12 was accidentally released with new additions to the
    API and should have been released as 2.11.0. Unfortunately,
    we did not catch the mistake until after 2.10.12 was released,
    but we're fixing it now.
    See ChangeLog.API for more information.
  - Include the Mozilla certificate bundle. This fixes connecting
    to servers with certificates from Let's Encrypt.
  - Remove all 1024-bit CAs.
  + libpurple:
  - media: Fix an issue with ximagesink displaying only a corner
    cut-out of a larger webcam video.
  - mediamanager: Update output window destruction so that it
    reflects recent changes in the media pipeline structure.
  - Ported Instantbird's CommandUiOps to libpurple.
  + Pidgin:
  - Fix pidgin.im#14962.
  - Fix alignment of incoming right-to-left messages in protocols
    that don't support rich text.
  - Fix a potential crash while exiting Pidgin.
  + AIM: Add support for the newer kerberos-based authentication of
    AIM 8.x.
  + ICQ: Stop truncating passwords to 8 characters like old ICQ
    clients did (pidgin.im#16692).
    If you actually needed this, truncate your password manually by
    pressing backspace a few times.
  + IRC: Base64-decode SASL messages before passing to libsasl
    (pidgin.im#16268).
  + MXit:
  - Fix a buffer overflow (TALOS-CAN-0120).
  - Fix a remote out-of-bounds read (TALOS-CAN-0123, TALOS-CAN-0140).
  - Fix a remote out-of-band read (TALOS-CAN-0138, TALOS-CAN-0135).
  - Fix an invalid read (TALOS-CAN-0118).
  - Fix a remote buffer overflow vulnerability (TALOS-CAN-0119).
  - Fix a directory traversal issue (TALOS-CAN-0128).
  - Fix a remote denial of service vulnerability that could result
    in a null pointer dereference (TALOS-CAN-0133).
  - Fix a remote denial of service that could result in an
    out-of-bounds read (TALOS-CAN-0134).
  - Fix multiple remote buffer overflows (TALOS-CAN-0136).
  - Fix a remote null pointer dereference (TALOS-CAN-0137).
  - Fix a remote code execution issue discovered (TALOS-CAN-0142).
  - Fix a remote denial of service vulnerability in contact mood
    handling (TALOS-CAN-0141).
  - Fix a remote out-of-bounds write vulnerability
    (TALOS-CAN-0139).
  - Fix a remote out-of-bounds read (TALOS-CAN-0143).
- Clean pidgin-gnome-keyring.patch up a bit.</changelog>
  <changelog author="fezhang@suse.com" date="1467633600">- Update to GNOME 3.20.2  Fate#318572
  + Drop pidgin-CVE-2014-3695 (bsc#902409): fixed upstream.
  + Drop pidgin-CVE-2014-3696 (bsc#902410): fixed upstream.
  + Drop pidgin-CVE-2014-3698 (bsc#902408): fixed upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439 pidgin.im#17300).</changelog>
</package>
<package pkgid="02f51a29f1176a4c9ed74d8ce88cd5177bb29b853ceb211e135f4257722fdcad" name="finch-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="10.3.1"/>
  <changelog author="tiwai@suse.de" date="1404993600">- Add pidgin-use-default-alsa.patch:
  Use ALSA as default for avoiding broken volume control of pa sink
  (bnc#886670).</changelog>
  <changelog author="dimstar@opensuse.org" date="1414152000">- Update to version 2.10.10:
  + General:
  - Check the basic constraints extension when validating
    SSL/TLS certificates. This fixes a security hole that allowed
    a malicious man-in-the-middle to impersonate an IM server or
    any other https endpoint. This affected both the NSS and
    GnuTLS plugins (CVE-2014-3694, boo#902495).
  - Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin
    for SSL (im#15909).
  + libpurple3 compatibility:
  - Encrypted account passwords are preserved until the new one
    is set.
  - Fix loading Google Talk and Facebook XMPP accounts.
  + Windows-Specific Changes: Don't allow overwriting arbitrary
    files on the file system when the user installs a smiley theme
    via drag-and-drop (CVE-2014-3697).
  + Finch: Fix build against Python 3 (im#15969).
  + Gadu-Gadu: Updated internal libgadu to version 1.12.0.
  + Groupwise: Fix potential remote crash parsing server message
    that indicates that a large amount of memory should be
    allocated (CVE-2014-3696, boo#902410).
  + IRC: Fix a possible leak of unencrypted data when using /me
    command with OTR (im#15750).
  + MXit: Fix potential remote crash parsing a malformed emoticon
    response (CVE-2014-3695, boo#902409).
  + XMPP:
  - Fix potential information leak where a malicious XMPP server
    and possibly even a malicious remote user could create a
    carefully crafted XMPP message that causes libpurple to send
    an XMPP message containing arbitrary memory (CVE-2014-3698,
    boo#902408).
  - Fix Facebook XMPP roster quirks (im#15041, im#15957).
  + Yahoo: Fix login when using the GnuTLS library for TLS
    connections (im#16172, boo#874606).
- Drop pidgin-gstreamer1.patch: causes crashes and Video still does
  not work (boo#853038). Drop BuildRequires conditions switching to
  GStreamer 1.0.
- Rebase pidgin-crash-missing-gst-registry.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1414238400">- Remove pidgin-mono-buildfix.patch: Mono bindings are deprecated
  upstream and no plugin exists making use of them.
- Rebase pidgin-gnome-keyring.patch.
- Make openSUSE 11.1 (SLE 11) minimal requirement.
- Remove obsoletions of gaim: incredibly old.
- Move Tango and NLD emoticons to separate packages.
- Spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416830400">- Update to version 2.10.11:
  + General:
  - Fix handling of Self-Signed SSL/TLS Certificates when using
    the NSS plugin (pidgin.im#16412).
  - Improve default cipher suites used with the NSS plugin
    (pidgin.im#16262).
  - Add NSS Preferences plugin which allows the SSL/TLS Versions
    and cipher suites to be configured (pidgin.im#8061).
  + Gadu-Gadu:
  - Fix a bug that prevented plugin to load when compiled without
    GnuTLS (pidgin.im#16431).
  - Fix build for platforms without AF_LOCAL definition
    (pidgin.im#16404).
  + MSN:
  - Fix broken login due to server change (pidgin.im#16451,
    pidgin.im#16455).
  - Fail early when buddy list is unavailable instead of wasting
    bandwidth endlessly re-trying.</changelog>
  <changelog author="dimstar@opensuse.org" date="1417176000">- Add patches to address CVE issues:
  + pidgin-CVE-2014-3698: bnc#902408: remote information leak via
    crafted XMPP message.
  + pidgin-CVE-2014-3696: bnc#902410: denial of service parsing
    Groupwise server message.
  + pidgin-CVE-2014-3695: bnc#902409: crash in MXit protocol
    plug-in.</changelog>
  <changelog author="tbehrens@suse.com" date="1421755200">- Remove pidgin-ssl-cache.patch: testing with the usual suspects in
  irc land suggests this workaround is no longer necessary</changelog>
  <changelog author="dimstar@opensuse.org" date="1435665600">- Re-attempt port to GStreamer 1.0 (based on work by David):
  + Add patches, from upstream:
  - pidgin-port-to-gst-1.0.patch
  - pidgin-2.10.11-gst-references.patch
  - pidgin-2.10.11-add-dtmf-support.patch
  - pidgin-2.10.11-application-media.patch
  - pidgin-2.10.11-init-media-optional.patch
  - pidgin-2.10.11-send-video-enum.patch
  - pidgin-2.10.11-private-media.patch
  + Replace gstreamer-0_10-devel and
    gstreamer-0_10-plugins-base-devel BuildRequires with
    pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0) and
    pkgconfig(farstream-0.2).
  + Switch --disable-vv configure paramter to --enable-vv.
  + Pass --with-gstreamer=1.0 to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439294400">- Add a Recommends: gstreamer-plugins-good, this plugin provides
  wav support that pidgin needs.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1439812800">- Fix build with earlier openSUSE.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1440763200">- Add pidgin-2.10.11-fix-sound-play-fd-leak.patch: fix a file
  desriptor leak while playing sound files
  (pidgin.im#16752, boo#942818).
- Remove GConf schemas generation: GConf is considered obsolete.
- Make perl dependency less strict.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add pidgin-ncurses-6.0-accessors.patch: Fix build with NCurses
  6.0 with WINDOW_OPAQUE set to 1 (pidgin.im#16764).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451736000">- Update to 2.10.12:
  + General:
  - purple-url-handler now works with Python 3.x.
  - Fix an issue where transient startup statuses could be
    deleted (pidgin.im#16762).
  + Pidgin: The shout smile now matches the default theme.
  + Gadu-Gadu: Update internal libgadu to version 1.12.1.
- Use tarball signing.
- Rebase pidgin-gnome-keyring.patch.
- Remove pidgin-2.10.11-add-dtmf-support.patch,
  pidgin-2.10.11-gst-references.patch,
  pidgin-2.10.11-send-video-enum.patch,
  pidgin-2.10.11-application-media.patch,
  pidgin-2.10.11-init-media-optional.patch,
  pidgin-2.10.11-fix-sound-play-fd-leak.patch,
  pidgin-2.10.11-private-media.patch and
  pidgin-port-to-gst-1.0.patch: added upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466510400">- Update to version 2.11.0:
  + General:
  - 2.10.12 was accidentally released with new additions to the
    API and should have been released as 2.11.0. Unfortunately,
    we did not catch the mistake until after 2.10.12 was released,
    but we're fixing it now.
    See ChangeLog.API for more information.
  - Include the Mozilla certificate bundle. This fixes connecting
    to servers with certificates from Let's Encrypt.
  - Remove all 1024-bit CAs.
  + libpurple:
  - media: Fix an issue with ximagesink displaying only a corner
    cut-out of a larger webcam video.
  - mediamanager: Update output window destruction so that it
    reflects recent changes in the media pipeline structure.
  - Ported Instantbird's CommandUiOps to libpurple.
  + Pidgin:
  - Fix pidgin.im#14962.
  - Fix alignment of incoming right-to-left messages in protocols
    that don't support rich text.
  - Fix a potential crash while exiting Pidgin.
  + AIM: Add support for the newer kerberos-based authentication of
    AIM 8.x.
  + ICQ: Stop truncating passwords to 8 characters like old ICQ
    clients did (pidgin.im#16692).
    If you actually needed this, truncate your password manually by
    pressing backspace a few times.
  + IRC: Base64-decode SASL messages before passing to libsasl
    (pidgin.im#16268).
  + MXit:
  - Fix a buffer overflow (TALOS-CAN-0120).
  - Fix a remote out-of-bounds read (TALOS-CAN-0123, TALOS-CAN-0140).
  - Fix a remote out-of-band read (TALOS-CAN-0138, TALOS-CAN-0135).
  - Fix an invalid read (TALOS-CAN-0118).
  - Fix a remote buffer overflow vulnerability (TALOS-CAN-0119).
  - Fix a directory traversal issue (TALOS-CAN-0128).
  - Fix a remote denial of service vulnerability that could result
    in a null pointer dereference (TALOS-CAN-0133).
  - Fix a remote denial of service that could result in an
    out-of-bounds read (TALOS-CAN-0134).
  - Fix multiple remote buffer overflows (TALOS-CAN-0136).
  - Fix a remote null pointer dereference (TALOS-CAN-0137).
  - Fix a remote code execution issue discovered (TALOS-CAN-0142).
  - Fix a remote denial of service vulnerability in contact mood
    handling (TALOS-CAN-0141).
  - Fix a remote out-of-bounds write vulnerability
    (TALOS-CAN-0139).
  - Fix a remote out-of-bounds read (TALOS-CAN-0143).
- Clean pidgin-gnome-keyring.patch up a bit.</changelog>
  <changelog author="fezhang@suse.com" date="1467633600">- Update to GNOME 3.20.2  Fate#318572
  + Drop pidgin-CVE-2014-3695 (bsc#902409): fixed upstream.
  + Drop pidgin-CVE-2014-3696 (bsc#902410): fixed upstream.
  + Drop pidgin-CVE-2014-3698 (bsc#902408): fixed upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439 pidgin.im#17300).</changelog>
</package>
<package pkgid="aaa02ae066e170f57385593f8b4e4c6f4cd3d39e0735014fbf23db29aecd3326" name="flac" arch="src">
  <version epoch="0" ver="1.3.2" rel="2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="3874a7e5d140d190328db843d7343c21bd029a7a4b6b3695fbaaddf59f3ccf49" name="flac" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="c025f1b9ceac41c1d5730a2b58000b0410a89815ad45b260fdecd03f605dfe91" name="flac-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="f7edff25b126e7d224d336fb12c989c7a328e8fe736ba55d7be7caac4d9cd034" name="flac-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="3d96c5dc4f72f270c8505263e883e71dd49beaef399ea65064d2e51ad0dcd0af" name="flac-doc" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="44914922f615157f6adec0397e54ed1130c7994ebacd5e3dde21b3f7e8d8c9e9" name="flatpak" arch="src">
  <version epoch="0" ver="0.8.9" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1461153600">- Update to version 0.5.2:
  + The way locale extensions work has changed. Now we build a
    single extension for all locales, but we allow you to specify a
    subset of it during installation and update time using the
  - -subpath commandline flag. The main reason for this is that
    the many extensions didn't scale, both in technical terms
    (large ostree summary file size), but also in terms of the UI
    listing hundreds of uninteresting things.
  + We no longer use sizes in the commit objects to get installed
    and download size, instead we store some extra metadata in the
    summary file. This allows us to get much faster access to
    these, as with recent ostree versions we can cache the summary
    file.
  + New command xdg-app build-sign that lets you sign a commit at
    any time.
  + New argument xdg-app build --force-clean that removes
    pre-existing build dirs.
  + xdg-app run now uses the "current" version as the default if
    you specify no branch or arch. It used to default to the
    "master" branch. This will default to the last installed
    version, but can be changed with xdg-app make-current.
  + Added config-opts to the build-options in xdg-app-builder. This
    allows you to extend the configure flags in an arch dependent
    way.
  + Documentation updates.</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Version update to 0.6.4:
  + Rename to flatpack
  + New homepage and download url
  + Various fixes</changelog>
  <changelog author="fcrozat@suse.com" date="1467115200">- Update to version 0.6.6:
  + lib: Add flatpak_get_supported_arches.
  + Add flatpak --supported-arches.
  + common: Make some internal functions static.
  + update: Always look at all existing apps when updating.
  + Disable static deltas for system-helper updates.
  + Make finding refs handle multi-arch.
  + make-current: Use find_installed_ref().
  + remote-ls: Better multiarch support.
- Changes from 0.6.5:
  + Documentation improvements
  + builder: Check that the specified command exists after build is
    done.
  + builder: Fix up mtime in headers for python precompiled files.
  + builder: Allow submodules and including modules from other json
    files.
  + system-helper builds are optional (--disable-system-helper).
  + system-helper: Support installing from local remotes and
    bundles.
  + Improved support for --subpath installs, including libflatpak
    support.
  + Improved command line completion.
- Create /var/lib/flatpak directory, own it and ensure system wide
  repo exists when installing / updating flatpak package.
- Add pkgconfig(libarchive) &gt;= 2.8.0 and gtk-doc to BuildRequires.
- Replace libelf-devel for pkgconfig(libelf) BuildRequires.
- Bump ostree minimal requirements to 2016.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version 0.6.7:
  + Expand the flatpak run --devel docs.
  + Add an option for journal sockets.
  + Document new socket option.
  + Fix builddir option type in flatpak-builder documentation.
  + document portal: don't reply to GetMountPoint() until ready.
  + Downgrade failure to get document portal from warning to
    message.
  + tests: don't treat helper scripts as though they were tests.
  + Run tests with a private XDG_RUNTIME_DIR.
  + Add BWRAP and --with-system-bubblewrap configure arguments.
  + test-basic: do not fail in non-English locales.
  + Update to latest libglnx with lock release fix.
  + fix warning.
  + Fix leak in flatpak-installed-ref.
  + utils: Add flatpak_spawnv() helper.
  + builder: Add "use-git" option for patch source type.
  + Make journal always available in the sandbox.
  + builder: Report errors to stderr, not stdout.
  + tests: Add test for "use-git" patch application.
  + tests/test-builder.sh: Re-silence flatpak-builder.
  + tests: Test install/updates with static deltas.
  + extensions: Minor cleanup.
  + Add tests for extensions.
  + extensions: Always create a tmpfs for subdirectory extensions.
  + common: Remove unused functions.
  + utils: Add flatpak_get_current_locale_subpaths().
  + utils: Add flatpak_summary_match_subrefs.
  + builder: Strip "." from locale names too.
  + FlatpakDir: Add flatpak_dir_find_remote/local_related.
  + Add flatpak_dir_install_or_update.
  + Install/update/uninstall related refs.
  + builder: Set the new extension properties.
  + Bump version number since last release.
  + Document the metadata format.
  + lib: Support listing related refs.
  + Add some code I used to test the new related refs code.
  + doc/flatpak-metadata: Add some extra clarifications.
  + Update NEWS.
  + Require ostree 2016.6.
  + builder: Clear mtime to 1, not 0, to match what new ostree
    does.
  + Remove unused variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Change /usr/bin/tar Requires to /bin/tar: this has never been
  moved to /usr/bin.</changelog>
  <changelog author="dmacvicar@suse.de" date="1471348800">- Update to version 0.6.8:
  + Requires OSTree 2016.7, allowing to enable use of static delta
    for system downloads again.
  + Support --no-desktop which allows you to run a flatpak app
    outside a desktop, with some loss of functionallity
    (for example, there will be no systemd --user scope created for
    the app)..
  + More documentation.
  + Memory leak fixes.
  + Initial support for rpms as flatpak-builder archive sources.
  + Start work on translating the CLI.
  + Install systemd config snippet to set the right XDG_DATA_DIRS
    path.
  + Support --arch in flatpak list.
  + Support access() in the document portal.
  + Validate exported desktop files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473163200">- Update to version 0.6.9:
  + Dropped dependency on libgsystem.
  + Allow passing partial refs whenever a CLI command takes an app
    or runtime name.
  + New command build-commit-from creates a new commit based on the
    contents of another commit (optionally from another local
    repo).
  + The sandbox now contains $XDG_RUNTIME_DIR/app/$APPID from the
    host (and the directory is created if needed).
  + update: Better output, and faster for the no updates case.
  + build-export: Don't make most validation errors fail, instead
    just print a warning.
  + builder:
  - Support local path references for git sources.
  - Better handling of recursive git submodules.
  - Fixed issues with the .pyc mtime rewriting.
  - Handle symbolic icons for rename-icon.
  - Add --stop-at=$module to do partial builds.
  - Add --sandbox flag to disable the build from escaping from
    the sandbox via build-args.
  + Updated translations.
- Drop pkgconfig(libgsystem) BuildRequires following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 0.6.10:
  + Dropped requirement for systemd --user. The way we detect if an
    process we're talking to is sandboxed, and what application id
    it has doesn't use cgroups anymore, which means that the
    dependency on systemd in the user session is now optional. This
    also means the --no-desktop argument is not needed any more.
    (It is still accepted but does nothing.)
  + Initial support has been added for .flatpakref files. These are
    simple key value files similar to .flatpakrepo files, however
    they specify an application to install in addition to the repo
    information. For example, gedit can be installed by downloading
    https://sdk.gnome.org/gedit.flatpakref and running: flatpak
    install --from gedit.flatpakref There is also library support
    for this so it can be added to graphical installers (such as
    gnome-software).
  + Requires OSTree 2016.10. The change in how OSTree handles
    mtimes in checkouts that was introduced in 2016.7 has been
    reverted, and the required changes in Flatpak has been made.
    This means that flatpak now depends on OSTree 2016.10.
  + Requires Bubblewrap 0.1.2 for builds using the system
    bubblewrap. Builds using the included copy need no changes.
  + The $XDG_RUNTIME_DIR/flatpak-info file has added information
    about the running application, and is now also securely
    available for a running application from the host as
    "/proc/$fd/root/.flatpak-info". This is what is used to
    identify remote apps instead of the cgroup info.
  + A new run permission --allow=devel has been added. An
    application with this permission is allowed to use ptrace and
    perf. This was previously only available during "flatpak build"
    and "flatpak run -d". This is useful if you're packaging e.g.
    an IDE.
  + When an application is updated or removed a /app/.updated or
    /app/.removed file is created for running instances. This can
    be used by applications to trigger e.g. a restart for the new
    version.
  + A new dbus request "HostCommand" has been added to
    org.freedesktop.Flatpak. This lets you run any command on the
    host, and is therefore clearly not sandboxed, so access to this
    should be limited. However, it is very useful if you're using
    flatpak mainly as a distribution mechanism, for a non-sandboxed
    application.
  + flatpak-builder now supports running from inside a flatpak, by
    auto-detecting this and using the HostCommand service to run
    recursive flatpaks.
  + Consecutive calls to flatpak build-update-repo has been speed
    up.
  + The document portal now allows sandboxed applications to create
    references to files in /app and /usr (in the app/runtime).
  + The update process now doesn't stop at the first failure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 0.6.12:
  + Partial revert in application id rules. Application ids can now
    only have dashes in the last element. This allows apps to
    export files such as org.my.App-extra.desktop which was used by
    the libreoffice builds.
  + By default the kernel keyring is not accessable, as it is not
    containable.
  + Some robustness fixes for build-commit-from.
  + Better error messages.
  + flatpak update --appstream now updates for all remotes.
  + Made flatpak enter work, and you can now use any pid in the
    sandbox. However, it requires root permissions.
  + Support for --device=kvm for /dev/kvm access.
  + Support for --allow=multiarch to support non-primary arch
    support. For example running i686 code in an x86_64 app.
  + Add new default-branch setting for the remote configuration.
- Changes from version 0.6.11:
  + Dashes are now allowed in application ids. However, to still
    work with symbolic icon names, they may not end with
    "-symbolic".
  + HostCommand now handles ptys correctly.
  + Various documentation updates.
  + New FLATPAK_CHECK_VERSION macro in libflatpak.
  + HostCommand now returns the real PID rather than a fake one.
  + Fix regression in flatpak update --appstream.
  + Fix regression installing bundles without origin urls.
  + New flatpak-builder option --show-deps lists all the files the
    manifest depends on.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 0.6.13:
  + The command line arguments for install/update/uninstall
    changed.
  + Application runtime depencenies are checked/downloaded.
  + remote-add and install --from now supports uris.
  + flatpak run can now launch a runtime directly.
  + Updated bubblewrap to 0.1.3 (CVE-2016-8659).
  + Support for defining the default branch per remote.
  + remote-add/modify: --update-metadata pulls current title and
    default branch from remote summary file.
  + Applications can now list a set of URIs that will be downloaded
    with the application.
  + flatpak-builder: Support --finish-only and
  - -allow-missing-runtimes.
  + flatpak-builder: Support app layering.
  + dbus proxy: The filtering has been tightened up.
  + build-finish: Now exports icons for themes other than hicolor
    too.
  + There is support in the app metadata for generic policies.
  + Support for extensions directories.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Require flatpak by flatpak-devel: xdg-desktop-portal expects to
  find org.freedesktop.portal.Documents.xml, which is part of
  flatpak. It's fair to assume everything to be present when
  pulling in the -devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 0.6.14:
  + Update bundled bubblewrap to 0.1.4 which has some nice
    bugfixes.
  + Requires OSTree 2016.14, which allows us to drop some old
    workarounds.
  + When installing an application system-wide, don't consider
    dependencies that are installed for the user only.
  + Flatpak install --from now tries to re-use existing remotes to
    avoid creating unnecessary origin remotes.
  + Using --filesystem=$dir when $dir is a symlink-to-directory now
    works.
  + Using --filesystem=$file to expose unix sockets to the app is
    now allowed.
  + By default all the directories in ~/.var/app (except the app),
    as well as ~/.local/share/flatpak are hidden in the sandbox.
  + New option --filesystem=$dir:create which will create the
    destination if it did not previously exist.
  + --filesystem= now supports for xdg-[config|cache|data]. This
    allows you access to the host versions of these xdg dirs.
    Additionally if you use these with a subdirectory, like:
  - -filesystem=xdg-config/subdir then that subdirectory on the
    host will be shared with the per-app instance of the xdg-dir.
  + Builder now correctly handles app-ids that have dashes in them.
    Previously this generated invalid ids for the debuginfo and
    locale extensions.
  + The experimental OCI file format support was changed from
    creating an OCI container to creating an OCI image.
  + Fix regression where "flatpak update --appstream remotename"
    broke.</changelog>
  <changelog author="zaitor@opensuse.org" date="1482408000">- Update to version 0.8.0:
  + This is the first release in a new series of stable releases
    called 0.8.x. New features will be added to 0.9.x, and only
    bugfixes will be backported to 0.8.x. The featureset of this
    release is a good base to target if you're creating flatpaks
    that should be widely usable.
  + This release technically requires only OSTree 2016.14, and it
    build fine with this, but we recommend using OSTree 2016.15,
    because of the change in how it verifies the checksums of
    commits in delta files.
  + Flatpakrepo files now support a RuntimeRepo= key which points
    to a flatpakrepo file. This means the user don't have to
    manually configure a remote for the runtime, just reply to the
    prompt to automatically do this when installing the app.
  + We now support dependencies when installing bundles. This
    includes required runtimes, related refs, and the equivalent of
    RuntimeRepo.
  + The support for OCI in flatpak has been updated to the latest
    OCI spec version, and support has been added to directly
    install flatpak applications from an OCI image.
  + In flatpak install, the --from and --bundle options are now
    optional if the argument has the correct suffix (.flatpakref
    and .flatpak).
  + Flatpak install now supports -y to let you avoid interactive
    prompts.
  + build-finish:
  - We now export mime type files with the right name.
  - New --require-version option let you specify a particular
    version of flatpak, and older version of flatpak will not
    install or update to the new version.
  + build-sign: Allow signing all apps by omitting the id.
  + Fix regression in the document portal when adding named files.
  + build-import-bundle now signs the commit if you specify a gpg
    key.
  + Flatpak now reads configuration from
    /etc/flatpak/installations.d which lets you support multiple
    system-level installation paths. These can be accessed with
    new --installation=... arguments to most of the commands.
  + flatpak-builder:
  - Support --jobs=N to limit parallel builds.
  - Patch source got new options property that lets you pass
    arguments to patch.
  - New generic "buildsystem: type" option that replace the (now
    deprecated) "cmake: true" option. This supports "autotools",
    "cmake" and "meson".</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728000">- Update to version 0.8.1:
  + This is a bugfix and security update (CVE-2017-5226):
  - Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the
    sandbox, which works around the possibility to inject text on
    the controlling tty (CVE-2017-5226).
  - This was previously fixed in bubblewrap in 0.1.6, but that
    change has now been reverted as it introduced other problems
    for flatpak.
  + Update bundled bubblewrap to 0.1.7.
  + Fix writing new file with O_EXCL in the document portal.
  + Allow appstream data that doesn't have .desktop in the
    component id, such as data for runtimes.
  + Drop json-glib dependency from 1.2 to 1.0.
  + Builder: Fail if unable to read included file.
  + OCI: Ensure exported layers are readable by everyone.
  + Fix extra-data download in gnome-software.
  + Fix update-mime-database trigger when installing via the system
    helper.
  + Updating an app by installing a newer bundle now works again.
  + Make /var/tmp not be on a tmpfs (it is now in
    ~/.var/app/$appid/cache/tmp).
  + Updated documentation.
  + Updated translations.</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728001">- Update to version 0.8.2:
  + This is a bugfix and security update:
  - Some of the bind-mounts that flatpak sets up were not
    read-only as they should have. This includes: extensions,
    system fonts, resolv.conf, localtime and machine-id. Many of
    these are typically only writable by root, but some, like the
    user-specific fonts and user-installed extensions could be
    modified from the sandbox.
  + Other fixes:
  - There are new configure options for where to install dbus
    configuration.
  - Broken symlinks in the root directory no longer break flatpak
    run.
  - flatpak run with HOME in /var now works.
  - dri access now also handles mali devices.
  - install handles --arch when installing flatpakrefs.
  - system-helper activation fixed on systemd-less setups.
  - dbus-proxy now works without /run.
  - During installation, failing to update a dependency is now
    not fatal.
  - /etc is now fully writable when building runtimes.
  - --filesystem=xdg-config/foo now sets up the bind-mount from
    the host dir even when not using :create.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1487160000">- Add flatpak-propagate-xauth-wildcard.patch which ensures
  applications have the right to communicate with the X server.
  (gh#flatpak/flatpak#569).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 0.8.3:
  + In addition to the regular list of bugfixes this stable release
    include backports of the updated OpenGL support from master.
    This, in combination with the work in the runtime allows
    flatpak to work out of the box with out-of-tree OpenGL drivers,
    including the nvidia driver.
  + Additionally, due to some complicated issues wrt ptrace and
    user namespaces this version disables the use of user
    namespaces if bubblewrap is setuid, as it cause problems for
    the way flatpak portals identifies applications.
  + Better handling of errors for extra-data.
  + Handle extra-data properly for runtimes (as well as apps).
  + Respect required version for runtimes (as well as apps).
  + flatpak list: Don't break if some local ref is not deployed.
  + builder:
  - Look for appstream data in /app/share/metadata also.
  - Fix buildsystem=cmake builds.
  + Add progress reporting to extra-data download.
  + Fix uid/gid for directories in document portal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489147200">- Update to version 0.8.4:
  + Fix no-systemd-user warning (it doesn't affect sandboxing
    anymore).
  + run: propagate wildcard xauth entries to app bundle.
  + Don't remove origin remotes if some other ref uses it.
  + Fix repeated download of locates on update.
  + update: Don't update related refs from different remote.
  + Initialize g_autofree string to NULL, not to crash when early
    returning.
  + document portal: Disable spice_read as it seems broken.
  + Return the container from flatpak_get_system_installations().
  + Don't include newlines in error messages.
  + utils: Fix list_unmtainained_refs.
  + Avoid possible null dereference.
  + utils: Fix flatpak_bundle_load typo.
  + list: Don't check error twice.
  + list-remotes: Handle remotes with no url specified.
  + run: Handle error when enumerating /etc.
  + zero-mtime: Handle error when enumerating directory.
  + Fix error check when loading configuration.
  + Support runtime-less extra-data.
  + flatpak_list_extensions: Break out code into helper.
  + extensions: Support multiple versions.
  + Append flatpak data dirs if XDG_DATA_DIRS is already set
    (gh#flatpak/flatpak#611).
  + appstream: Don't add runtime to flatpak bundle tag for
    runtimes.
  + Split extra-data setup and fetch.
  + Improve progress calculation.
  + profile: Don't add flatpak to XDG_DATA_DIRS if its already
    there.
  + Updated translations.
- Drop flatpak-propagate-xauth-wildcard.patch: fixed upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1497960000">- Update to version 0.8.6:
  + TMPDIR is now unset in the sandbox, if set on the host. Each
    sandbox has a personal /tmp that is used.
  + Flatpak run now works if /tmp is a symlink on the host.
  + /etc/hosts and /etc/hosts.conf from the host are now exposed in
    the sandbox in addition to /etc/resolv.conf.
  + Flatpak now stores the app id in the X-Flatpak key when
    exporting a desktop file.
  + Exports are now whitelisted, and the only thing you can export
    are desktop files, icons and dbus services. This is somewhat
    different from the 0.9.x series, where als mime definitions,
    and gnome-shell search providers are allowed.
  + Fixed minor race condition in portal application
    identification.
  + Support WAYLAND_DISPLAY environment var.
  + dbus-portal: Fix handling of NameHasOwner.
  + run: Allow regular files for --filesystem=xdg-config/path.
  + run: Allow --filesystem=xdg-config/subdir:ro (previously it
    needed to be writable).
  + Support for updating to new gpg keys and url when using flatpak
    remote-modify --update-metadata. This is a manual operation in
    0.8.x but is automatic in the 0.9.x series.
- Changes from 0.8.5:
  + Fixed a use-after-free and some leaks in the dbus-proxy. This
    is not currently believed to be exploitable, but the proxy is a
    security boundary, so we still recommend to update.
  + Regular updates now never allow updates to an older version
    than what is currently installed (unless you explicitly specify
    an old commit id). This closes a hole where a MITM attacker can
    force clients to downgrade to an earlier (gpg-signed) version
    of the application.
  + The automatic detection of --from in flatpak install now
    detects flatpakref extensions even in URIs that end in a query
    string.
  + The detection of "unmaintained" system extensions was broken,
    and in some cases these extensions were not found. This now
    always works.
  + Flatpak now builds with latest OSTree. This required some
    fixing for multiple definitions of the g_auto* macros as OSTree
    now exports those.
  + We no longer rely on ostree trivial-httpd for the tests,
    because this is optional in later versions of ostree. Instead
    we use they python SimpleHTTPServer.
- Set the minimum glib version to 2.44.
- Replace pkgconfig(libelf) BuildRequires by libelf-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517486400">- Update to version 0.8.9:
  + This is a security fix release that fixes a sandbox escape in
    the flatpak dbus proxy (bsc#1078923)
  + Changes:
  - Fix dbus proxy vulnerability in authentication phase;
  - Make permission handling ignore unknown permissions for
    forwards compatibility;
  - Improved profile snippet.
- Changes from version 0.8.8:
  + This is a minor security update, as well as an update to match
    some sandbox behaviours that were added to the 0.10.0 release.
  + Changes:
  - SECURITY: Forbit old-style eavesdropping in the dbus proxy;
    (bsc#1078993)
  - Expose icons from host in /run/host/share/icons;
  - Ensure fontconfig caches are per-sandbox;
  - Some problematic env vars are no longer inherited from the
    host;
  - The LD_LIBRARY_PATH order is now correct for extensions with
    different priorities;
  - Extensions are now mounted in the correct orders, even if
    they have different priorities, fixing steam;
  - Disable debug spew in the document portal fuse filesystem;
  - Now it works with the current version of ostree.
- Changes from version 0.8.7:
  + This is a minor security update, matching the behaviour on
    master where we avoid ever creating setuid files or
    world-writable directories. However, the fix is more localized
    and does not require a new ostree.
  + Changes:
  - After pulling from a remote, always verify that the staged
    new files and directories have safe permissions;
    (bsc#1078989)
  - Ensure ~/.local/share/flatpak is not readable to other users,
    to avoid anyone ever seeing possibly world-writeable
    directories therein;
  - Fix double-setting an error in case of errors when pulling;
  - Fix timeout in testcase.
- Update Url tag to https://flatpak.org/ since it is the current
  Flatpak project's home page.</changelog>
</package>
<package pkgid="a3f4f76e831c8b8b667197ae6ac0911403f70bf2cb7583b45f7d9c6a08e03e88" name="flatpak" arch="x86_64">
  <version epoch="0" ver="0.8.9" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1461153600">- Update to version 0.5.2:
  + The way locale extensions work has changed. Now we build a
    single extension for all locales, but we allow you to specify a
    subset of it during installation and update time using the
  - -subpath commandline flag. The main reason for this is that
    the many extensions didn't scale, both in technical terms
    (large ostree summary file size), but also in terms of the UI
    listing hundreds of uninteresting things.
  + We no longer use sizes in the commit objects to get installed
    and download size, instead we store some extra metadata in the
    summary file. This allows us to get much faster access to
    these, as with recent ostree versions we can cache the summary
    file.
  + New command xdg-app build-sign that lets you sign a commit at
    any time.
  + New argument xdg-app build --force-clean that removes
    pre-existing build dirs.
  + xdg-app run now uses the "current" version as the default if
    you specify no branch or arch. It used to default to the
    "master" branch. This will default to the last installed
    version, but can be changed with xdg-app make-current.
  + Added config-opts to the build-options in xdg-app-builder. This
    allows you to extend the configure flags in an arch dependent
    way.
  + Documentation updates.</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Version update to 0.6.4:
  + Rename to flatpack
  + New homepage and download url
  + Various fixes</changelog>
  <changelog author="fcrozat@suse.com" date="1467115200">- Update to version 0.6.6:
  + lib: Add flatpak_get_supported_arches.
  + Add flatpak --supported-arches.
  + common: Make some internal functions static.
  + update: Always look at all existing apps when updating.
  + Disable static deltas for system-helper updates.
  + Make finding refs handle multi-arch.
  + make-current: Use find_installed_ref().
  + remote-ls: Better multiarch support.
- Changes from 0.6.5:
  + Documentation improvements
  + builder: Check that the specified command exists after build is
    done.
  + builder: Fix up mtime in headers for python precompiled files.
  + builder: Allow submodules and including modules from other json
    files.
  + system-helper builds are optional (--disable-system-helper).
  + system-helper: Support installing from local remotes and
    bundles.
  + Improved support for --subpath installs, including libflatpak
    support.
  + Improved command line completion.
- Create /var/lib/flatpak directory, own it and ensure system wide
  repo exists when installing / updating flatpak package.
- Add pkgconfig(libarchive) &gt;= 2.8.0 and gtk-doc to BuildRequires.
- Replace libelf-devel for pkgconfig(libelf) BuildRequires.
- Bump ostree minimal requirements to 2016.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version 0.6.7:
  + Expand the flatpak run --devel docs.
  + Add an option for journal sockets.
  + Document new socket option.
  + Fix builddir option type in flatpak-builder documentation.
  + document portal: don't reply to GetMountPoint() until ready.
  + Downgrade failure to get document portal from warning to
    message.
  + tests: don't treat helper scripts as though they were tests.
  + Run tests with a private XDG_RUNTIME_DIR.
  + Add BWRAP and --with-system-bubblewrap configure arguments.
  + test-basic: do not fail in non-English locales.
  + Update to latest libglnx with lock release fix.
  + fix warning.
  + Fix leak in flatpak-installed-ref.
  + utils: Add flatpak_spawnv() helper.
  + builder: Add "use-git" option for patch source type.
  + Make journal always available in the sandbox.
  + builder: Report errors to stderr, not stdout.
  + tests: Add test for "use-git" patch application.
  + tests/test-builder.sh: Re-silence flatpak-builder.
  + tests: Test install/updates with static deltas.
  + extensions: Minor cleanup.
  + Add tests for extensions.
  + extensions: Always create a tmpfs for subdirectory extensions.
  + common: Remove unused functions.
  + utils: Add flatpak_get_current_locale_subpaths().
  + utils: Add flatpak_summary_match_subrefs.
  + builder: Strip "." from locale names too.
  + FlatpakDir: Add flatpak_dir_find_remote/local_related.
  + Add flatpak_dir_install_or_update.
  + Install/update/uninstall related refs.
  + builder: Set the new extension properties.
  + Bump version number since last release.
  + Document the metadata format.
  + lib: Support listing related refs.
  + Add some code I used to test the new related refs code.
  + doc/flatpak-metadata: Add some extra clarifications.
  + Update NEWS.
  + Require ostree 2016.6.
  + builder: Clear mtime to 1, not 0, to match what new ostree
    does.
  + Remove unused variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Change /usr/bin/tar Requires to /bin/tar: this has never been
  moved to /usr/bin.</changelog>
  <changelog author="dmacvicar@suse.de" date="1471348800">- Update to version 0.6.8:
  + Requires OSTree 2016.7, allowing to enable use of static delta
    for system downloads again.
  + Support --no-desktop which allows you to run a flatpak app
    outside a desktop, with some loss of functionallity
    (for example, there will be no systemd --user scope created for
    the app)..
  + More documentation.
  + Memory leak fixes.
  + Initial support for rpms as flatpak-builder archive sources.
  + Start work on translating the CLI.
  + Install systemd config snippet to set the right XDG_DATA_DIRS
    path.
  + Support --arch in flatpak list.
  + Support access() in the document portal.
  + Validate exported desktop files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473163200">- Update to version 0.6.9:
  + Dropped dependency on libgsystem.
  + Allow passing partial refs whenever a CLI command takes an app
    or runtime name.
  + New command build-commit-from creates a new commit based on the
    contents of another commit (optionally from another local
    repo).
  + The sandbox now contains $XDG_RUNTIME_DIR/app/$APPID from the
    host (and the directory is created if needed).
  + update: Better output, and faster for the no updates case.
  + build-export: Don't make most validation errors fail, instead
    just print a warning.
  + builder:
  - Support local path references for git sources.
  - Better handling of recursive git submodules.
  - Fixed issues with the .pyc mtime rewriting.
  - Handle symbolic icons for rename-icon.
  - Add --stop-at=$module to do partial builds.
  - Add --sandbox flag to disable the build from escaping from
    the sandbox via build-args.
  + Updated translations.
- Drop pkgconfig(libgsystem) BuildRequires following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 0.6.10:
  + Dropped requirement for systemd --user. The way we detect if an
    process we're talking to is sandboxed, and what application id
    it has doesn't use cgroups anymore, which means that the
    dependency on systemd in the user session is now optional. This
    also means the --no-desktop argument is not needed any more.
    (It is still accepted but does nothing.)
  + Initial support has been added for .flatpakref files. These are
    simple key value files similar to .flatpakrepo files, however
    they specify an application to install in addition to the repo
    information. For example, gedit can be installed by downloading
    https://sdk.gnome.org/gedit.flatpakref and running: flatpak
    install --from gedit.flatpakref There is also library support
    for this so it can be added to graphical installers (such as
    gnome-software).
  + Requires OSTree 2016.10. The change in how OSTree handles
    mtimes in checkouts that was introduced in 2016.7 has been
    reverted, and the required changes in Flatpak has been made.
    This means that flatpak now depends on OSTree 2016.10.
  + Requires Bubblewrap 0.1.2 for builds using the system
    bubblewrap. Builds using the included copy need no changes.
  + The $XDG_RUNTIME_DIR/flatpak-info file has added information
    about the running application, and is now also securely
    available for a running application from the host as
    "/proc/$fd/root/.flatpak-info". This is what is used to
    identify remote apps instead of the cgroup info.
  + A new run permission --allow=devel has been added. An
    application with this permission is allowed to use ptrace and
    perf. This was previously only available during "flatpak build"
    and "flatpak run -d". This is useful if you're packaging e.g.
    an IDE.
  + When an application is updated or removed a /app/.updated or
    /app/.removed file is created for running instances. This can
    be used by applications to trigger e.g. a restart for the new
    version.
  + A new dbus request "HostCommand" has been added to
    org.freedesktop.Flatpak. This lets you run any command on the
    host, and is therefore clearly not sandboxed, so access to this
    should be limited. However, it is very useful if you're using
    flatpak mainly as a distribution mechanism, for a non-sandboxed
    application.
  + flatpak-builder now supports running from inside a flatpak, by
    auto-detecting this and using the HostCommand service to run
    recursive flatpaks.
  + Consecutive calls to flatpak build-update-repo has been speed
    up.
  + The document portal now allows sandboxed applications to create
    references to files in /app and /usr (in the app/runtime).
  + The update process now doesn't stop at the first failure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 0.6.12:
  + Partial revert in application id rules. Application ids can now
    only have dashes in the last element. This allows apps to
    export files such as org.my.App-extra.desktop which was used by
    the libreoffice builds.
  + By default the kernel keyring is not accessable, as it is not
    containable.
  + Some robustness fixes for build-commit-from.
  + Better error messages.
  + flatpak update --appstream now updates for all remotes.
  + Made flatpak enter work, and you can now use any pid in the
    sandbox. However, it requires root permissions.
  + Support for --device=kvm for /dev/kvm access.
  + Support for --allow=multiarch to support non-primary arch
    support. For example running i686 code in an x86_64 app.
  + Add new default-branch setting for the remote configuration.
- Changes from version 0.6.11:
  + Dashes are now allowed in application ids. However, to still
    work with symbolic icon names, they may not end with
    "-symbolic".
  + HostCommand now handles ptys correctly.
  + Various documentation updates.
  + New FLATPAK_CHECK_VERSION macro in libflatpak.
  + HostCommand now returns the real PID rather than a fake one.
  + Fix regression in flatpak update --appstream.
  + Fix regression installing bundles without origin urls.
  + New flatpak-builder option --show-deps lists all the files the
    manifest depends on.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 0.6.13:
  + The command line arguments for install/update/uninstall
    changed.
  + Application runtime depencenies are checked/downloaded.
  + remote-add and install --from now supports uris.
  + flatpak run can now launch a runtime directly.
  + Updated bubblewrap to 0.1.3 (CVE-2016-8659).
  + Support for defining the default branch per remote.
  + remote-add/modify: --update-metadata pulls current title and
    default branch from remote summary file.
  + Applications can now list a set of URIs that will be downloaded
    with the application.
  + flatpak-builder: Support --finish-only and
  - -allow-missing-runtimes.
  + flatpak-builder: Support app layering.
  + dbus proxy: The filtering has been tightened up.
  + build-finish: Now exports icons for themes other than hicolor
    too.
  + There is support in the app metadata for generic policies.
  + Support for extensions directories.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Require flatpak by flatpak-devel: xdg-desktop-portal expects to
  find org.freedesktop.portal.Documents.xml, which is part of
  flatpak. It's fair to assume everything to be present when
  pulling in the -devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 0.6.14:
  + Update bundled bubblewrap to 0.1.4 which has some nice
    bugfixes.
  + Requires OSTree 2016.14, which allows us to drop some old
    workarounds.
  + When installing an application system-wide, don't consider
    dependencies that are installed for the user only.
  + Flatpak install --from now tries to re-use existing remotes to
    avoid creating unnecessary origin remotes.
  + Using --filesystem=$dir when $dir is a symlink-to-directory now
    works.
  + Using --filesystem=$file to expose unix sockets to the app is
    now allowed.
  + By default all the directories in ~/.var/app (except the app),
    as well as ~/.local/share/flatpak are hidden in the sandbox.
  + New option --filesystem=$dir:create which will create the
    destination if it did not previously exist.
  + --filesystem= now supports for xdg-[config|cache|data]. This
    allows you access to the host versions of these xdg dirs.
    Additionally if you use these with a subdirectory, like:
  - -filesystem=xdg-config/subdir then that subdirectory on the
    host will be shared with the per-app instance of the xdg-dir.
  + Builder now correctly handles app-ids that have dashes in them.
    Previously this generated invalid ids for the debuginfo and
    locale extensions.
  + The experimental OCI file format support was changed from
    creating an OCI container to creating an OCI image.
  + Fix regression where "flatpak update --appstream remotename"
    broke.</changelog>
  <changelog author="zaitor@opensuse.org" date="1482408000">- Update to version 0.8.0:
  + This is the first release in a new series of stable releases
    called 0.8.x. New features will be added to 0.9.x, and only
    bugfixes will be backported to 0.8.x. The featureset of this
    release is a good base to target if you're creating flatpaks
    that should be widely usable.
  + This release technically requires only OSTree 2016.14, and it
    build fine with this, but we recommend using OSTree 2016.15,
    because of the change in how it verifies the checksums of
    commits in delta files.
  + Flatpakrepo files now support a RuntimeRepo= key which points
    to a flatpakrepo file. This means the user don't have to
    manually configure a remote for the runtime, just reply to the
    prompt to automatically do this when installing the app.
  + We now support dependencies when installing bundles. This
    includes required runtimes, related refs, and the equivalent of
    RuntimeRepo.
  + The support for OCI in flatpak has been updated to the latest
    OCI spec version, and support has been added to directly
    install flatpak applications from an OCI image.
  + In flatpak install, the --from and --bundle options are now
    optional if the argument has the correct suffix (.flatpakref
    and .flatpak).
  + Flatpak install now supports -y to let you avoid interactive
    prompts.
  + build-finish:
  - We now export mime type files with the right name.
  - New --require-version option let you specify a particular
    version of flatpak, and older version of flatpak will not
    install or update to the new version.
  + build-sign: Allow signing all apps by omitting the id.
  + Fix regression in the document portal when adding named files.
  + build-import-bundle now signs the commit if you specify a gpg
    key.
  + Flatpak now reads configuration from
    /etc/flatpak/installations.d which lets you support multiple
    system-level installation paths. These can be accessed with
    new --installation=... arguments to most of the commands.
  + flatpak-builder:
  - Support --jobs=N to limit parallel builds.
  - Patch source got new options property that lets you pass
    arguments to patch.
  - New generic "buildsystem: type" option that replace the (now
    deprecated) "cmake: true" option. This supports "autotools",
    "cmake" and "meson".</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728000">- Update to version 0.8.1:
  + This is a bugfix and security update (CVE-2017-5226):
  - Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the
    sandbox, which works around the possibility to inject text on
    the controlling tty (CVE-2017-5226).
  - This was previously fixed in bubblewrap in 0.1.6, but that
    change has now been reverted as it introduced other problems
    for flatpak.
  + Update bundled bubblewrap to 0.1.7.
  + Fix writing new file with O_EXCL in the document portal.
  + Allow appstream data that doesn't have .desktop in the
    component id, such as data for runtimes.
  + Drop json-glib dependency from 1.2 to 1.0.
  + Builder: Fail if unable to read included file.
  + OCI: Ensure exported layers are readable by everyone.
  + Fix extra-data download in gnome-software.
  + Fix update-mime-database trigger when installing via the system
    helper.
  + Updating an app by installing a newer bundle now works again.
  + Make /var/tmp not be on a tmpfs (it is now in
    ~/.var/app/$appid/cache/tmp).
  + Updated documentation.
  + Updated translations.</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728001">- Update to version 0.8.2:
  + This is a bugfix and security update:
  - Some of the bind-mounts that flatpak sets up were not
    read-only as they should have. This includes: extensions,
    system fonts, resolv.conf, localtime and machine-id. Many of
    these are typically only writable by root, but some, like the
    user-specific fonts and user-installed extensions could be
    modified from the sandbox.
  + Other fixes:
  - There are new configure options for where to install dbus
    configuration.
  - Broken symlinks in the root directory no longer break flatpak
    run.
  - flatpak run with HOME in /var now works.
  - dri access now also handles mali devices.
  - install handles --arch when installing flatpakrefs.
  - system-helper activation fixed on systemd-less setups.
  - dbus-proxy now works without /run.
  - During installation, failing to update a dependency is now
    not fatal.
  - /etc is now fully writable when building runtimes.
  - --filesystem=xdg-config/foo now sets up the bind-mount from
    the host dir even when not using :create.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1487160000">- Add flatpak-propagate-xauth-wildcard.patch which ensures
  applications have the right to communicate with the X server.
  (gh#flatpak/flatpak#569).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 0.8.3:
  + In addition to the regular list of bugfixes this stable release
    include backports of the updated OpenGL support from master.
    This, in combination with the work in the runtime allows
    flatpak to work out of the box with out-of-tree OpenGL drivers,
    including the nvidia driver.
  + Additionally, due to some complicated issues wrt ptrace and
    user namespaces this version disables the use of user
    namespaces if bubblewrap is setuid, as it cause problems for
    the way flatpak portals identifies applications.
  + Better handling of errors for extra-data.
  + Handle extra-data properly for runtimes (as well as apps).
  + Respect required version for runtimes (as well as apps).
  + flatpak list: Don't break if some local ref is not deployed.
  + builder:
  - Look for appstream data in /app/share/metadata also.
  - Fix buildsystem=cmake builds.
  + Add progress reporting to extra-data download.
  + Fix uid/gid for directories in document portal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489147200">- Update to version 0.8.4:
  + Fix no-systemd-user warning (it doesn't affect sandboxing
    anymore).
  + run: propagate wildcard xauth entries to app bundle.
  + Don't remove origin remotes if some other ref uses it.
  + Fix repeated download of locates on update.
  + update: Don't update related refs from different remote.
  + Initialize g_autofree string to NULL, not to crash when early
    returning.
  + document portal: Disable spice_read as it seems broken.
  + Return the container from flatpak_get_system_installations().
  + Don't include newlines in error messages.
  + utils: Fix list_unmtainained_refs.
  + Avoid possible null dereference.
  + utils: Fix flatpak_bundle_load typo.
  + list: Don't check error twice.
  + list-remotes: Handle remotes with no url specified.
  + run: Handle error when enumerating /etc.
  + zero-mtime: Handle error when enumerating directory.
  + Fix error check when loading configuration.
  + Support runtime-less extra-data.
  + flatpak_list_extensions: Break out code into helper.
  + extensions: Support multiple versions.
  + Append flatpak data dirs if XDG_DATA_DIRS is already set
    (gh#flatpak/flatpak#611).
  + appstream: Don't add runtime to flatpak bundle tag for
    runtimes.
  + Split extra-data setup and fetch.
  + Improve progress calculation.
  + profile: Don't add flatpak to XDG_DATA_DIRS if its already
    there.
  + Updated translations.
- Drop flatpak-propagate-xauth-wildcard.patch: fixed upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1497960000">- Update to version 0.8.6:
  + TMPDIR is now unset in the sandbox, if set on the host. Each
    sandbox has a personal /tmp that is used.
  + Flatpak run now works if /tmp is a symlink on the host.
  + /etc/hosts and /etc/hosts.conf from the host are now exposed in
    the sandbox in addition to /etc/resolv.conf.
  + Flatpak now stores the app id in the X-Flatpak key when
    exporting a desktop file.
  + Exports are now whitelisted, and the only thing you can export
    are desktop files, icons and dbus services. This is somewhat
    different from the 0.9.x series, where als mime definitions,
    and gnome-shell search providers are allowed.
  + Fixed minor race condition in portal application
    identification.
  + Support WAYLAND_DISPLAY environment var.
  + dbus-portal: Fix handling of NameHasOwner.
  + run: Allow regular files for --filesystem=xdg-config/path.
  + run: Allow --filesystem=xdg-config/subdir:ro (previously it
    needed to be writable).
  + Support for updating to new gpg keys and url when using flatpak
    remote-modify --update-metadata. This is a manual operation in
    0.8.x but is automatic in the 0.9.x series.
- Changes from 0.8.5:
  + Fixed a use-after-free and some leaks in the dbus-proxy. This
    is not currently believed to be exploitable, but the proxy is a
    security boundary, so we still recommend to update.
  + Regular updates now never allow updates to an older version
    than what is currently installed (unless you explicitly specify
    an old commit id). This closes a hole where a MITM attacker can
    force clients to downgrade to an earlier (gpg-signed) version
    of the application.
  + The automatic detection of --from in flatpak install now
    detects flatpakref extensions even in URIs that end in a query
    string.
  + The detection of "unmaintained" system extensions was broken,
    and in some cases these extensions were not found. This now
    always works.
  + Flatpak now builds with latest OSTree. This required some
    fixing for multiple definitions of the g_auto* macros as OSTree
    now exports those.
  + We no longer rely on ostree trivial-httpd for the tests,
    because this is optional in later versions of ostree. Instead
    we use they python SimpleHTTPServer.
- Set the minimum glib version to 2.44.
- Replace pkgconfig(libelf) BuildRequires by libelf-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517486400">- Update to version 0.8.9:
  + This is a security fix release that fixes a sandbox escape in
    the flatpak dbus proxy (bsc#1078923)
  + Changes:
  - Fix dbus proxy vulnerability in authentication phase;
  - Make permission handling ignore unknown permissions for
    forwards compatibility;
  - Improved profile snippet.
- Changes from version 0.8.8:
  + This is a minor security update, as well as an update to match
    some sandbox behaviours that were added to the 0.10.0 release.
  + Changes:
  - SECURITY: Forbit old-style eavesdropping in the dbus proxy;
    (bsc#1078993)
  - Expose icons from host in /run/host/share/icons;
  - Ensure fontconfig caches are per-sandbox;
  - Some problematic env vars are no longer inherited from the
    host;
  - The LD_LIBRARY_PATH order is now correct for extensions with
    different priorities;
  - Extensions are now mounted in the correct orders, even if
    they have different priorities, fixing steam;
  - Disable debug spew in the document portal fuse filesystem;
  - Now it works with the current version of ostree.
- Changes from version 0.8.7:
  + This is a minor security update, matching the behaviour on
    master where we avoid ever creating setuid files or
    world-writable directories. However, the fix is more localized
    and does not require a new ostree.
  + Changes:
  - After pulling from a remote, always verify that the staged
    new files and directories have safe permissions;
    (bsc#1078989)
  - Ensure ~/.local/share/flatpak is not readable to other users,
    to avoid anyone ever seeing possibly world-writeable
    directories therein;
  - Fix double-setting an error in case of errors when pulling;
  - Fix timeout in testcase.
- Update Url tag to https://flatpak.org/ since it is the current
  Flatpak project's home page.</changelog>
</package>
<package pkgid="00990397f984e9209179e9c142b020f25ef21a8ef7557694474d7c2f4e40f263" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="0.8.9" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1461153600">- Update to version 0.5.2:
  + The way locale extensions work has changed. Now we build a
    single extension for all locales, but we allow you to specify a
    subset of it during installation and update time using the
  - -subpath commandline flag. The main reason for this is that
    the many extensions didn't scale, both in technical terms
    (large ostree summary file size), but also in terms of the UI
    listing hundreds of uninteresting things.
  + We no longer use sizes in the commit objects to get installed
    and download size, instead we store some extra metadata in the
    summary file. This allows us to get much faster access to
    these, as with recent ostree versions we can cache the summary
    file.
  + New command xdg-app build-sign that lets you sign a commit at
    any time.
  + New argument xdg-app build --force-clean that removes
    pre-existing build dirs.
  + xdg-app run now uses the "current" version as the default if
    you specify no branch or arch. It used to default to the
    "master" branch. This will default to the last installed
    version, but can be changed with xdg-app make-current.
  + Added config-opts to the build-options in xdg-app-builder. This
    allows you to extend the configure flags in an arch dependent
    way.
  + Documentation updates.</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Version update to 0.6.4:
  + Rename to flatpack
  + New homepage and download url
  + Various fixes</changelog>
  <changelog author="fcrozat@suse.com" date="1467115200">- Update to version 0.6.6:
  + lib: Add flatpak_get_supported_arches.
  + Add flatpak --supported-arches.
  + common: Make some internal functions static.
  + update: Always look at all existing apps when updating.
  + Disable static deltas for system-helper updates.
  + Make finding refs handle multi-arch.
  + make-current: Use find_installed_ref().
  + remote-ls: Better multiarch support.
- Changes from 0.6.5:
  + Documentation improvements
  + builder: Check that the specified command exists after build is
    done.
  + builder: Fix up mtime in headers for python precompiled files.
  + builder: Allow submodules and including modules from other json
    files.
  + system-helper builds are optional (--disable-system-helper).
  + system-helper: Support installing from local remotes and
    bundles.
  + Improved support for --subpath installs, including libflatpak
    support.
  + Improved command line completion.
- Create /var/lib/flatpak directory, own it and ensure system wide
  repo exists when installing / updating flatpak package.
- Add pkgconfig(libarchive) &gt;= 2.8.0 and gtk-doc to BuildRequires.
- Replace libelf-devel for pkgconfig(libelf) BuildRequires.
- Bump ostree minimal requirements to 2016.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version 0.6.7:
  + Expand the flatpak run --devel docs.
  + Add an option for journal sockets.
  + Document new socket option.
  + Fix builddir option type in flatpak-builder documentation.
  + document portal: don't reply to GetMountPoint() until ready.
  + Downgrade failure to get document portal from warning to
    message.
  + tests: don't treat helper scripts as though they were tests.
  + Run tests with a private XDG_RUNTIME_DIR.
  + Add BWRAP and --with-system-bubblewrap configure arguments.
  + test-basic: do not fail in non-English locales.
  + Update to latest libglnx with lock release fix.
  + fix warning.
  + Fix leak in flatpak-installed-ref.
  + utils: Add flatpak_spawnv() helper.
  + builder: Add "use-git" option for patch source type.
  + Make journal always available in the sandbox.
  + builder: Report errors to stderr, not stdout.
  + tests: Add test for "use-git" patch application.
  + tests/test-builder.sh: Re-silence flatpak-builder.
  + tests: Test install/updates with static deltas.
  + extensions: Minor cleanup.
  + Add tests for extensions.
  + extensions: Always create a tmpfs for subdirectory extensions.
  + common: Remove unused functions.
  + utils: Add flatpak_get_current_locale_subpaths().
  + utils: Add flatpak_summary_match_subrefs.
  + builder: Strip "." from locale names too.
  + FlatpakDir: Add flatpak_dir_find_remote/local_related.
  + Add flatpak_dir_install_or_update.
  + Install/update/uninstall related refs.
  + builder: Set the new extension properties.
  + Bump version number since last release.
  + Document the metadata format.
  + lib: Support listing related refs.
  + Add some code I used to test the new related refs code.
  + doc/flatpak-metadata: Add some extra clarifications.
  + Update NEWS.
  + Require ostree 2016.6.
  + builder: Clear mtime to 1, not 0, to match what new ostree
    does.
  + Remove unused variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Change /usr/bin/tar Requires to /bin/tar: this has never been
  moved to /usr/bin.</changelog>
  <changelog author="dmacvicar@suse.de" date="1471348800">- Update to version 0.6.8:
  + Requires OSTree 2016.7, allowing to enable use of static delta
    for system downloads again.
  + Support --no-desktop which allows you to run a flatpak app
    outside a desktop, with some loss of functionallity
    (for example, there will be no systemd --user scope created for
    the app)..
  + More documentation.
  + Memory leak fixes.
  + Initial support for rpms as flatpak-builder archive sources.
  + Start work on translating the CLI.
  + Install systemd config snippet to set the right XDG_DATA_DIRS
    path.
  + Support --arch in flatpak list.
  + Support access() in the document portal.
  + Validate exported desktop files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473163200">- Update to version 0.6.9:
  + Dropped dependency on libgsystem.
  + Allow passing partial refs whenever a CLI command takes an app
    or runtime name.
  + New command build-commit-from creates a new commit based on the
    contents of another commit (optionally from another local
    repo).
  + The sandbox now contains $XDG_RUNTIME_DIR/app/$APPID from the
    host (and the directory is created if needed).
  + update: Better output, and faster for the no updates case.
  + build-export: Don't make most validation errors fail, instead
    just print a warning.
  + builder:
  - Support local path references for git sources.
  - Better handling of recursive git submodules.
  - Fixed issues with the .pyc mtime rewriting.
  - Handle symbolic icons for rename-icon.
  - Add --stop-at=$module to do partial builds.
  - Add --sandbox flag to disable the build from escaping from
    the sandbox via build-args.
  + Updated translations.
- Drop pkgconfig(libgsystem) BuildRequires following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 0.6.10:
  + Dropped requirement for systemd --user. The way we detect if an
    process we're talking to is sandboxed, and what application id
    it has doesn't use cgroups anymore, which means that the
    dependency on systemd in the user session is now optional. This
    also means the --no-desktop argument is not needed any more.
    (It is still accepted but does nothing.)
  + Initial support has been added for .flatpakref files. These are
    simple key value files similar to .flatpakrepo files, however
    they specify an application to install in addition to the repo
    information. For example, gedit can be installed by downloading
    https://sdk.gnome.org/gedit.flatpakref and running: flatpak
    install --from gedit.flatpakref There is also library support
    for this so it can be added to graphical installers (such as
    gnome-software).
  + Requires OSTree 2016.10. The change in how OSTree handles
    mtimes in checkouts that was introduced in 2016.7 has been
    reverted, and the required changes in Flatpak has been made.
    This means that flatpak now depends on OSTree 2016.10.
  + Requires Bubblewrap 0.1.2 for builds using the system
    bubblewrap. Builds using the included copy need no changes.
  + The $XDG_RUNTIME_DIR/flatpak-info file has added information
    about the running application, and is now also securely
    available for a running application from the host as
    "/proc/$fd/root/.flatpak-info". This is what is used to
    identify remote apps instead of the cgroup info.
  + A new run permission --allow=devel has been added. An
    application with this permission is allowed to use ptrace and
    perf. This was previously only available during "flatpak build"
    and "flatpak run -d". This is useful if you're packaging e.g.
    an IDE.
  + When an application is updated or removed a /app/.updated or
    /app/.removed file is created for running instances. This can
    be used by applications to trigger e.g. a restart for the new
    version.
  + A new dbus request "HostCommand" has been added to
    org.freedesktop.Flatpak. This lets you run any command on the
    host, and is therefore clearly not sandboxed, so access to this
    should be limited. However, it is very useful if you're using
    flatpak mainly as a distribution mechanism, for a non-sandboxed
    application.
  + flatpak-builder now supports running from inside a flatpak, by
    auto-detecting this and using the HostCommand service to run
    recursive flatpaks.
  + Consecutive calls to flatpak build-update-repo has been speed
    up.
  + The document portal now allows sandboxed applications to create
    references to files in /app and /usr (in the app/runtime).
  + The update process now doesn't stop at the first failure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 0.6.12:
  + Partial revert in application id rules. Application ids can now
    only have dashes in the last element. This allows apps to
    export files such as org.my.App-extra.desktop which was used by
    the libreoffice builds.
  + By default the kernel keyring is not accessable, as it is not
    containable.
  + Some robustness fixes for build-commit-from.
  + Better error messages.
  + flatpak update --appstream now updates for all remotes.
  + Made flatpak enter work, and you can now use any pid in the
    sandbox. However, it requires root permissions.
  + Support for --device=kvm for /dev/kvm access.
  + Support for --allow=multiarch to support non-primary arch
    support. For example running i686 code in an x86_64 app.
  + Add new default-branch setting for the remote configuration.
- Changes from version 0.6.11:
  + Dashes are now allowed in application ids. However, to still
    work with symbolic icon names, they may not end with
    "-symbolic".
  + HostCommand now handles ptys correctly.
  + Various documentation updates.
  + New FLATPAK_CHECK_VERSION macro in libflatpak.
  + HostCommand now returns the real PID rather than a fake one.
  + Fix regression in flatpak update --appstream.
  + Fix regression installing bundles without origin urls.
  + New flatpak-builder option --show-deps lists all the files the
    manifest depends on.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 0.6.13:
  + The command line arguments for install/update/uninstall
    changed.
  + Application runtime depencenies are checked/downloaded.
  + remote-add and install --from now supports uris.
  + flatpak run can now launch a runtime directly.
  + Updated bubblewrap to 0.1.3 (CVE-2016-8659).
  + Support for defining the default branch per remote.
  + remote-add/modify: --update-metadata pulls current title and
    default branch from remote summary file.
  + Applications can now list a set of URIs that will be downloaded
    with the application.
  + flatpak-builder: Support --finish-only and
  - -allow-missing-runtimes.
  + flatpak-builder: Support app layering.
  + dbus proxy: The filtering has been tightened up.
  + build-finish: Now exports icons for themes other than hicolor
    too.
  + There is support in the app metadata for generic policies.
  + Support for extensions directories.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Require flatpak by flatpak-devel: xdg-desktop-portal expects to
  find org.freedesktop.portal.Documents.xml, which is part of
  flatpak. It's fair to assume everything to be present when
  pulling in the -devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 0.6.14:
  + Update bundled bubblewrap to 0.1.4 which has some nice
    bugfixes.
  + Requires OSTree 2016.14, which allows us to drop some old
    workarounds.
  + When installing an application system-wide, don't consider
    dependencies that are installed for the user only.
  + Flatpak install --from now tries to re-use existing remotes to
    avoid creating unnecessary origin remotes.
  + Using --filesystem=$dir when $dir is a symlink-to-directory now
    works.
  + Using --filesystem=$file to expose unix sockets to the app is
    now allowed.
  + By default all the directories in ~/.var/app (except the app),
    as well as ~/.local/share/flatpak are hidden in the sandbox.
  + New option --filesystem=$dir:create which will create the
    destination if it did not previously exist.
  + --filesystem= now supports for xdg-[config|cache|data]. This
    allows you access to the host versions of these xdg dirs.
    Additionally if you use these with a subdirectory, like:
  - -filesystem=xdg-config/subdir then that subdirectory on the
    host will be shared with the per-app instance of the xdg-dir.
  + Builder now correctly handles app-ids that have dashes in them.
    Previously this generated invalid ids for the debuginfo and
    locale extensions.
  + The experimental OCI file format support was changed from
    creating an OCI container to creating an OCI image.
  + Fix regression where "flatpak update --appstream remotename"
    broke.</changelog>
  <changelog author="zaitor@opensuse.org" date="1482408000">- Update to version 0.8.0:
  + This is the first release in a new series of stable releases
    called 0.8.x. New features will be added to 0.9.x, and only
    bugfixes will be backported to 0.8.x. The featureset of this
    release is a good base to target if you're creating flatpaks
    that should be widely usable.
  + This release technically requires only OSTree 2016.14, and it
    build fine with this, but we recommend using OSTree 2016.15,
    because of the change in how it verifies the checksums of
    commits in delta files.
  + Flatpakrepo files now support a RuntimeRepo= key which points
    to a flatpakrepo file. This means the user don't have to
    manually configure a remote for the runtime, just reply to the
    prompt to automatically do this when installing the app.
  + We now support dependencies when installing bundles. This
    includes required runtimes, related refs, and the equivalent of
    RuntimeRepo.
  + The support for OCI in flatpak has been updated to the latest
    OCI spec version, and support has been added to directly
    install flatpak applications from an OCI image.
  + In flatpak install, the --from and --bundle options are now
    optional if the argument has the correct suffix (.flatpakref
    and .flatpak).
  + Flatpak install now supports -y to let you avoid interactive
    prompts.
  + build-finish:
  - We now export mime type files with the right name.
  - New --require-version option let you specify a particular
    version of flatpak, and older version of flatpak will not
    install or update to the new version.
  + build-sign: Allow signing all apps by omitting the id.
  + Fix regression in the document portal when adding named files.
  + build-import-bundle now signs the commit if you specify a gpg
    key.
  + Flatpak now reads configuration from
    /etc/flatpak/installations.d which lets you support multiple
    system-level installation paths. These can be accessed with
    new --installation=... arguments to most of the commands.
  + flatpak-builder:
  - Support --jobs=N to limit parallel builds.
  - Patch source got new options property that lets you pass
    arguments to patch.
  - New generic "buildsystem: type" option that replace the (now
    deprecated) "cmake: true" option. This supports "autotools",
    "cmake" and "meson".</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728000">- Update to version 0.8.1:
  + This is a bugfix and security update (CVE-2017-5226):
  - Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the
    sandbox, which works around the possibility to inject text on
    the controlling tty (CVE-2017-5226).
  - This was previously fixed in bubblewrap in 0.1.6, but that
    change has now been reverted as it introduced other problems
    for flatpak.
  + Update bundled bubblewrap to 0.1.7.
  + Fix writing new file with O_EXCL in the document portal.
  + Allow appstream data that doesn't have .desktop in the
    component id, such as data for runtimes.
  + Drop json-glib dependency from 1.2 to 1.0.
  + Builder: Fail if unable to read included file.
  + OCI: Ensure exported layers are readable by everyone.
  + Fix extra-data download in gnome-software.
  + Fix update-mime-database trigger when installing via the system
    helper.
  + Updating an app by installing a newer bundle now works again.
  + Make /var/tmp not be on a tmpfs (it is now in
    ~/.var/app/$appid/cache/tmp).
  + Updated documentation.
  + Updated translations.</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728001">- Update to version 0.8.2:
  + This is a bugfix and security update:
  - Some of the bind-mounts that flatpak sets up were not
    read-only as they should have. This includes: extensions,
    system fonts, resolv.conf, localtime and machine-id. Many of
    these are typically only writable by root, but some, like the
    user-specific fonts and user-installed extensions could be
    modified from the sandbox.
  + Other fixes:
  - There are new configure options for where to install dbus
    configuration.
  - Broken symlinks in the root directory no longer break flatpak
    run.
  - flatpak run with HOME in /var now works.
  - dri access now also handles mali devices.
  - install handles --arch when installing flatpakrefs.
  - system-helper activation fixed on systemd-less setups.
  - dbus-proxy now works without /run.
  - During installation, failing to update a dependency is now
    not fatal.
  - /etc is now fully writable when building runtimes.
  - --filesystem=xdg-config/foo now sets up the bind-mount from
    the host dir even when not using :create.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1487160000">- Add flatpak-propagate-xauth-wildcard.patch which ensures
  applications have the right to communicate with the X server.
  (gh#flatpak/flatpak#569).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 0.8.3:
  + In addition to the regular list of bugfixes this stable release
    include backports of the updated OpenGL support from master.
    This, in combination with the work in the runtime allows
    flatpak to work out of the box with out-of-tree OpenGL drivers,
    including the nvidia driver.
  + Additionally, due to some complicated issues wrt ptrace and
    user namespaces this version disables the use of user
    namespaces if bubblewrap is setuid, as it cause problems for
    the way flatpak portals identifies applications.
  + Better handling of errors for extra-data.
  + Handle extra-data properly for runtimes (as well as apps).
  + Respect required version for runtimes (as well as apps).
  + flatpak list: Don't break if some local ref is not deployed.
  + builder:
  - Look for appstream data in /app/share/metadata also.
  - Fix buildsystem=cmake builds.
  + Add progress reporting to extra-data download.
  + Fix uid/gid for directories in document portal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489147200">- Update to version 0.8.4:
  + Fix no-systemd-user warning (it doesn't affect sandboxing
    anymore).
  + run: propagate wildcard xauth entries to app bundle.
  + Don't remove origin remotes if some other ref uses it.
  + Fix repeated download of locates on update.
  + update: Don't update related refs from different remote.
  + Initialize g_autofree string to NULL, not to crash when early
    returning.
  + document portal: Disable spice_read as it seems broken.
  + Return the container from flatpak_get_system_installations().
  + Don't include newlines in error messages.
  + utils: Fix list_unmtainained_refs.
  + Avoid possible null dereference.
  + utils: Fix flatpak_bundle_load typo.
  + list: Don't check error twice.
  + list-remotes: Handle remotes with no url specified.
  + run: Handle error when enumerating /etc.
  + zero-mtime: Handle error when enumerating directory.
  + Fix error check when loading configuration.
  + Support runtime-less extra-data.
  + flatpak_list_extensions: Break out code into helper.
  + extensions: Support multiple versions.
  + Append flatpak data dirs if XDG_DATA_DIRS is already set
    (gh#flatpak/flatpak#611).
  + appstream: Don't add runtime to flatpak bundle tag for
    runtimes.
  + Split extra-data setup and fetch.
  + Improve progress calculation.
  + profile: Don't add flatpak to XDG_DATA_DIRS if its already
    there.
  + Updated translations.
- Drop flatpak-propagate-xauth-wildcard.patch: fixed upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1497960000">- Update to version 0.8.6:
  + TMPDIR is now unset in the sandbox, if set on the host. Each
    sandbox has a personal /tmp that is used.
  + Flatpak run now works if /tmp is a symlink on the host.
  + /etc/hosts and /etc/hosts.conf from the host are now exposed in
    the sandbox in addition to /etc/resolv.conf.
  + Flatpak now stores the app id in the X-Flatpak key when
    exporting a desktop file.
  + Exports are now whitelisted, and the only thing you can export
    are desktop files, icons and dbus services. This is somewhat
    different from the 0.9.x series, where als mime definitions,
    and gnome-shell search providers are allowed.
  + Fixed minor race condition in portal application
    identification.
  + Support WAYLAND_DISPLAY environment var.
  + dbus-portal: Fix handling of NameHasOwner.
  + run: Allow regular files for --filesystem=xdg-config/path.
  + run: Allow --filesystem=xdg-config/subdir:ro (previously it
    needed to be writable).
  + Support for updating to new gpg keys and url when using flatpak
    remote-modify --update-metadata. This is a manual operation in
    0.8.x but is automatic in the 0.9.x series.
- Changes from 0.8.5:
  + Fixed a use-after-free and some leaks in the dbus-proxy. This
    is not currently believed to be exploitable, but the proxy is a
    security boundary, so we still recommend to update.
  + Regular updates now never allow updates to an older version
    than what is currently installed (unless you explicitly specify
    an old commit id). This closes a hole where a MITM attacker can
    force clients to downgrade to an earlier (gpg-signed) version
    of the application.
  + The automatic detection of --from in flatpak install now
    detects flatpakref extensions even in URIs that end in a query
    string.
  + The detection of "unmaintained" system extensions was broken,
    and in some cases these extensions were not found. This now
    always works.
  + Flatpak now builds with latest OSTree. This required some
    fixing for multiple definitions of the g_auto* macros as OSTree
    now exports those.
  + We no longer rely on ostree trivial-httpd for the tests,
    because this is optional in later versions of ostree. Instead
    we use they python SimpleHTTPServer.
- Set the minimum glib version to 2.44.
- Replace pkgconfig(libelf) BuildRequires by libelf-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517486400">- Update to version 0.8.9:
  + This is a security fix release that fixes a sandbox escape in
    the flatpak dbus proxy (bsc#1078923)
  + Changes:
  - Fix dbus proxy vulnerability in authentication phase;
  - Make permission handling ignore unknown permissions for
    forwards compatibility;
  - Improved profile snippet.
- Changes from version 0.8.8:
  + This is a minor security update, as well as an update to match
    some sandbox behaviours that were added to the 0.10.0 release.
  + Changes:
  - SECURITY: Forbit old-style eavesdropping in the dbus proxy;
    (bsc#1078993)
  - Expose icons from host in /run/host/share/icons;
  - Ensure fontconfig caches are per-sandbox;
  - Some problematic env vars are no longer inherited from the
    host;
  - The LD_LIBRARY_PATH order is now correct for extensions with
    different priorities;
  - Extensions are now mounted in the correct orders, even if
    they have different priorities, fixing steam;
  - Disable debug spew in the document portal fuse filesystem;
  - Now it works with the current version of ostree.
- Changes from version 0.8.7:
  + This is a minor security update, matching the behaviour on
    master where we avoid ever creating setuid files or
    world-writable directories. However, the fix is more localized
    and does not require a new ostree.
  + Changes:
  - After pulling from a remote, always verify that the staged
    new files and directories have safe permissions;
    (bsc#1078989)
  - Ensure ~/.local/share/flatpak is not readable to other users,
    to avoid anyone ever seeing possibly world-writeable
    directories therein;
  - Fix double-setting an error in case of errors when pulling;
  - Fix timeout in testcase.
- Update Url tag to https://flatpak.org/ since it is the current
  Flatpak project's home page.</changelog>
</package>
<package pkgid="5ae4684ec0cddcfc5eda1e5457ee8a3a3814a9bb980b42cb44db58568fe17fb7" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="0.8.9" rel="3.1"/>
  <changelog author="dimstar@opensuse.org" date="1461153600">- Update to version 0.5.2:
  + The way locale extensions work has changed. Now we build a
    single extension for all locales, but we allow you to specify a
    subset of it during installation and update time using the
  - -subpath commandline flag. The main reason for this is that
    the many extensions didn't scale, both in technical terms
    (large ostree summary file size), but also in terms of the UI
    listing hundreds of uninteresting things.
  + We no longer use sizes in the commit objects to get installed
    and download size, instead we store some extra metadata in the
    summary file. This allows us to get much faster access to
    these, as with recent ostree versions we can cache the summary
    file.
  + New command xdg-app build-sign that lets you sign a commit at
    any time.
  + New argument xdg-app build --force-clean that removes
    pre-existing build dirs.
  + xdg-app run now uses the "current" version as the default if
    you specify no branch or arch. It used to default to the
    "master" branch. This will default to the last installed
    version, but can be changed with xdg-app make-current.
  + Added config-opts to the build-options in xdg-app-builder. This
    allows you to extend the configure flags in an arch dependent
    way.
  + Documentation updates.</changelog>
  <changelog author="tchvatal@suse.com" date="1465387200">- Version update to 0.6.4:
  + Rename to flatpack
  + New homepage and download url
  + Various fixes</changelog>
  <changelog author="fcrozat@suse.com" date="1467115200">- Update to version 0.6.6:
  + lib: Add flatpak_get_supported_arches.
  + Add flatpak --supported-arches.
  + common: Make some internal functions static.
  + update: Always look at all existing apps when updating.
  + Disable static deltas for system-helper updates.
  + Make finding refs handle multi-arch.
  + make-current: Use find_installed_ref().
  + remote-ls: Better multiarch support.
- Changes from 0.6.5:
  + Documentation improvements
  + builder: Check that the specified command exists after build is
    done.
  + builder: Fix up mtime in headers for python precompiled files.
  + builder: Allow submodules and including modules from other json
    files.
  + system-helper builds are optional (--disable-system-helper).
  + system-helper: Support installing from local remotes and
    bundles.
  + Improved support for --subpath installs, including libflatpak
    support.
  + Improved command line completion.
- Create /var/lib/flatpak directory, own it and ensure system wide
  repo exists when installing / updating flatpak package.
- Add pkgconfig(libarchive) &gt;= 2.8.0 and gtk-doc to BuildRequires.
- Replace libelf-devel for pkgconfig(libelf) BuildRequires.
- Bump ostree minimal requirements to 2016.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467460800">- Update to version 0.6.7:
  + Expand the flatpak run --devel docs.
  + Add an option for journal sockets.
  + Document new socket option.
  + Fix builddir option type in flatpak-builder documentation.
  + document portal: don't reply to GetMountPoint() until ready.
  + Downgrade failure to get document portal from warning to
    message.
  + tests: don't treat helper scripts as though they were tests.
  + Run tests with a private XDG_RUNTIME_DIR.
  + Add BWRAP and --with-system-bubblewrap configure arguments.
  + test-basic: do not fail in non-English locales.
  + Update to latest libglnx with lock release fix.
  + fix warning.
  + Fix leak in flatpak-installed-ref.
  + utils: Add flatpak_spawnv() helper.
  + builder: Add "use-git" option for patch source type.
  + Make journal always available in the sandbox.
  + builder: Report errors to stderr, not stdout.
  + tests: Add test for "use-git" patch application.
  + tests/test-builder.sh: Re-silence flatpak-builder.
  + tests: Test install/updates with static deltas.
  + extensions: Minor cleanup.
  + Add tests for extensions.
  + extensions: Always create a tmpfs for subdirectory extensions.
  + common: Remove unused functions.
  + utils: Add flatpak_get_current_locale_subpaths().
  + utils: Add flatpak_summary_match_subrefs.
  + builder: Strip "." from locale names too.
  + FlatpakDir: Add flatpak_dir_find_remote/local_related.
  + Add flatpak_dir_install_or_update.
  + Install/update/uninstall related refs.
  + builder: Set the new extension properties.
  + Bump version number since last release.
  + Document the metadata format.
  + lib: Support listing related refs.
  + Add some code I used to test the new related refs code.
  + doc/flatpak-metadata: Add some extra clarifications.
  + Update NEWS.
  + Require ostree 2016.6.
  + builder: Clear mtime to 1, not 0, to match what new ostree
    does.
  + Remove unused variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Change /usr/bin/tar Requires to /bin/tar: this has never been
  moved to /usr/bin.</changelog>
  <changelog author="dmacvicar@suse.de" date="1471348800">- Update to version 0.6.8:
  + Requires OSTree 2016.7, allowing to enable use of static delta
    for system downloads again.
  + Support --no-desktop which allows you to run a flatpak app
    outside a desktop, with some loss of functionallity
    (for example, there will be no systemd --user scope created for
    the app)..
  + More documentation.
  + Memory leak fixes.
  + Initial support for rpms as flatpak-builder archive sources.
  + Start work on translating the CLI.
  + Install systemd config snippet to set the right XDG_DATA_DIRS
    path.
  + Support --arch in flatpak list.
  + Support access() in the document portal.
  + Validate exported desktop files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473163200">- Update to version 0.6.9:
  + Dropped dependency on libgsystem.
  + Allow passing partial refs whenever a CLI command takes an app
    or runtime name.
  + New command build-commit-from creates a new commit based on the
    contents of another commit (optionally from another local
    repo).
  + The sandbox now contains $XDG_RUNTIME_DIR/app/$APPID from the
    host (and the directory is created if needed).
  + update: Better output, and faster for the no updates case.
  + build-export: Don't make most validation errors fail, instead
    just print a warning.
  + builder:
  - Support local path references for git sources.
  - Better handling of recursive git submodules.
  - Fixed issues with the .pyc mtime rewriting.
  - Handle symbolic icons for rename-icon.
  - Add --stop-at=$module to do partial builds.
  - Add --sandbox flag to disable the build from escaping from
    the sandbox via build-args.
  + Updated translations.
- Drop pkgconfig(libgsystem) BuildRequires following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 0.6.10:
  + Dropped requirement for systemd --user. The way we detect if an
    process we're talking to is sandboxed, and what application id
    it has doesn't use cgroups anymore, which means that the
    dependency on systemd in the user session is now optional. This
    also means the --no-desktop argument is not needed any more.
    (It is still accepted but does nothing.)
  + Initial support has been added for .flatpakref files. These are
    simple key value files similar to .flatpakrepo files, however
    they specify an application to install in addition to the repo
    information. For example, gedit can be installed by downloading
    https://sdk.gnome.org/gedit.flatpakref and running: flatpak
    install --from gedit.flatpakref There is also library support
    for this so it can be added to graphical installers (such as
    gnome-software).
  + Requires OSTree 2016.10. The change in how OSTree handles
    mtimes in checkouts that was introduced in 2016.7 has been
    reverted, and the required changes in Flatpak has been made.
    This means that flatpak now depends on OSTree 2016.10.
  + Requires Bubblewrap 0.1.2 for builds using the system
    bubblewrap. Builds using the included copy need no changes.
  + The $XDG_RUNTIME_DIR/flatpak-info file has added information
    about the running application, and is now also securely
    available for a running application from the host as
    "/proc/$fd/root/.flatpak-info". This is what is used to
    identify remote apps instead of the cgroup info.
  + A new run permission --allow=devel has been added. An
    application with this permission is allowed to use ptrace and
    perf. This was previously only available during "flatpak build"
    and "flatpak run -d". This is useful if you're packaging e.g.
    an IDE.
  + When an application is updated or removed a /app/.updated or
    /app/.removed file is created for running instances. This can
    be used by applications to trigger e.g. a restart for the new
    version.
  + A new dbus request "HostCommand" has been added to
    org.freedesktop.Flatpak. This lets you run any command on the
    host, and is therefore clearly not sandboxed, so access to this
    should be limited. However, it is very useful if you're using
    flatpak mainly as a distribution mechanism, for a non-sandboxed
    application.
  + flatpak-builder now supports running from inside a flatpak, by
    auto-detecting this and using the HostCommand service to run
    recursive flatpaks.
  + Consecutive calls to flatpak build-update-repo has been speed
    up.
  + The document portal now allows sandboxed applications to create
    references to files in /app and /usr (in the app/runtime).
  + The update process now doesn't stop at the first failure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 0.6.12:
  + Partial revert in application id rules. Application ids can now
    only have dashes in the last element. This allows apps to
    export files such as org.my.App-extra.desktop which was used by
    the libreoffice builds.
  + By default the kernel keyring is not accessable, as it is not
    containable.
  + Some robustness fixes for build-commit-from.
  + Better error messages.
  + flatpak update --appstream now updates for all remotes.
  + Made flatpak enter work, and you can now use any pid in the
    sandbox. However, it requires root permissions.
  + Support for --device=kvm for /dev/kvm access.
  + Support for --allow=multiarch to support non-primary arch
    support. For example running i686 code in an x86_64 app.
  + Add new default-branch setting for the remote configuration.
- Changes from version 0.6.11:
  + Dashes are now allowed in application ids. However, to still
    work with symbolic icon names, they may not end with
    "-symbolic".
  + HostCommand now handles ptys correctly.
  + Various documentation updates.
  + New FLATPAK_CHECK_VERSION macro in libflatpak.
  + HostCommand now returns the real PID rather than a fake one.
  + Fix regression in flatpak update --appstream.
  + Fix regression installing bundles without origin urls.
  + New flatpak-builder option --show-deps lists all the files the
    manifest depends on.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 0.6.13:
  + The command line arguments for install/update/uninstall
    changed.
  + Application runtime depencenies are checked/downloaded.
  + remote-add and install --from now supports uris.
  + flatpak run can now launch a runtime directly.
  + Updated bubblewrap to 0.1.3 (CVE-2016-8659).
  + Support for defining the default branch per remote.
  + remote-add/modify: --update-metadata pulls current title and
    default branch from remote summary file.
  + Applications can now list a set of URIs that will be downloaded
    with the application.
  + flatpak-builder: Support --finish-only and
  - -allow-missing-runtimes.
  + flatpak-builder: Support app layering.
  + dbus proxy: The filtering has been tightened up.
  + build-finish: Now exports icons for themes other than hicolor
    too.
  + There is support in the app metadata for generic policies.
  + Support for extensions directories.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Require flatpak by flatpak-devel: xdg-desktop-portal expects to
  find org.freedesktop.portal.Documents.xml, which is part of
  flatpak. It's fair to assume everything to be present when
  pulling in the -devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 0.6.14:
  + Update bundled bubblewrap to 0.1.4 which has some nice
    bugfixes.
  + Requires OSTree 2016.14, which allows us to drop some old
    workarounds.
  + When installing an application system-wide, don't consider
    dependencies that are installed for the user only.
  + Flatpak install --from now tries to re-use existing remotes to
    avoid creating unnecessary origin remotes.
  + Using --filesystem=$dir when $dir is a symlink-to-directory now
    works.
  + Using --filesystem=$file to expose unix sockets to the app is
    now allowed.
  + By default all the directories in ~/.var/app (except the app),
    as well as ~/.local/share/flatpak are hidden in the sandbox.
  + New option --filesystem=$dir:create which will create the
    destination if it did not previously exist.
  + --filesystem= now supports for xdg-[config|cache|data]. This
    allows you access to the host versions of these xdg dirs.
    Additionally if you use these with a subdirectory, like:
  - -filesystem=xdg-config/subdir then that subdirectory on the
    host will be shared with the per-app instance of the xdg-dir.
  + Builder now correctly handles app-ids that have dashes in them.
    Previously this generated invalid ids for the debuginfo and
    locale extensions.
  + The experimental OCI file format support was changed from
    creating an OCI container to creating an OCI image.
  + Fix regression where "flatpak update --appstream remotename"
    broke.</changelog>
  <changelog author="zaitor@opensuse.org" date="1482408000">- Update to version 0.8.0:
  + This is the first release in a new series of stable releases
    called 0.8.x. New features will be added to 0.9.x, and only
    bugfixes will be backported to 0.8.x. The featureset of this
    release is a good base to target if you're creating flatpaks
    that should be widely usable.
  + This release technically requires only OSTree 2016.14, and it
    build fine with this, but we recommend using OSTree 2016.15,
    because of the change in how it verifies the checksums of
    commits in delta files.
  + Flatpakrepo files now support a RuntimeRepo= key which points
    to a flatpakrepo file. This means the user don't have to
    manually configure a remote for the runtime, just reply to the
    prompt to automatically do this when installing the app.
  + We now support dependencies when installing bundles. This
    includes required runtimes, related refs, and the equivalent of
    RuntimeRepo.
  + The support for OCI in flatpak has been updated to the latest
    OCI spec version, and support has been added to directly
    install flatpak applications from an OCI image.
  + In flatpak install, the --from and --bundle options are now
    optional if the argument has the correct suffix (.flatpakref
    and .flatpak).
  + Flatpak install now supports -y to let you avoid interactive
    prompts.
  + build-finish:
  - We now export mime type files with the right name.
  - New --require-version option let you specify a particular
    version of flatpak, and older version of flatpak will not
    install or update to the new version.
  + build-sign: Allow signing all apps by omitting the id.
  + Fix regression in the document portal when adding named files.
  + build-import-bundle now signs the commit if you specify a gpg
    key.
  + Flatpak now reads configuration from
    /etc/flatpak/installations.d which lets you support multiple
    system-level installation paths. These can be accessed with
    new --installation=... arguments to most of the commands.
  + flatpak-builder:
  - Support --jobs=N to limit parallel builds.
  - Patch source got new options property that lets you pass
    arguments to patch.
  - New generic "buildsystem: type" option that replace the (now
    deprecated) "cmake: true" option. This supports "autotools",
    "cmake" and "meson".</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728000">- Update to version 0.8.1:
  + This is a bugfix and security update (CVE-2017-5226):
  - Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the
    sandbox, which works around the possibility to inject text on
    the controlling tty (CVE-2017-5226).
  - This was previously fixed in bubblewrap in 0.1.6, but that
    change has now been reverted as it introduced other problems
    for flatpak.
  + Update bundled bubblewrap to 0.1.7.
  + Fix writing new file with O_EXCL in the document portal.
  + Allow appstream data that doesn't have .desktop in the
    component id, such as data for runtimes.
  + Drop json-glib dependency from 1.2 to 1.0.
  + Builder: Fail if unable to read included file.
  + OCI: Ensure exported layers are readable by everyone.
  + Fix extra-data download in gnome-software.
  + Fix update-mime-database trigger when installing via the system
    helper.
  + Updating an app by installing a newer bundle now works again.
  + Make /var/tmp not be on a tmpfs (it is now in
    ~/.var/app/$appid/cache/tmp).
  + Updated documentation.
  + Updated translations.</changelog>
  <changelog author="kamikazow@opensuse.org" date="1486728001">- Update to version 0.8.2:
  + This is a bugfix and security update:
  - Some of the bind-mounts that flatpak sets up were not
    read-only as they should have. This includes: extensions,
    system fonts, resolv.conf, localtime and machine-id. Many of
    these are typically only writable by root, but some, like the
    user-specific fonts and user-installed extensions could be
    modified from the sandbox.
  + Other fixes:
  - There are new configure options for where to install dbus
    configuration.
  - Broken symlinks in the root directory no longer break flatpak
    run.
  - flatpak run with HOME in /var now works.
  - dri access now also handles mali devices.
  - install handles --arch when installing flatpakrefs.
  - system-helper activation fixed on systemd-less setups.
  - dbus-proxy now works without /run.
  - During installation, failing to update a dependency is now
    not fatal.
  - /etc is now fully writable when building runtimes.
  - --filesystem=xdg-config/foo now sets up the bind-mount from
    the host dir even when not using :create.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1487160000">- Add flatpak-propagate-xauth-wildcard.patch which ensures
  applications have the right to communicate with the X server.
  (gh#flatpak/flatpak#569).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 0.8.3:
  + In addition to the regular list of bugfixes this stable release
    include backports of the updated OpenGL support from master.
    This, in combination with the work in the runtime allows
    flatpak to work out of the box with out-of-tree OpenGL drivers,
    including the nvidia driver.
  + Additionally, due to some complicated issues wrt ptrace and
    user namespaces this version disables the use of user
    namespaces if bubblewrap is setuid, as it cause problems for
    the way flatpak portals identifies applications.
  + Better handling of errors for extra-data.
  + Handle extra-data properly for runtimes (as well as apps).
  + Respect required version for runtimes (as well as apps).
  + flatpak list: Don't break if some local ref is not deployed.
  + builder:
  - Look for appstream data in /app/share/metadata also.
  - Fix buildsystem=cmake builds.
  + Add progress reporting to extra-data download.
  + Fix uid/gid for directories in document portal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489147200">- Update to version 0.8.4:
  + Fix no-systemd-user warning (it doesn't affect sandboxing
    anymore).
  + run: propagate wildcard xauth entries to app bundle.
  + Don't remove origin remotes if some other ref uses it.
  + Fix repeated download of locates on update.
  + update: Don't update related refs from different remote.
  + Initialize g_autofree string to NULL, not to crash when early
    returning.
  + document portal: Disable spice_read as it seems broken.
  + Return the container from flatpak_get_system_installations().
  + Don't include newlines in error messages.
  + utils: Fix list_unmtainained_refs.
  + Avoid possible null dereference.
  + utils: Fix flatpak_bundle_load typo.
  + list: Don't check error twice.
  + list-remotes: Handle remotes with no url specified.
  + run: Handle error when enumerating /etc.
  + zero-mtime: Handle error when enumerating directory.
  + Fix error check when loading configuration.
  + Support runtime-less extra-data.
  + flatpak_list_extensions: Break out code into helper.
  + extensions: Support multiple versions.
  + Append flatpak data dirs if XDG_DATA_DIRS is already set
    (gh#flatpak/flatpak#611).
  + appstream: Don't add runtime to flatpak bundle tag for
    runtimes.
  + Split extra-data setup and fetch.
  + Improve progress calculation.
  + profile: Don't add flatpak to XDG_DATA_DIRS if its already
    there.
  + Updated translations.
- Drop flatpak-propagate-xauth-wildcard.patch: fixed upstream.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1497960000">- Update to version 0.8.6:
  + TMPDIR is now unset in the sandbox, if set on the host. Each
    sandbox has a personal /tmp that is used.
  + Flatpak run now works if /tmp is a symlink on the host.
  + /etc/hosts and /etc/hosts.conf from the host are now exposed in
    the sandbox in addition to /etc/resolv.conf.
  + Flatpak now stores the app id in the X-Flatpak key when
    exporting a desktop file.
  + Exports are now whitelisted, and the only thing you can export
    are desktop files, icons and dbus services. This is somewhat
    different from the 0.9.x series, where als mime definitions,
    and gnome-shell search providers are allowed.
  + Fixed minor race condition in portal application
    identification.
  + Support WAYLAND_DISPLAY environment var.
  + dbus-portal: Fix handling of NameHasOwner.
  + run: Allow regular files for --filesystem=xdg-config/path.
  + run: Allow --filesystem=xdg-config/subdir:ro (previously it
    needed to be writable).
  + Support for updating to new gpg keys and url when using flatpak
    remote-modify --update-metadata. This is a manual operation in
    0.8.x but is automatic in the 0.9.x series.
- Changes from 0.8.5:
  + Fixed a use-after-free and some leaks in the dbus-proxy. This
    is not currently believed to be exploitable, but the proxy is a
    security boundary, so we still recommend to update.
  + Regular updates now never allow updates to an older version
    than what is currently installed (unless you explicitly specify
    an old commit id). This closes a hole where a MITM attacker can
    force clients to downgrade to an earlier (gpg-signed) version
    of the application.
  + The automatic detection of --from in flatpak install now
    detects flatpakref extensions even in URIs that end in a query
    string.
  + The detection of "unmaintained" system extensions was broken,
    and in some cases these extensions were not found. This now
    always works.
  + Flatpak now builds with latest OSTree. This required some
    fixing for multiple definitions of the g_auto* macros as OSTree
    now exports those.
  + We no longer rely on ostree trivial-httpd for the tests,
    because this is optional in later versions of ostree. Instead
    we use they python SimpleHTTPServer.
- Set the minimum glib version to 2.44.
- Replace pkgconfig(libelf) BuildRequires by libelf-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517486400">- Update to version 0.8.9:
  + This is a security fix release that fixes a sandbox escape in
    the flatpak dbus proxy (bsc#1078923)
  + Changes:
  - Fix dbus proxy vulnerability in authentication phase;
  - Make permission handling ignore unknown permissions for
    forwards compatibility;
  - Improved profile snippet.
- Changes from version 0.8.8:
  + This is a minor security update, as well as an update to match
    some sandbox behaviours that were added to the 0.10.0 release.
  + Changes:
  - SECURITY: Forbit old-style eavesdropping in the dbus proxy;
    (bsc#1078993)
  - Expose icons from host in /run/host/share/icons;
  - Ensure fontconfig caches are per-sandbox;
  - Some problematic env vars are no longer inherited from the
    host;
  - The LD_LIBRARY_PATH order is now correct for extensions with
    different priorities;
  - Extensions are now mounted in the correct orders, even if
    they have different priorities, fixing steam;
  - Disable debug spew in the document portal fuse filesystem;
  - Now it works with the current version of ostree.
- Changes from version 0.8.7:
  + This is a minor security update, matching the behaviour on
    master where we avoid ever creating setuid files or
    world-writable directories. However, the fix is more localized
    and does not require a new ostree.
  + Changes:
  - After pulling from a remote, always verify that the staged
    new files and directories have safe permissions;
    (bsc#1078989)
  - Ensure ~/.local/share/flatpak is not readable to other users,
    to avoid anyone ever seeing possibly world-writeable
    directories therein;
  - Fix double-setting an error in case of errors when pulling;
  - Fix timeout in testcase.
- Update Url tag to https://flatpak.org/ since it is the current
  Flatpak project's home page.</changelog>
</package>
<package pkgid="9eb0931eaa83c55c637428b45fc0947e3bd3202a958924ca59002e6d0972fa69" name="fonts-config" arch="noarch">
  <version epoch="0" ver="20150424" rel="7.3.1"/>
  <changelog author="pgajdos@suse.com" date="1395316800">- fix default values and use list of possibilities in sysconfig
  file [bnc#869398] (internal)</changelog>
  <changelog author="pgajdos@suse.com" date="1395403200">- updated to 20140331:
  * allow ampersand in string sysconfig variable
  * xml-escape ampersand from &lt;alias&gt; family names
  * added bitmap font example for PREFER_*_FAMILIES</changelog>
  <changelog author="tiwai@suse.de" date="1400068800">- Don't force antialias for bitmap fonts for avoiding the render
  errors with Qt5 (bnc#866705)</changelog>
  <changelog author="pgajdos@suse.com" date="1400155200">- fix comment for SEARCH_METRIC_COMPATIBLE</changelog>
  <changelog author="pgajdos@suse.com" date="1400760000">- fallback to DejaVu Sans, Liberation Sans FPL order when
  no force_bw defined [bnc#878292c#12]</changelog>
  <changelog author="pgajdos@suse.com" date="1401883200">- updated to 20140604:
  * remove duplicate family from PREFER_SERIF_FAMILIES in CFF
    example
  * add Source Serif Pro to PREFER_SERIF_FAMILIES in CFF example
  * introduce FORCE_FAMILY_PREFERENCE_LISTS sysconfig variable</changelog>
  <changelog author="pgajdos@suse.com" date="1402488000">- 10-rendering-options.conf and 58-family-prefer-local.conf are
  generated in every fonts-config call and as such should not
  be under /usr/share/fonts-config/conf.avail but under
  /etc/fonts/conf.d/ [bnc#882029]</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- fixed typos in comments and debug outputs (hinstyle -&gt; hintstyle)</changelog>
  <changelog author="pgajdos@suse.com" date="1411387200">- fix version in fonts-config script</changelog>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- cjk changes:
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Update 60-family-prefer.conf: fix misspelling in
  configuration file(boo#1111791)</changelog>
</package>
<package pkgid="9b663033db8105a2799a8c216d2d3973fef8ff3c40e7ef7b7c7c8b23582d8f82" name="fonts-config" arch="src">
  <version epoch="0" ver="20150424" rel="7.3.1"/>
  <changelog author="pgajdos@suse.com" date="1395316800">- fix default values and use list of possibilities in sysconfig
  file [bnc#869398] (internal)</changelog>
  <changelog author="pgajdos@suse.com" date="1395403200">- updated to 20140331:
  * allow ampersand in string sysconfig variable
  * xml-escape ampersand from &lt;alias&gt; family names
  * added bitmap font example for PREFER_*_FAMILIES</changelog>
  <changelog author="tiwai@suse.de" date="1400068800">- Don't force antialias for bitmap fonts for avoiding the render
  errors with Qt5 (bnc#866705)</changelog>
  <changelog author="pgajdos@suse.com" date="1400155200">- fix comment for SEARCH_METRIC_COMPATIBLE</changelog>
  <changelog author="pgajdos@suse.com" date="1400760000">- fallback to DejaVu Sans, Liberation Sans FPL order when
  no force_bw defined [bnc#878292c#12]</changelog>
  <changelog author="pgajdos@suse.com" date="1401883200">- updated to 20140604:
  * remove duplicate family from PREFER_SERIF_FAMILIES in CFF
    example
  * add Source Serif Pro to PREFER_SERIF_FAMILIES in CFF example
  * introduce FORCE_FAMILY_PREFERENCE_LISTS sysconfig variable</changelog>
  <changelog author="pgajdos@suse.com" date="1402488000">- 10-rendering-options.conf and 58-family-prefer-local.conf are
  generated in every fonts-config call and as such should not
  be under /usr/share/fonts-config/conf.avail but under
  /etc/fonts/conf.d/ [bnc#882029]</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- fixed typos in comments and debug outputs (hinstyle -&gt; hintstyle)</changelog>
  <changelog author="pgajdos@suse.com" date="1411387200">- fix version in fonts-config script</changelog>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- cjk changes:
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Update 60-family-prefer.conf: fix misspelling in
  configuration file(boo#1111791)</changelog>
</package>
<package pkgid="92b570649f8d0e47ee1a2adaa42ec3d9586a151c45d0f3263b5e14760164e024" name="fonts-config" arch="noarch">
  <version epoch="0" ver="20180430" rel="7.6.1"/>
  <changelog author="pgajdos@suse.com" date="1402488000">- 10-rendering-options.conf and 58-family-prefer-local.conf are
  generated in every fonts-config call and as such should not
  be under /usr/share/fonts-config/conf.avail but under
  /etc/fonts/conf.d/ [bnc#882029]</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- fixed typos in comments and debug outputs (hinstyle -&gt; hintstyle)</changelog>
  <changelog author="pgajdos@suse.com" date="1411387200">- fix version in fonts-config script</changelog>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="qzhao@suse.com" date="1542283200">- Sync the factory edition to SLE-12-SP2: Porting many fix for font
  rendering, especially for(bnc#1101985).</changelog>
</package>
<package pkgid="e42f5dbb3df17db3b885d0d269303647f513d87e0a44824681021a4abb444a2c" name="fonts-config" arch="src">
  <version epoch="0" ver="20180430" rel="7.6.1"/>
  <changelog author="pgajdos@suse.com" date="1402488000">- 10-rendering-options.conf and 58-family-prefer-local.conf are
  generated in every fonts-config call and as such should not
  be under /usr/share/fonts-config/conf.avail but under
  /etc/fonts/conf.d/ [bnc#882029]</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- fixed typos in comments and debug outputs (hinstyle -&gt; hintstyle)</changelog>
  <changelog author="pgajdos@suse.com" date="1411387200">- fix version in fonts-config script</changelog>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="qzhao@suse.com" date="1542283200">- Sync the factory edition to SLE-12-SP2: Porting many fix for font
  rendering, especially for(bnc#1101985).</changelog>
</package>
<package pkgid="4e6bfc8a7cb2f9e5fdb4a46545d14c80d5d3ef79da34832621c0f7999fb2667f" name="fossil" arch="src">
  <version epoch="0" ver="2.3" rel="3.1"/>
  <changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
  <changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
  <changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
  <changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
  <changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
  <changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
  <changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
  <changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
</package>
<package pkgid="bd8b22fe2058209393f55f5d749327eb2d727bc10bda8bebbb76089be2b6ada3" name="fossil" arch="x86_64">
  <version epoch="0" ver="2.3" rel="3.1"/>
  <changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
  <changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
  <changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
  <changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
  <changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
  <changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
  <changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
  <changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
</package>
<package pkgid="b5e9ada15d58e82d533fc8a4bfa71ddc1ca9ff7314cbe9c2235745b82322a4e9" name="fossil" arch="src">
  <version epoch="0" ver="2.4" rel="6.1"/>
  <changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
  <changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
  <changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
  <changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
  <changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
  <changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
  <changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
  <changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
</package>
<package pkgid="9b35de901da8d1907e7665e5006aff088ce17693e313f47af75cf7a626dedbc5" name="fossil" arch="x86_64">
  <version epoch="0" ver="2.4" rel="6.1"/>
  <changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
  <changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
  <changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
  <changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
  <changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
  <changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
  <changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
  <changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
</package>
<package pkgid="977836631007196a3778df43c897e6406ced22621b3518ff7ea32d11e48b17c0" name="fping" arch="src">
  <version epoch="0" ver="3.5" rel="10.3.1"/>
  <changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
  <changelog author="grimmer@suse.de" date="950356800">- added Group tag to spec file
- use version macro in spec file
- added full URL to Source tag
- use _mandir macro in spec file
- added CXXFLAGS to %build section</changelog>
  <changelog author="nadvornik@suse.cz" date="955627200">- added BuildRoot</changelog>
  <changelog author="schwab@suse.de" date="964008000">- Fix alignment problem.
- Pass CFLAGS during configure run.</changelog>
  <changelog author="schwab@suse.de" date="992260800">- Fix alignment problem properly.</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="postadal@suse.cz" date="1082635200">- fixed gcc warnings</changelog>
  <changelog author="hmacht@suse.de" date="1083931200">- Upgrade to version 2.4b2</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lrupp@suse.de" date="1202472000">- convert the Changelog to Unix
- add COPYING, remove INSTALL from docudir
- use macros
- build parallel</changelog>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536753600">-  bsc#988195 - fping flooding /tmp after network stop
  * added patch flooding-tmp-after-network-stop.patch to fix it</changelog>
</package>
<package pkgid="abb7e45928580853681839233f6348e855862c1f65d2341218438e5b77a9b39d" name="fping" arch="x86_64">
  <version epoch="0" ver="3.5" rel="10.3.1"/>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536753600">-  bsc#988195 - fping flooding /tmp after network stop
  * added patch flooding-tmp-after-network-stop.patch to fix it</changelog>
</package>
<package pkgid="7758326015f2b7516a84f33e6116de53f1d2b5e9a959a28948811c9d3d7c12c9" name="freeimage" arch="src">
  <version epoch="0" ver="3.17.0" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1309608000">- Remove conflicting %debug_package: OBS deals with that already
- Remove unnecessary %clean section
- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1332504000">- .cpp files indicate that FIPL is used (contains a disclaimer
  clause that is untypical of GPL, but can be found in FIPL).
  No notice in the source files that GPL is an alternative.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1333195200">- Update to version 3.15.3:
  * Lots of changes (see http://freeimage.sourceforge.net/news.html for
    details).
- Removed fPIC.diff and freeimage-3100-x86_64.diff patches (fixed upstream).
- Replaced noroot.diff with makefiles_fixes.patch (include also fixes for
  CFLAGS and CXXFLAGS, remove -s (strip) option, add missing symlinks for
  libfreeimageplus).
- Added the following patches:
  * doxygen.patch: Fix documentation building
  * use_system_libs.patch: Use system libraries (except except libjpeg and
    libtiff)
  * use_system_libs_openjpeg.patch: Use system libraries (openjpeg)
- Spec file updates:
  * Added OpenEXR-devel, libpng-devel, libraw-devel, libraw-devel-static (for
    openSUSE 11.4), openjpeg-devel (for openSUSE &gt; 12.1) and zlib-devel build
    requirements since the package now needs these system libraries to compile.
  * Added doxygen and unzip build requirements to build the documentation and
    extract the package sources.
  * Renamed libfreeimage-devel to freeimage-devel and added the necessary
    Provides/Obsoletes entries for libfreeimage-devel.
  * Added a libfreeimageplus3 subpackage.
  * Remove static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1351425600">- Removed libpng fixes from use_system_libs.patch and instead added two patches
  (use_system_libs_libpng14.patch and use_system_libs_libpng15.patch) to
  support both libpng14 and libpng15 (currently in Factory).</changelog>
  <changelog author="prusnak@opensuse.org" date="1357300800">- updated to version 3.15.4
  * see http://freeimage.sourceforge.net/news.html</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1371902400">- Corrected the license
  * http://freeimage.sourceforge.net/license.html
  * FreeImage Open Source Dual-License
  * FreeImage is licensed under the GNU General Public License,
    version 2.0 (GPLv2) or version 3.0 (GPLv3), and the FreeImage
    Public License (FIPL)
  * Use the liberal FreeImage Public License to use FreeImage commercially or
  * Use the GNU General Public License to use FreeImage into your open source project.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 3.17.0
  * FreeImage now uses LibPNG 1.6.16
  * FreeImage now uses LibWebP 0.4.2 (GIT patch 2015-03-03)
  * FreeImage now uses LibRaw 0.17-Alpha1
  * FreeImage now uses LibTIFF 4.0.4 (CVS patch 2015-01-26)
  * FreeImage now uses OpenEXR 2.2.0
  * removed VS 2003 project files : this IDE is no longer supported
    because of its outdated C++ compiler
  * added FreeImage_ConvertFromRawBitsEx
  * added RAW_UNPROCESSED load flag to the RAW plugin
  * added FreeImage_SetMetadataKeyValue
  * added support for metadata writing to the JPEG-JXR plugin
  * added VS 2013 project files
  * added support for PNG tIME metadata (read/write, handle as
    Exif-TIFF DateTime)
  * added explicit definition of endianness and color order in
    compiler options
  * added FIQ_LFPQUANT quantizer algorithm
  * added support for input 32-bit dib in Wu quantizer
  * added FreeImage_ConvertToRGBAF and updated conversions in
    FreeImage_ConvertToType
  * added FreeImage_ConvertToRGBA16 and updated conversions in
    FreeImage_ConvertToType
  * added FreeImage_CreateView
  * added FreeImage_RescaleRect
  * added FreeImage_GetMemorySize
  * ICO plugin: improved support for Vista icons
  * fixed a rounding error in RGB to greyscale conversion formula
  * fixed Makefile.fip so that it installs symlinks
  * fixed a potential memory access violation in PluginHDR Save function
  * fixed a bug in FreeImage_LookupSVGColor ("green" color was not found)
  * fixed TARGA signature validation for TARGA versions &lt; 2.0
  * fixed FreeImage_GetScanLine not working with very large images on x64
    platforms
  * improved PluginTIFF compatibility with LibTIFF 4
  * fixed a segfault occuring on a corrupted animated GIF
  * improved memory allocation in PluginRAW
  * fixed loading/saving of TIFF containing a GPS IFD inside the Exif-TIFF
    metadata segment (the solution is to ignore the tag)
  * fixed a bug in FreeImage_JPEGCrop*/_JPEGTransform* functions occuring
    when using the same source / destination filename
  * fixed a bug with output image quality in PluginJP2::Save &amp;
    PluginJ2K::Save functions (regression from FI 3.15.4)
  * improved RAW file format detection
  * fixed FreeImage_GetFileType behavior with ANI file formats
  * improved Exif reader so as to handle Exif IFD with a suspicious offset
    (can occur with maker notes)
  * fixed a memory leak in PluginPNG:Save occuring when dealing with invalid
    PNG files
  * fixed PNG plugin handling of 16-bit grayscale + 16-bit alpha images
  * fixed PNG plugin handling of 16-bit grayscale + tRNS chunk images
  * fixed PNG plugin handling of 24-bit RGB + tRNS chunk images
  * fixed PNG plugin handling of 1-,4-bit greyscale/palettized + tRNS
    chunk images
  * fixed invalid directory delimiter in include statement (mingw-w64)
    in Source/LibJXR/image/sys/strcodec.h
  * fixed Invalid condition for defining _byteswap_ulong (mingw-w64)
    in Source/LibJXR/image/sys/strcodec.c
  * fixed FreeImage_Get*Mask not returning 0 for greyscale images
  * fixed loading of external plugins when using UNICODE directory
    names to store plugins
  * fixed loading of JXR files when using memory streams
  * added Dist/ directory creation in Makefiles (in case it is not
    already present)
- For changes from previous versions, please read the Whatnew.txt file
- Remove some obsolete patches
  * use_system_libs.patch
  * use_system_libs_openjpeg.patch
  * use_system_libs_libpng15.patch
  * use_system_libs_libpng14.patch
  * libraw_types.patch
- Update makefiles_fixes.patch
- Add patches from Fedora
  * unbundle.patch
  * CVE-2015-0852.patch
- Use download Url as source
- Add dependencies
  * jxrlib-devel
  * libjpeg-devel
  * openjpeg2-devel instead of openjpeg-devel
  * pkgconfig(libpng)
  * pkgconfig(libraw) instead of libraw-devel
  * pkgconfig(libmng)
  * pkgconfig(libtiff-4)
  * pkgconfig(libwebp)
  * pkgconfig(OpenEXR)
  * pkgconfig(zlib) instead of zlib-devel
  * unzip
- Drop support for SLE11; doesn't build anyway</changelog>
  <changelog author="schwab@suse.de" date="1456056000">- Build with -fPIC.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465819200">- Fix makefiles_fixes.patch to fix linking with as-needed: do list
  libraries to link after the modules using them (boo#980069).</changelog>
  <changelog author="kbabioch@suse.com" date="1516795200">- Add CVE-2016-5684.patch: Fix an exploitable out-of-bounds write vulnerability
  in the XMP image handling functionality, which can cause an arbitrary memory
  overwrite resulting in code execution (CVE-2016-5684 boo#1002621).</changelog>
</package>
<package pkgid="3ecfe8dab2698f73916de8cf490582391adaa79b8fe1aaad9629e40b177d12fa" name="freeimage-devel" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="5.1"/>
  <changelog author="jengelh@medozas.de" date="1309608000">- Remove conflicting %debug_package: OBS deals with that already
- Remove unnecessary %clean section
- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1332504000">- .cpp files indicate that FIPL is used (contains a disclaimer
  clause that is untypical of GPL, but can be found in FIPL).
  No notice in the source files that GPL is an alternative.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1333195200">- Update to version 3.15.3:
  * Lots of changes (see http://freeimage.sourceforge.net/news.html for
    details).
- Removed fPIC.diff and freeimage-3100-x86_64.diff patches (fixed upstream).
- Replaced noroot.diff with makefiles_fixes.patch (include also fixes for
  CFLAGS and CXXFLAGS, remove -s (strip) option, add missing symlinks for
  libfreeimageplus).
- Added the following patches:
  * doxygen.patch: Fix documentation building
  * use_system_libs.patch: Use system libraries (except except libjpeg and
    libtiff)
  * use_system_libs_openjpeg.patch: Use system libraries (openjpeg)
- Spec file updates:
  * Added OpenEXR-devel, libpng-devel, libraw-devel, libraw-devel-static (for
    openSUSE 11.4), openjpeg-devel (for openSUSE &gt; 12.1) and zlib-devel build
    requirements since the package now needs these system libraries to compile.
  * Added doxygen and unzip build requirements to build the documentation and
    extract the package sources.
  * Renamed libfreeimage-devel to freeimage-devel and added the necessary
    Provides/Obsoletes entries for libfreeimage-devel.
  * Added a libfreeimageplus3 subpackage.
  * Remove static libraries.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1351425600">- Removed libpng fixes from use_system_libs.patch and instead added two patches
  (use_system_libs_libpng14.patch and use_system_libs_libpng15.patch) to
  support both libpng14 and libpng15 (currently in Factory).</changelog>
  <changelog author="prusnak@opensuse.org" date="1357300800">- updated to version 3.15.4
  * see http://freeimage.sourceforge.net/news.html</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1371902400">- Corrected the license
  * http://freeimage.sourceforge.net/license.html
  * FreeImage Open Source Dual-License
  * FreeImage is licensed under the GNU General Public License,
    version 2.0 (GPLv2) or version 3.0 (GPLv3), and the FreeImage
    Public License (FIPL)
  * Use the liberal FreeImage Public License to use FreeImage commercially or
  * Use the GNU General Public License to use FreeImage into your open source project.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 3.17.0
  * FreeImage now uses LibPNG 1.6.16
  * FreeImage now uses LibWebP 0.4.2 (GIT patch 2015-03-03)
  * FreeImage now uses LibRaw 0.17-Alpha1
  * FreeImage now uses LibTIFF 4.0.4 (CVS patch 2015-01-26)
  * FreeImage now uses OpenEXR 2.2.0
  * removed VS 2003 project files : this IDE is no longer supported
    because of its outdated C++ compiler
  * added FreeImage_ConvertFromRawBitsEx
  * added RAW_UNPROCESSED load flag to the RAW plugin
  * added FreeImage_SetMetadataKeyValue
  * added support for metadata writing to the JPEG-JXR plugin
  * added VS 2013 project files
  * added support for PNG tIME metadata (read/write, handle as
    Exif-TIFF DateTime)
  * added explicit definition of endianness and color order in
    compiler options
  * added FIQ_LFPQUANT quantizer algorithm
  * added support for input 32-bit dib in Wu quantizer
  * added FreeImage_ConvertToRGBAF and updated conversions in
    FreeImage_ConvertToType
  * added FreeImage_ConvertToRGBA16 and updated conversions in
    FreeImage_ConvertToType
  * added FreeImage_CreateView
  * added FreeImage_RescaleRect
  * added FreeImage_GetMemorySize
  * ICO plugin: improved support for Vista icons
  * fixed a rounding error in RGB to greyscale conversion formula
  * fixed Makefile.fip so that it installs symlinks
  * fixed a potential memory access violation in PluginHDR Save function
  * fixed a bug in FreeImage_LookupSVGColor ("green" color was not found)
  * fixed TARGA signature validation for TARGA versions &lt; 2.0
  * fixed FreeImage_GetScanLine not working with very large images on x64
    platforms
  * improved PluginTIFF compatibility with LibTIFF 4
  * fixed a segfault occuring on a corrupted animated GIF
  * improved memory allocation in PluginRAW
  * fixed loading/saving of TIFF containing a GPS IFD inside the Exif-TIFF
    metadata segment (the solution is to ignore the tag)
  * fixed a bug in FreeImage_JPEGCrop*/_JPEGTransform* functions occuring
    when using the same source / destination filename
  * fixed a bug with output image quality in PluginJP2::Save &amp;
    PluginJ2K::Save functions (regression from FI 3.15.4)
  * improved RAW file format detection
  * fixed FreeImage_GetFileType behavior with ANI file formats
  * improved Exif reader so as to handle Exif IFD with a suspicious offset
    (can occur with maker notes)
  * fixed a memory leak in PluginPNG:Save occuring when dealing with invalid
    PNG files
  * fixed PNG plugin handling of 16-bit grayscale + 16-bit alpha images
  * fixed PNG plugin handling of 16-bit grayscale + tRNS chunk images
  * fixed PNG plugin handling of 24-bit RGB + tRNS chunk images
  * fixed PNG plugin handling of 1-,4-bit greyscale/palettized + tRNS
    chunk images
  * fixed invalid directory delimiter in include statement (mingw-w64)
    in Source/LibJXR/image/sys/strcodec.h
  * fixed Invalid condition for defining _byteswap_ulong (mingw-w64)
    in Source/LibJXR/image/sys/strcodec.c
  * fixed FreeImage_Get*Mask not returning 0 for greyscale images
  * fixed loading of external plugins when using UNICODE directory
    names to store plugins
  * fixed loading of JXR files when using memory streams
  * added Dist/ directory creation in Makefiles (in case it is not
    already present)
- For changes from previous versions, please read the Whatnew.txt file
- Remove some obsolete patches
  * use_system_libs.patch
  * use_system_libs_openjpeg.patch
  * use_system_libs_libpng15.patch
  * use_system_libs_libpng14.patch
  * libraw_types.patch
- Update makefiles_fixes.patch
- Add patches from Fedora
  * unbundle.patch
  * CVE-2015-0852.patch
- Use download Url as source
- Add dependencies
  * jxrlib-devel
  * libjpeg-devel
  * openjpeg2-devel instead of openjpeg-devel
  * pkgconfig(libpng)
  * pkgconfig(libraw) instead of libraw-devel
  * pkgconfig(libmng)
  * pkgconfig(libtiff-4)
  * pkgconfig(libwebp)
  * pkgconfig(OpenEXR)
  * pkgconfig(zlib) instead of zlib-devel
  * unzip
- Drop support for SLE11; doesn't build anyway</changelog>
  <changelog author="schwab@suse.de" date="1456056000">- Build with -fPIC.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465819200">- Fix makefiles_fixes.patch to fix linking with as-needed: do list
  libraries to link after the modules using them (boo#980069).</changelog>
  <changelog author="kbabioch@suse.com" date="1516795200">- Add CVE-2016-5684.patch: Fix an exploitable out-of-bounds write vulnerability
  in the XMP image handling functionality, which can cause an arbitrary memory
  overwrite resulting in code execution (CVE-2016-5684 boo#1002621).</changelog>
</package>
<package pkgid="a58c459ffcf8e30ccbcc0b5a6fc3e0a09afd66f4cb2c24f762866618949a8f37" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="d32b006b7347f892c12d2f7d0a8e584c35940a482de7b1ef753a8c7e8d3eeb45" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="b5272882d3dc817a113200c3ad397eddd8cc2451ed3d24c0672110bf01c6319c" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="ec3a521c989bb9e211ae389db08408205d1cd270db64987e25058e0e2349e7c4" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="d8d65c58f60f5803983d5f6082e04c58f17bfebf1b0d193527162eaa375564ce" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="71af60de85fac88f73d60cca566414cbc387ce171016873e6bbcf1f8db62a711" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="7eb51184730dee721a762fa7b3411faaaf3b034e3f8b6a0c0182f97971e6a7c8" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="7a61ea26e003ba591f8d4b513bbeb223c8af76d8e0c7464d3e976c045b3d35ec" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="d480db479285e3eb9cc703d8b43fa58282ebaa268188690ae721705d67382f2e" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="64207ede28fdd0c93c1c341128b23a2429ad9570b591d02323703981a5acc2b2" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="a825fa9d799517e9ece2656a94443e2868075f7750a4ec90a47ffe2ebcf2576f" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="4d5df36898dc76ac8e9d43ef16ba37bb3869b508851d48078d15076483234d38" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="ad127d35732242db8326f6f1c90c485be244546cae468161503f60e339852e0a" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="0069d7f49ae912ebe415589bf2d2730de1472c2bce0c53c4116746752f41a97d" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="4fb0fd330b166a2fd16156480b6d952f0ff622994a0e9b0de3126373bd890fd7" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="9f6179db8124d11f499be0f396c81680d7890aa9babfeeaceb94dac25fdc7a69" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="863920228015012f73ab89ddbce09c6e76755aa262eaaa6d4897547dd093dca9" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="68e31782890460739bfc934cdfb28451ac9b6565bc09ce65e7f4cc82e320b33c" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="2aaee4c678b8fd373661d1b16749e2a0f6b9bc6e92535dea7a14e1ce3f87f8ff" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="a4eff12748f9956d09cac9b5fe9321c9a1e87e93c8d74f78ba81af7ef0f664fe" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="079aae60cd727f52ec7fdbf8c9b6c663ef02c4e1bb3bc12b7f39cbc661efcd57" name="freeradius-server-python" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="c69d3490973710948e791483645affbb89e3c6975710b3986f947ff51272b928" name="freeradius-server-python" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="add7286b12f9cc031f22fd0fa3ebd30da2e7fa26d943aa25eb3b8d573fb16fc3" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="df46c002843f12167d24b296670a2e26c924c4f222048bb6e499165f9f63f8a3" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="339697cde63fddf7429fa910e61f9f91e9a2b9da1ef3d940b880cb05ca58e251" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="3.1"/>
  <changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
  <changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
  <changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
  <changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
</package>
<package pkgid="490fd47f9a7853f6967e8d369f7c38d5cf2d14f0ebdea82bb8f8e3cdc687b852" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.15" rel="6.1"/>
  <changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="jbrielmaier@suse.com" date="1530705600">- password-log.patch: stop logging invalid password attempts
  gh#freeradius/freeradius-server#2064 (bsc#1099802)</changelog>
  <changelog author="adam.majer@suse.de" date="1530705601">- install license as %license instead of documentation</changelog>
</package>
<package pkgid="0460055776713c1e719888ad2003cb8f42791cf3e5ebe648f6fcd71d123ef7cb" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="13.1"/>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416, boo#1087240,
  boo#1104918, CVE-2018-0886:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1547035200">- Add a bunch of security fixes:
  + freerdp-CVE-2018-8789.patch (boo#1117965, CVE-2018-8789)
  + freerdp-CVE-2018-8785.patch (boo#1117967, CVE-2018-8785)
  + freerdp-CVE-2018-8786.patch (boo#1117966, CVE-2018-8786)
  + freerdp-CVE-2018-8787.patch (boo#1117964, CVE-2018-8787)
  + freerdp-CVE-2018-8788.patch (boo#1117963, CVE-2018-8788)
  + freerdp-CVE-2018-8784.patch (boo#1116708, CVE-2018-8784)
  + freerdp-CVE-2018-1000852.patch (boo#1120507, CVE-2018-1000852)</changelog>
</package>
<package pkgid="2674b6b07237bacf048515c378e2df24f140a162726e382928fa668cde51ff20" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="13.1"/>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416, boo#1087240,
  boo#1104918, CVE-2018-0886:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1547035200">- Add a bunch of security fixes:
  + freerdp-CVE-2018-8789.patch (boo#1117965, CVE-2018-8789)
  + freerdp-CVE-2018-8785.patch (boo#1117967, CVE-2018-8785)
  + freerdp-CVE-2018-8786.patch (boo#1117966, CVE-2018-8786)
  + freerdp-CVE-2018-8787.patch (boo#1117964, CVE-2018-8787)
  + freerdp-CVE-2018-8788.patch (boo#1117963, CVE-2018-8788)
  + freerdp-CVE-2018-8784.patch (boo#1116708, CVE-2018-8784)
  + freerdp-CVE-2018-1000852.patch (boo#1120507, CVE-2018-1000852)</changelog>
</package>
<package pkgid="d6fad5af0362b0d9b763395b7e074f2cc26188523349ec77c791c104699dddce" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>
  <changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
</package>
<package pkgid="33020afc30c649d45f6308a4702ed40c706113dec82ebe4d3b413de865880e67" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>
  <changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
</package>
<package pkgid="79e7d95d88bcea37fa21a09b9d0456b2b3e6dcfda1b38a45ee2e76d9809b4b3a" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="9.1"/>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
</package>
<package pkgid="8511be148e4bc92637bc72a05605560ca8e382e0ba5131f6e20d592bc6c12bfa" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="9.1"/>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
</package>
<package pkgid="844e05a0d2a8615a2f98e950ce41fcbbdc23cf78ecdd016af1f3111f32abeeb5" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="13.1"/>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416, boo#1087240,
  boo#1104918, CVE-2018-0886:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1547035200">- Add a bunch of security fixes:
  + freerdp-CVE-2018-8789.patch (boo#1117965, CVE-2018-8789)
  + freerdp-CVE-2018-8785.patch (boo#1117967, CVE-2018-8785)
  + freerdp-CVE-2018-8786.patch (boo#1117966, CVE-2018-8786)
  + freerdp-CVE-2018-8787.patch (boo#1117964, CVE-2018-8787)
  + freerdp-CVE-2018-8788.patch (boo#1117963, CVE-2018-8788)
  + freerdp-CVE-2018-8784.patch (boo#1116708, CVE-2018-8784)
  + freerdp-CVE-2018-1000852.patch (boo#1120507, CVE-2018-1000852)</changelog>
</package>
<package pkgid="ac454fabf1c841481a3fb1b4146047bebe35633aea253bafe19b998e786074d7" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>
  <changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
</package>
<package pkgid="6d5142ea462f621cb6594655d4a8829b1ac0b72a37f1fbf33314d0dee62c51ef" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="9.1"/>
  <changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
  <changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
  <changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
  <changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
  <changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
  <changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
  <changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
  <changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
  <changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>
  <changelog author="manfred.h@gmx.net" date="1521633600">- Add freerdp-KB408876.patch as a fix for boo#1085416:
  + fix nla: don't use server version; see
    &lt;https://github.com/FreeRDP/FreeRDP/commit/f8baeb72470f3ada14fdf6f8a13b67543340621b&gt;</changelog>
</package>
<package pkgid="4a8aba266eb6f339207e21e7af8fbfc0af1fbbe90930f370f49709b81c8149e5" name="freetds" arch="src">
  <version epoch="0" ver="0.91" rel="16.3.1"/>
  <changelog author="Brian Bruns &lt;camber@ais.org&gt;" date="993729600">- Modifications for 0.52 ver and ODBC drivers</changelog>
  <changelog author="Brian Bruns &lt;camber@ais.org&gt;" date="1008849600">- Modifications for 0.53 ver and removing interfaces file</changelog>
  <changelog author="David Hollis &lt;dhollis@davehollis.com&gt;" date="1041249600">- 0.60 tweaked.  Move .a &amp; .la files to -devel package</changelog>
  <changelog author="Ian Grant &lt;Ian.Grant@cl.cam.ac.uk&gt;" date="1044446400">- 0.61 tweaked. Added libtdssrv libraries and tools in /usr/bin + man pages</changelog>
  <changelog author="Frediano Ziglio &lt;freddy77@angelfire.com&gt;" date="1049025600">- add reference to doc package</changelog>
  <changelog author="Frediano Ziglio &lt;freddy77@angelfire.com&gt;" date="1094731200">- remove dependency from freetds-unixodbc
- fix field name (Copyright instead of License)
- updated URL</changelog>
  <changelog author="Frediano Ziglio &lt;freddy77@gmail.com&gt;" date="1175083200">- removed libtdssrv</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1210248000">- adopted for openSUSE buildservice</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1266580800">- update to 0.82.1.dev.20091223</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1273752000">- update to 0.83.dev.20100512</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1310731200">- Update to version 0.9.2</changelog>
  <changelog author="toddrme2178@gmail.com" date="1310731201">- Updated to 0.91 rc2
- Various spec file style cleanups
- Changed to valid groups (fix for rpmlint warning)
- Check for duplicate files (fix for rpmlint warning)
- Move %changes contents to existing .changes file</changelog>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Add dependency on libtdsodbc0 in develpkg wrt bsc#1026910</changelog>
</package>
<package pkgid="4622fbcd9b2f8459eb6e84625baf3553256153d9883cd2b88d93082b6f1849ff" name="freetds-devel" arch="x86_64">
  <version epoch="0" ver="0.91" rel="16.3.1"/>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1266580800">- update to 0.82.1.dev.20091223</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1273752000">- update to 0.83.dev.20100512</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1310731200">- Update to version 0.9.2</changelog>
  <changelog author="toddrme2178@gmail.com" date="1310731201">- Updated to 0.91 rc2
- Various spec file style cleanups
- Changed to valid groups (fix for rpmlint warning)
- Check for duplicate files (fix for rpmlint warning)
- Move %changes contents to existing .changes file</changelog>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Add dependency on libtdsodbc0 in develpkg wrt bsc#1026910</changelog>
</package>
<package pkgid="e18fdaa729df1cf3daa4045d75988b3f3ea8dd46d4723be11dac9c2ccd412996" name="freetds-doc" arch="x86_64">
  <version epoch="0" ver="0.91" rel="16.3.1"/>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1266580800">- update to 0.82.1.dev.20091223</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1273752000">- update to 0.83.dev.20100512</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1310731200">- Update to version 0.9.2</changelog>
  <changelog author="toddrme2178@gmail.com" date="1310731201">- Updated to 0.91 rc2
- Various spec file style cleanups
- Changed to valid groups (fix for rpmlint warning)
- Check for duplicate files (fix for rpmlint warning)
- Move %changes contents to existing .changes file</changelog>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Add dependency on libtdsodbc0 in develpkg wrt bsc#1026910</changelog>
</package>
<package pkgid="ec9e144d7340a771759ea3d976c9ef5fe923b01b8e168e0b85b5d025b74ac192" name="freetds-tools" arch="x86_64">
  <version epoch="0" ver="0.91" rel="16.3.1"/>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1266580800">- update to 0.82.1.dev.20091223</changelog>
  <changelog author="Matthias Eckermann &lt;mge@arcor.de&gt;" date="1273752000">- update to 0.83.dev.20100512</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1310731200">- Update to version 0.9.2</changelog>
  <changelog author="toddrme2178@gmail.com" date="1310731201">- Updated to 0.91 rc2
- Various spec file style cleanups
- Changed to valid groups (fix for rpmlint warning)
- Check for duplicate files (fix for rpmlint warning)
- Move %changes contents to existing .changes file</changelog>
  <changelog author="coolo@novell.com" date="1312459200">- ran format_spec source service</changelog>
  <changelog author="toddrme2178@gmail.com" date="1312632000">- Split into library and tools (binary) packages
- Fixed license labeling.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318161600">- Add missing "Group" for libfreetds and change %make_install,
  resolving build failure for SLE11
- Remove redundant sections (cf. specfile guidelines)</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- updated to 0.91</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Resolve dependency indirection</changelog>
  <changelog author="coolo@suse.com" date="1328616000">- there is a GPL copying too, so add GPL-2.0+ too</changelog>
  <changelog author="tchvatal@suse.com" date="1488196800">- Add dependency on libtdsodbc0 in develpkg wrt bsc#1026910</changelog>
</package>
<package pkgid="f67fff79a0b693dd6c148d1d02a99a4e174e8f32a0d1ccbb826c276866cc54cc" name="freetype2" arch="src">
  <version epoch="0" ver="2.6.3" rel="5.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385553600">- Update to version 2.5.1
  * For  some WinFNT  files,  the last  glyph  wasn't displayed  but
    incorrectly marked as invalid.
  * The vertical size of glyphs was  incorrectly set after a call to
    `FT_GlyphSlot_Embolden', resulting in clipped glyphs.
  * Many fields of the `PCLT' table in SFNT based fonts (if accessed
    with `FT_Get_Sfnt_Table') were computed incorrectly.
  * In TrueType fonts,  hinting of composite glyphs  could sometimes
    deliver  incorrect positions  of  components or  even  distorted
    shapes.
  * WOFF font format support has been added.
  * The auto-hinter now supports Hebrew.  Greek and Cyrillic support
    has been improved.
  * Support for the forthcoming `OS/2'  SFNT table version 5, as can
    be found e.g. in the `Sitka' font family for Windows 8.1.
  * The header  file layout  has been changed.   After installation,
    all files are now located in `&lt;prefix&gt;/include/freetype2'.
    Applications  that  use   (a)  `freetype-config'  or  FreeType's
    `pkg-config' file to get the include directory for the compiler,
    and (b) the documented way for header inclusion like
    [#]include &lt;ft2build.h&gt; or #include FT_FREETYPE_H
    don't need any change to the source code.
  * The stem  darkening feature  of the  new CFF  engine can  now be
    fine-tuned with the new `darkening-parameters' property.
  * `ftgrid' has been updated to toggle various engines with the `H'
    key, similar to `ftview' and `ftdiff'.
  * The functionality of `ttdebug' has been greatly enhanced.
  . It now displays twilight, storage, and control value data; key
  * Better support of ARMv7 and x86_64 processors.
  * Apple's `sbix' color bitmap format is now supported.
  * Improved   auto-hinter  rendering   for  many   TrueType  fonts,
    especially in the range 20-40ppem.
  * A  new face  flag  `FT_FACE_FLAG_COLOR' has  been  added (to  be
    accessed with the macro `FT_HAS_COLOR').
  * `FT_Gzip_Uncompress'   (modeled    after   zlib's   `uncompress'
    function)  has been  added; this  is a  by-product of  the newly
    added WOFF support.
  * Support for  a build with  `cmake' has been contributed  by John
    Cary &lt;cary@txcorp.com&gt;.
  * Support for x64  builds with Visual C++ has  been contributed by
    Kenneth Miller &lt;kennethadammiller@yahoo.com&gt;
  * Manual pages for most demo programs have been added.
  * The GETINFO bytecode instruction for TrueType fonts was buggy if
    used to retrieve subpixel hinting information.  It was necessary
    to set  selector bit 6  to get  results for selector  bits 7-10,
    which is wrong.
  * Improved computation  of emulated vertical metrics  for TrueType
    fonts.
  * Fixed horizontal start-up position of vertical phantom points in
    TrueType bytecode.
- Rebase freetype2-subpixel.patch to current release
- Added fix-compile-in-non-debug.patch, fixes release build of ftdemos
- Added overflow.patch for resolving post-build-check detected error:
  I: Statement is overflowing a buffer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Update to version 2.5.2
  * Fixed bug  that made  FreeType crash  on some  popular (but  not
    fully conformant) fonts like `ahronbd.ttf'
  * Another round of improvements to correct positioning and hinting
    of composite glyphs in TrueType fonts
  * Fixed bug introduced in version  2.5.1: handling embedded
    bitmap strikes of  TrueType fonts, caused garbage display
    under some circumstances
  * Fixed `ftgrid' demo program compilation in non-development
    builds
- Droped fix-compile-in-non-debug.patch, included in this release</changelog>
  <changelog author="arvidjaar@gmail.com" date="1386763200">- freetype2 pkgconfig now includes -lpng16; make sure freetype2-devel
  Requires libpng-devel</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386849600">- Added patches:
  * don-t-mark-libpng-as-required-library-in-freetype-co.patch: it's
    private in pkgconfig file, and causes issues in downstream
    packages
- As per patch, remove libpng-devel Requires from devel package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394366400">- Update to version 2.5.3
  * IMPORTANT BUG FIXES
  - A vulnerability was  identified and fixed in the  new CFF
    driver (cf. http://savannah.nongnu.org/bugs/?41697;  it
    doesn't have a CVE number yet).  All users should upgrade.
  - More  bug  fixes related  to  correct  positioning of
    composite glyphs.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - FreeType can now use the HarfBuzz library to greatly improve
    the auto-hinting of  fonts that  use OpenType features:
    Many glyphs that are part  of such features but don't have
    cmap entries are now handled  properly, for  example small
    caps or superscripts. Define the configuration  macro
    FT_CONFIG_OPTION_USE_HARFBUZZ to activate HarfBuzz support.
    You need HarfBuzz version 0.9.19 or newer. Note that HarfBuzz
    depends on  FreeType; this currently causes a chicken-and-egg
    problem  that can be  solved as follows  in case HarfBuzz
    is not yet installed on your system.
    1. Compile  and  install  FreeType without the configuration
    macro FT_CONFIG_OPTION_USE_HARFBUZZ.
    2. Compile and install HarfBuzz.
    3. Define  macro  FT_CONFIG_OPTION_USE_HARFBUZZ, then
    compile and install FreeType again.
    With FreeType's  `configure' script the procedure  boils
    down to configure, build, and install Freetype, then
    configure, compile, and  install  HarfBuzz,  then configure,
    compile,  and  install FreeType again (after executing
    `make distclean').
  - All  libraries FreeType  depends on  are now  checked
    using  the `pkg-config' configuration files  first,
    followed by alternative methods.
  - The  new  value  `auto'  for the  various  `--with-XXX'
    library options   (for   example   `--with-harfbuzz=auto')
    makes   the `configure' script automatically link to the
    libraries it finds. This is now the default.
  - In case FreeType's `configure' script  can't find a
    library, you can  pass environment  variables to  circumvent
    pkg-config,  and those variables  have been  harmonized as
    a consequence  of the changes mentioned above:
    LIBZ           -&gt; removed; use LIBZ_CFLAGS and LIBZ_LIBS
    LIBBZ2         -&gt; removed; use BZIP2_CFLAGS and BZIP2_LIBS
    LIBPNG_LDFLAGS -&gt; LIBPNG_LIBS
    `./configure --help' shows all available environment variables.
  - The `freetype-config'  script now understands
    option `--static' to emit static linking information.
- Due to buildsystem changes, rename and rebase
  don-t-mark-libpng-as-required-library-in-freetype-co.patch to
  don-t-mark-libpng-as-required-library.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394712000">- Improve don-t-mark-libpng-as-required-library.patch: also handle
  Requires.private case (freetype does not include png headers)</changelog>
  <changelog author="nadvornik@suse.com" date="1395921600">- get 2.5.3 from Factory as it fixes
  CVE-2014-2240 CVE-2014-2241 (bnc#867620)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Enable the bz2 compression in freetype2
- Remove patch overflow.patch from freetype2.spec where it is not
  applied.
- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * Thread safety improvements
  * Thai script support has been added to the auto-hinter.
  * Arabic script support has been added to the auto-hinter.
  * Following OpenType version 1.7,  advance widths and side bearing
    values in  CFFs (wrapped  in an SFNT  structure) are  now always
    taken from the `hmtx' table.
  * Following OpenType  version 1.7, the  PostScript font name  of a
    CFF font (wrapped in an SFNT structure) is now always taken from
    the `name'  table.  This is  also true for  OpenType Collections
    (i.e., TTCs using  CFFs subfonts instead of TTFs),  where it may
    have a significant difference.
  * Fonts natively hinted for  ClearType are now supported, properly
    handling selector index 3 of the INSTCTRL bytecode instruction.
  * Major improvements to the GX TrueType variation font handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441972800">- Add Dont-use-hmtx-table-for-LSB.patch: Fixes gnu#45520, cut off
  fonts in gtk and qt. Taken from upstream git.</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1
  * IMPORTANT BUG FIXES
  - It turned  out that for CFFs  only the advance widths  should be
    taken from the  `htmx' table, not the side  bearings.  This bug,
    introduced in  version 2.6.0, makes  it necessary to  upgrade if
    you are using  CFFs; otherwise, you get cropped  glyphs with GUI
    interfaces like GTK or Qt.
  - Accessing Type 42 fonts returned  incorrect results if the glyph
    order of the embedded TrueType font differs from the glyph order
    of the Type 42 charstrings table.
  * IMPORTANT CHANGES
  - The header  file layout  has been  changed (again),  moving  all
    header files except `ft2build.h' into a subdirectory tree.
    Doing so  reduces the  possibility of  header file  name clashes
    (e.g., FTGL's  `FTGlyph.h' with FreeType's `ftglyph.h')  on case
    insensitive file systems like Mac OS X or Windows.
    Applications  that  use  (a)  the  `freetype-config'  script  or
    FreeType's `freetype2.pc' file for pkg-config to get the include
    directory  for the  compiler,  and (b)  the  documented way  for
    header inclusion like
    [#]include &lt;ft2build.h&gt;
    [#]include FT_FREETYPE_H
    ...
    don't need any change to the source code.
  - Simple access  to named instances  in GX variation fonts  is now
    available (in addition to the  previous method via FreeType's MM
    interface).   In  the `FT_Face'  structure,  bits  16-30 of  the
    `face_index' field hold the current named instance index for the
    given face  index, and bits  16-30 of `style_flags'  contain the
    number of  instances for  the given face  index.  `FT_Open_Face'
    and friends also understand the  extended bits of the face index
    parameter.
    You need to enable  TT_CONFIG_OPTION_GX_VAR_SUPPORT for this new
    feature.  Otherwise, bits  16-30 of the two fields  are zero (or
    are ignored).
  - Lao script support has been added to the auto-hinter.
  * MISCELLANEOUS
  - The auto-hinter's Arabic script support has been enhanced.
  - Superscript-like and  subscript-like glyphs  as used  by various
    phonetic alphabets like the IPA  are now better supported by the
    auto-hinter.
  - The TrueType bytecode interpreter now runs slightly faster.
  - Improved support for builds with cmake.
  - The  function  `FT_CeilFix'  now   always  rounds  towards  plus
    infinity.
  - The  function  `FT_FloorFix'  now always  rounds  towards  minus
    infinity.
  - A  new load  flag `FT_LOAD_COMPUTE_METRICS'  has been  added; it
    makes FreeType  ignore pre-computed  metrics, as needed  by font
    validating  or  font  editing  programs.  Right  now,  only  the
    TrueType  module supports  it  to ignore  data  from the  `hdmx'
    table.
  - Another round of bug fixes  to better handle broken fonts, found
    by Kostya Serebryany &lt;kcc@google.com&gt;.
- Dropping upstreamed patch Dont-use-hmtx-table-for-LSB.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="idonmez@suse.com" date="1495713600">- Add bsc-1038506.patch from upstream to fix unifont bsc#1038506</changelog>
  <changelog author="kbabioch@suse.com" date="1517918400">- Add CVE-2016-10244.patch: Make sure that the parse_charstrings function in
  type1/t1load.c does ensure that a font contains a glyph name to prevent a DoS
  through a heap-based buffer over-read or possibly have uunspecified other
  impact via a crafted file (CVE-2016-10244 bsc#1028103)
- Add CVE-2017-8105.patch: Fix an out-of-bounds write caused by a heap-based
  buffer overflow related to the t1_decoder_parse_charstrings function in
  psaux/t1decode.ca (CVE-2017-8105 bsc#1035807)
- Add CVE-2017-8287.patch: an out-of-bounds write caused by a heap-based buffer
  overflow related to the t1_builder_close_contour function in psaux/psobjs.c
  (CVE-2017-8287 bsc#1036457)
- Add 0001-integer-overflows.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
</package>
<package pkgid="1957572effd38f93f66ba620b86fa1c018d84f009ef6287aa767a84872eca622" name="freetype2-devel" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="5.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385553600">- Update to version 2.5.1
  * For  some WinFNT  files,  the last  glyph  wasn't displayed  but
    incorrectly marked as invalid.
  * The vertical size of glyphs was  incorrectly set after a call to
    `FT_GlyphSlot_Embolden', resulting in clipped glyphs.
  * Many fields of the `PCLT' table in SFNT based fonts (if accessed
    with `FT_Get_Sfnt_Table') were computed incorrectly.
  * In TrueType fonts,  hinting of composite glyphs  could sometimes
    deliver  incorrect positions  of  components or  even  distorted
    shapes.
  * WOFF font format support has been added.
  * The auto-hinter now supports Hebrew.  Greek and Cyrillic support
    has been improved.
  * Support for the forthcoming `OS/2'  SFNT table version 5, as can
    be found e.g. in the `Sitka' font family for Windows 8.1.
  * The header  file layout  has been changed.   After installation,
    all files are now located in `&lt;prefix&gt;/include/freetype2'.
    Applications  that  use   (a)  `freetype-config'  or  FreeType's
    `pkg-config' file to get the include directory for the compiler,
    and (b) the documented way for header inclusion like
    [#]include &lt;ft2build.h&gt; or #include FT_FREETYPE_H
    don't need any change to the source code.
  * The stem  darkening feature  of the  new CFF  engine can  now be
    fine-tuned with the new `darkening-parameters' property.
  * `ftgrid' has been updated to toggle various engines with the `H'
    key, similar to `ftview' and `ftdiff'.
  * The functionality of `ttdebug' has been greatly enhanced.
  . It now displays twilight, storage, and control value data; key
  * Better support of ARMv7 and x86_64 processors.
  * Apple's `sbix' color bitmap format is now supported.
  * Improved   auto-hinter  rendering   for  many   TrueType  fonts,
    especially in the range 20-40ppem.
  * A  new face  flag  `FT_FACE_FLAG_COLOR' has  been  added (to  be
    accessed with the macro `FT_HAS_COLOR').
  * `FT_Gzip_Uncompress'   (modeled    after   zlib's   `uncompress'
    function)  has been  added; this  is a  by-product of  the newly
    added WOFF support.
  * Support for  a build with  `cmake' has been contributed  by John
    Cary &lt;cary@txcorp.com&gt;.
  * Support for x64  builds with Visual C++ has  been contributed by
    Kenneth Miller &lt;kennethadammiller@yahoo.com&gt;
  * Manual pages for most demo programs have been added.
  * The GETINFO bytecode instruction for TrueType fonts was buggy if
    used to retrieve subpixel hinting information.  It was necessary
    to set  selector bit 6  to get  results for selector  bits 7-10,
    which is wrong.
  * Improved computation  of emulated vertical metrics  for TrueType
    fonts.
  * Fixed horizontal start-up position of vertical phantom points in
    TrueType bytecode.
- Rebase freetype2-subpixel.patch to current release
- Added fix-compile-in-non-debug.patch, fixes release build of ftdemos
- Added overflow.patch for resolving post-build-check detected error:
  I: Statement is overflowing a buffer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Update to version 2.5.2
  * Fixed bug  that made  FreeType crash  on some  popular (but  not
    fully conformant) fonts like `ahronbd.ttf'
  * Another round of improvements to correct positioning and hinting
    of composite glyphs in TrueType fonts
  * Fixed bug introduced in version  2.5.1: handling embedded
    bitmap strikes of  TrueType fonts, caused garbage display
    under some circumstances
  * Fixed `ftgrid' demo program compilation in non-development
    builds
- Droped fix-compile-in-non-debug.patch, included in this release</changelog>
  <changelog author="arvidjaar@gmail.com" date="1386763200">- freetype2 pkgconfig now includes -lpng16; make sure freetype2-devel
  Requires libpng-devel</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386849600">- Added patches:
  * don-t-mark-libpng-as-required-library-in-freetype-co.patch: it's
    private in pkgconfig file, and causes issues in downstream
    packages
- As per patch, remove libpng-devel Requires from devel package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394366400">- Update to version 2.5.3
  * IMPORTANT BUG FIXES
  - A vulnerability was  identified and fixed in the  new CFF
    driver (cf. http://savannah.nongnu.org/bugs/?41697;  it
    doesn't have a CVE number yet).  All users should upgrade.
  - More  bug  fixes related  to  correct  positioning of
    composite glyphs.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - FreeType can now use the HarfBuzz library to greatly improve
    the auto-hinting of  fonts that  use OpenType features:
    Many glyphs that are part  of such features but don't have
    cmap entries are now handled  properly, for  example small
    caps or superscripts. Define the configuration  macro
    FT_CONFIG_OPTION_USE_HARFBUZZ to activate HarfBuzz support.
    You need HarfBuzz version 0.9.19 or newer. Note that HarfBuzz
    depends on  FreeType; this currently causes a chicken-and-egg
    problem  that can be  solved as follows  in case HarfBuzz
    is not yet installed on your system.
    1. Compile  and  install  FreeType without the configuration
    macro FT_CONFIG_OPTION_USE_HARFBUZZ.
    2. Compile and install HarfBuzz.
    3. Define  macro  FT_CONFIG_OPTION_USE_HARFBUZZ, then
    compile and install FreeType again.
    With FreeType's  `configure' script the procedure  boils
    down to configure, build, and install Freetype, then
    configure, compile, and  install  HarfBuzz,  then configure,
    compile,  and  install FreeType again (after executing
    `make distclean').
  - All  libraries FreeType  depends on  are now  checked
    using  the `pkg-config' configuration files  first,
    followed by alternative methods.
  - The  new  value  `auto'  for the  various  `--with-XXX'
    library options   (for   example   `--with-harfbuzz=auto')
    makes   the `configure' script automatically link to the
    libraries it finds. This is now the default.
  - In case FreeType's `configure' script  can't find a
    library, you can  pass environment  variables to  circumvent
    pkg-config,  and those variables  have been  harmonized as
    a consequence  of the changes mentioned above:
    LIBZ           -&gt; removed; use LIBZ_CFLAGS and LIBZ_LIBS
    LIBBZ2         -&gt; removed; use BZIP2_CFLAGS and BZIP2_LIBS
    LIBPNG_LDFLAGS -&gt; LIBPNG_LIBS
    `./configure --help' shows all available environment variables.
  - The `freetype-config'  script now understands
    option `--static' to emit static linking information.
- Due to buildsystem changes, rename and rebase
  don-t-mark-libpng-as-required-library-in-freetype-co.patch to
  don-t-mark-libpng-as-required-library.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394712000">- Improve don-t-mark-libpng-as-required-library.patch: also handle
  Requires.private case (freetype does not include png headers)</changelog>
  <changelog author="nadvornik@suse.com" date="1395921600">- get 2.5.3 from Factory as it fixes
  CVE-2014-2240 CVE-2014-2241 (bnc#867620)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Enable the bz2 compression in freetype2
- Remove patch overflow.patch from freetype2.spec where it is not
  applied.
- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * Thread safety improvements
  * Thai script support has been added to the auto-hinter.
  * Arabic script support has been added to the auto-hinter.
  * Following OpenType version 1.7,  advance widths and side bearing
    values in  CFFs (wrapped  in an SFNT  structure) are  now always
    taken from the `hmtx' table.
  * Following OpenType  version 1.7, the  PostScript font name  of a
    CFF font (wrapped in an SFNT structure) is now always taken from
    the `name'  table.  This is  also true for  OpenType Collections
    (i.e., TTCs using  CFFs subfonts instead of TTFs),  where it may
    have a significant difference.
  * Fonts natively hinted for  ClearType are now supported, properly
    handling selector index 3 of the INSTCTRL bytecode instruction.
  * Major improvements to the GX TrueType variation font handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441972800">- Add Dont-use-hmtx-table-for-LSB.patch: Fixes gnu#45520, cut off
  fonts in gtk and qt. Taken from upstream git.</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1
  * IMPORTANT BUG FIXES
  - It turned  out that for CFFs  only the advance widths  should be
    taken from the  `htmx' table, not the side  bearings.  This bug,
    introduced in  version 2.6.0, makes  it necessary to  upgrade if
    you are using  CFFs; otherwise, you get cropped  glyphs with GUI
    interfaces like GTK or Qt.
  - Accessing Type 42 fonts returned  incorrect results if the glyph
    order of the embedded TrueType font differs from the glyph order
    of the Type 42 charstrings table.
  * IMPORTANT CHANGES
  - The header  file layout  has been  changed (again),  moving  all
    header files except `ft2build.h' into a subdirectory tree.
    Doing so  reduces the  possibility of  header file  name clashes
    (e.g., FTGL's  `FTGlyph.h' with FreeType's `ftglyph.h')  on case
    insensitive file systems like Mac OS X or Windows.
    Applications  that  use  (a)  the  `freetype-config'  script  or
    FreeType's `freetype2.pc' file for pkg-config to get the include
    directory  for the  compiler,  and (b)  the  documented way  for
    header inclusion like
    [#]include &lt;ft2build.h&gt;
    [#]include FT_FREETYPE_H
    ...
    don't need any change to the source code.
  - Simple access  to named instances  in GX variation fonts  is now
    available (in addition to the  previous method via FreeType's MM
    interface).   In  the `FT_Face'  structure,  bits  16-30 of  the
    `face_index' field hold the current named instance index for the
    given face  index, and bits  16-30 of `style_flags'  contain the
    number of  instances for  the given face  index.  `FT_Open_Face'
    and friends also understand the  extended bits of the face index
    parameter.
    You need to enable  TT_CONFIG_OPTION_GX_VAR_SUPPORT for this new
    feature.  Otherwise, bits  16-30 of the two fields  are zero (or
    are ignored).
  - Lao script support has been added to the auto-hinter.
  * MISCELLANEOUS
  - The auto-hinter's Arabic script support has been enhanced.
  - Superscript-like and  subscript-like glyphs  as used  by various
    phonetic alphabets like the IPA  are now better supported by the
    auto-hinter.
  - The TrueType bytecode interpreter now runs slightly faster.
  - Improved support for builds with cmake.
  - The  function  `FT_CeilFix'  now   always  rounds  towards  plus
    infinity.
  - The  function  `FT_FloorFix'  now always  rounds  towards  minus
    infinity.
  - A  new load  flag `FT_LOAD_COMPUTE_METRICS'  has been  added; it
    makes FreeType  ignore pre-computed  metrics, as needed  by font
    validating  or  font  editing  programs.  Right  now,  only  the
    TrueType  module supports  it  to ignore  data  from the  `hdmx'
    table.
  - Another round of bug fixes  to better handle broken fonts, found
    by Kostya Serebryany &lt;kcc@google.com&gt;.
- Dropping upstreamed patch Dont-use-hmtx-table-for-LSB.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="idonmez@suse.com" date="1495713600">- Add bsc-1038506.patch from upstream to fix unifont bsc#1038506</changelog>
  <changelog author="kbabioch@suse.com" date="1517918400">- Add CVE-2016-10244.patch: Make sure that the parse_charstrings function in
  type1/t1load.c does ensure that a font contains a glyph name to prevent a DoS
  through a heap-based buffer over-read or possibly have uunspecified other
  impact via a crafted file (CVE-2016-10244 bsc#1028103)
- Add CVE-2017-8105.patch: Fix an out-of-bounds write caused by a heap-based
  buffer overflow related to the t1_decoder_parse_charstrings function in
  psaux/t1decode.ca (CVE-2017-8105 bsc#1035807)
- Add CVE-2017-8287.patch: an out-of-bounds write caused by a heap-based buffer
  overflow related to the t1_builder_close_contour function in psaux/psobjs.c
  (CVE-2017-8287 bsc#1036457)
- Add 0001-integer-overflows.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
</package>
<package pkgid="7c02512be45a88d16965300c3b08a58580455895f39b5ac51b972d892faebeb0" name="freetype2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="5.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385553600">- Update to version 2.5.1
  * For  some WinFNT  files,  the last  glyph  wasn't displayed  but
    incorrectly marked as invalid.
  * The vertical size of glyphs was  incorrectly set after a call to
    `FT_GlyphSlot_Embolden', resulting in clipped glyphs.
  * Many fields of the `PCLT' table in SFNT based fonts (if accessed
    with `FT_Get_Sfnt_Table') were computed incorrectly.
  * In TrueType fonts,  hinting of composite glyphs  could sometimes
    deliver  incorrect positions  of  components or  even  distorted
    shapes.
  * WOFF font format support has been added.
  * The auto-hinter now supports Hebrew.  Greek and Cyrillic support
    has been improved.
  * Support for the forthcoming `OS/2'  SFNT table version 5, as can
    be found e.g. in the `Sitka' font family for Windows 8.1.
  * The header  file layout  has been changed.   After installation,
    all files are now located in `&lt;prefix&gt;/include/freetype2'.
    Applications  that  use   (a)  `freetype-config'  or  FreeType's
    `pkg-config' file to get the include directory for the compiler,
    and (b) the documented way for header inclusion like
    [#]include &lt;ft2build.h&gt; or #include FT_FREETYPE_H
    don't need any change to the source code.
  * The stem  darkening feature  of the  new CFF  engine can  now be
    fine-tuned with the new `darkening-parameters' property.
  * `ftgrid' has been updated to toggle various engines with the `H'
    key, similar to `ftview' and `ftdiff'.
  * The functionality of `ttdebug' has been greatly enhanced.
  . It now displays twilight, storage, and control value data; key
  * Better support of ARMv7 and x86_64 processors.
  * Apple's `sbix' color bitmap format is now supported.
  * Improved   auto-hinter  rendering   for  many   TrueType  fonts,
    especially in the range 20-40ppem.
  * A  new face  flag  `FT_FACE_FLAG_COLOR' has  been  added (to  be
    accessed with the macro `FT_HAS_COLOR').
  * `FT_Gzip_Uncompress'   (modeled    after   zlib's   `uncompress'
    function)  has been  added; this  is a  by-product of  the newly
    added WOFF support.
  * Support for  a build with  `cmake' has been contributed  by John
    Cary &lt;cary@txcorp.com&gt;.
  * Support for x64  builds with Visual C++ has  been contributed by
    Kenneth Miller &lt;kennethadammiller@yahoo.com&gt;
  * Manual pages for most demo programs have been added.
  * The GETINFO bytecode instruction for TrueType fonts was buggy if
    used to retrieve subpixel hinting information.  It was necessary
    to set  selector bit 6  to get  results for selector  bits 7-10,
    which is wrong.
  * Improved computation  of emulated vertical metrics  for TrueType
    fonts.
  * Fixed horizontal start-up position of vertical phantom points in
    TrueType bytecode.
- Rebase freetype2-subpixel.patch to current release
- Added fix-compile-in-non-debug.patch, fixes release build of ftdemos
- Added overflow.patch for resolving post-build-check detected error:
  I: Statement is overflowing a buffer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Update to version 2.5.2
  * Fixed bug  that made  FreeType crash  on some  popular (but  not
    fully conformant) fonts like `ahronbd.ttf'
  * Another round of improvements to correct positioning and hinting
    of composite glyphs in TrueType fonts
  * Fixed bug introduced in version  2.5.1: handling embedded
    bitmap strikes of  TrueType fonts, caused garbage display
    under some circumstances
  * Fixed `ftgrid' demo program compilation in non-development
    builds
- Droped fix-compile-in-non-debug.patch, included in this release</changelog>
  <changelog author="arvidjaar@gmail.com" date="1386763200">- freetype2 pkgconfig now includes -lpng16; make sure freetype2-devel
  Requires libpng-devel</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386849600">- Added patches:
  * don-t-mark-libpng-as-required-library-in-freetype-co.patch: it's
    private in pkgconfig file, and causes issues in downstream
    packages
- As per patch, remove libpng-devel Requires from devel package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394366400">- Update to version 2.5.3
  * IMPORTANT BUG FIXES
  - A vulnerability was  identified and fixed in the  new CFF
    driver (cf. http://savannah.nongnu.org/bugs/?41697;  it
    doesn't have a CVE number yet).  All users should upgrade.
  - More  bug  fixes related  to  correct  positioning of
    composite glyphs.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - FreeType can now use the HarfBuzz library to greatly improve
    the auto-hinting of  fonts that  use OpenType features:
    Many glyphs that are part  of such features but don't have
    cmap entries are now handled  properly, for  example small
    caps or superscripts. Define the configuration  macro
    FT_CONFIG_OPTION_USE_HARFBUZZ to activate HarfBuzz support.
    You need HarfBuzz version 0.9.19 or newer. Note that HarfBuzz
    depends on  FreeType; this currently causes a chicken-and-egg
    problem  that can be  solved as follows  in case HarfBuzz
    is not yet installed on your system.
    1. Compile  and  install  FreeType without the configuration
    macro FT_CONFIG_OPTION_USE_HARFBUZZ.
    2. Compile and install HarfBuzz.
    3. Define  macro  FT_CONFIG_OPTION_USE_HARFBUZZ, then
    compile and install FreeType again.
    With FreeType's  `configure' script the procedure  boils
    down to configure, build, and install Freetype, then
    configure, compile, and  install  HarfBuzz,  then configure,
    compile,  and  install FreeType again (after executing
    `make distclean').
  - All  libraries FreeType  depends on  are now  checked
    using  the `pkg-config' configuration files  first,
    followed by alternative methods.
  - The  new  value  `auto'  for the  various  `--with-XXX'
    library options   (for   example   `--with-harfbuzz=auto')
    makes   the `configure' script automatically link to the
    libraries it finds. This is now the default.
  - In case FreeType's `configure' script  can't find a
    library, you can  pass environment  variables to  circumvent
    pkg-config,  and those variables  have been  harmonized as
    a consequence  of the changes mentioned above:
    LIBZ           -&gt; removed; use LIBZ_CFLAGS and LIBZ_LIBS
    LIBBZ2         -&gt; removed; use BZIP2_CFLAGS and BZIP2_LIBS
    LIBPNG_LDFLAGS -&gt; LIBPNG_LIBS
    `./configure --help' shows all available environment variables.
  - The `freetype-config'  script now understands
    option `--static' to emit static linking information.
- Due to buildsystem changes, rename and rebase
  don-t-mark-libpng-as-required-library-in-freetype-co.patch to
  don-t-mark-libpng-as-required-library.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394712000">- Improve don-t-mark-libpng-as-required-library.patch: also handle
  Requires.private case (freetype does not include png headers)</changelog>
  <changelog author="nadvornik@suse.com" date="1395921600">- get 2.5.3 from Factory as it fixes
  CVE-2014-2240 CVE-2014-2241 (bnc#867620)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Enable the bz2 compression in freetype2
- Remove patch overflow.patch from freetype2.spec where it is not
  applied.
- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * Thread safety improvements
  * Thai script support has been added to the auto-hinter.
  * Arabic script support has been added to the auto-hinter.
  * Following OpenType version 1.7,  advance widths and side bearing
    values in  CFFs (wrapped  in an SFNT  structure) are  now always
    taken from the `hmtx' table.
  * Following OpenType  version 1.7, the  PostScript font name  of a
    CFF font (wrapped in an SFNT structure) is now always taken from
    the `name'  table.  This is  also true for  OpenType Collections
    (i.e., TTCs using  CFFs subfonts instead of TTFs),  where it may
    have a significant difference.
  * Fonts natively hinted for  ClearType are now supported, properly
    handling selector index 3 of the INSTCTRL bytecode instruction.
  * Major improvements to the GX TrueType variation font handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441972800">- Add Dont-use-hmtx-table-for-LSB.patch: Fixes gnu#45520, cut off
  fonts in gtk and qt. Taken from upstream git.</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1
  * IMPORTANT BUG FIXES
  - It turned  out that for CFFs  only the advance widths  should be
    taken from the  `htmx' table, not the side  bearings.  This bug,
    introduced in  version 2.6.0, makes  it necessary to  upgrade if
    you are using  CFFs; otherwise, you get cropped  glyphs with GUI
    interfaces like GTK or Qt.
  - Accessing Type 42 fonts returned  incorrect results if the glyph
    order of the embedded TrueType font differs from the glyph order
    of the Type 42 charstrings table.
  * IMPORTANT CHANGES
  - The header  file layout  has been  changed (again),  moving  all
    header files except `ft2build.h' into a subdirectory tree.
    Doing so  reduces the  possibility of  header file  name clashes
    (e.g., FTGL's  `FTGlyph.h' with FreeType's `ftglyph.h')  on case
    insensitive file systems like Mac OS X or Windows.
    Applications  that  use  (a)  the  `freetype-config'  script  or
    FreeType's `freetype2.pc' file for pkg-config to get the include
    directory  for the  compiler,  and (b)  the  documented way  for
    header inclusion like
    [#]include &lt;ft2build.h&gt;
    [#]include FT_FREETYPE_H
    ...
    don't need any change to the source code.
  - Simple access  to named instances  in GX variation fonts  is now
    available (in addition to the  previous method via FreeType's MM
    interface).   In  the `FT_Face'  structure,  bits  16-30 of  the
    `face_index' field hold the current named instance index for the
    given face  index, and bits  16-30 of `style_flags'  contain the
    number of  instances for  the given face  index.  `FT_Open_Face'
    and friends also understand the  extended bits of the face index
    parameter.
    You need to enable  TT_CONFIG_OPTION_GX_VAR_SUPPORT for this new
    feature.  Otherwise, bits  16-30 of the two fields  are zero (or
    are ignored).
  - Lao script support has been added to the auto-hinter.
  * MISCELLANEOUS
  - The auto-hinter's Arabic script support has been enhanced.
  - Superscript-like and  subscript-like glyphs  as used  by various
    phonetic alphabets like the IPA  are now better supported by the
    auto-hinter.
  - The TrueType bytecode interpreter now runs slightly faster.
  - Improved support for builds with cmake.
  - The  function  `FT_CeilFix'  now   always  rounds  towards  plus
    infinity.
  - The  function  `FT_FloorFix'  now always  rounds  towards  minus
    infinity.
  - A  new load  flag `FT_LOAD_COMPUTE_METRICS'  has been  added; it
    makes FreeType  ignore pre-computed  metrics, as needed  by font
    validating  or  font  editing  programs.  Right  now,  only  the
    TrueType  module supports  it  to ignore  data  from the  `hdmx'
    table.
  - Another round of bug fixes  to better handle broken fonts, found
    by Kostya Serebryany &lt;kcc@google.com&gt;.
- Dropping upstreamed patch Dont-use-hmtx-table-for-LSB.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="idonmez@suse.com" date="1495713600">- Add bsc-1038506.patch from upstream to fix unifont bsc#1038506</changelog>
  <changelog author="kbabioch@suse.com" date="1517918400">- Add CVE-2016-10244.patch: Make sure that the parse_charstrings function in
  type1/t1load.c does ensure that a font contains a glyph name to prevent a DoS
  through a heap-based buffer over-read or possibly have uunspecified other
  impact via a crafted file (CVE-2016-10244 bsc#1028103)
- Add CVE-2017-8105.patch: Fix an out-of-bounds write caused by a heap-based
  buffer overflow related to the t1_decoder_parse_charstrings function in
  psaux/t1decode.ca (CVE-2017-8105 bsc#1035807)
- Add CVE-2017-8287.patch: an out-of-bounds write caused by a heap-based buffer
  overflow related to the t1_builder_close_contour function in psaux/psobjs.c
  (CVE-2017-8287 bsc#1036457)
- Add 0001-integer-overflows.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
</package>
<package pkgid="4400e35094ef6c19caa4494249fe5261a1e0643b624297d7a5624cba71cbbc2d" name="freexl" arch="src">
  <version epoch="0" ver="1.0.4" rel="5.1"/>
  <changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
  <changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
  <changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
  <changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
  <changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>
</package>
<package pkgid="78eecab1b6e2267cd1ed7d11d8ef355fd51982900ae4b16c2bb7b7bf4dba8a49" name="freexl" arch="src">
  <version epoch="0" ver="1.0.5" rel="8.1"/>
  <changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
  <changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
  <changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
  <changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
  <changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>
  <changelog author="kbabioch@suse.com" date="1519646400">- Update to version 1.0.5:
  * No chagelog provided by upstream
  * CVE-2018-7439 (boo#1082774) from 1.0.4 is fixed
  * CVE-2018-7438 (boo#1082775) from 1.0.4 is fixed
  * CVE-2018-7437 (boo#1082776) from 1.0.4 is fixed
  * CVE-2018-7436 (boo#1082777) from 1.0.4 is fixed
  * CVE-2018-7435 (boo#1082778) from 1.0.4 is fixed</changelog>
</package>
<package pkgid="3cf6d8cdd0c0619353f1f4b62fdab5156733c0b3ba40f2a6429bc44bc6ba7308" name="freexl-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="5.1"/>
  <changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
  <changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
  <changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
  <changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
  <changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>
</package>
<package pkgid="cd924500a7af7e71c93fe3150b625325eb0ce129b0d8c93472bbc13d7c39758c" name="freexl-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="8.1"/>
  <changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
  <changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
  <changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
  <changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
  <changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
  <changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
  <changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>
  <changelog author="kbabioch@suse.com" date="1519646400">- Update to version 1.0.5:
  * No chagelog provided by upstream
  * CVE-2018-7439 (boo#1082774) from 1.0.4 is fixed
  * CVE-2018-7438 (boo#1082775) from 1.0.4 is fixed
  * CVE-2018-7437 (boo#1082776) from 1.0.4 is fixed
  * CVE-2018-7436 (boo#1082777) from 1.0.4 is fixed
  * CVE-2018-7435 (boo#1082778) from 1.0.4 is fixed</changelog>
</package>
<package pkgid="563d31da4786a303c420cc1e41c90fb5e4fce03a63d593cf4589c776fa0fd65b" name="frei0r-plugins" arch="src">
  <version epoch="0" ver="1.4" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
  <changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
  <changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
  <changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
  <changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>
</package>
<package pkgid="b6554a7855362e05f6dde9aea8630ae0afea48d9ef11c2e5c8810fa83522d385" name="frei0r-plugins" arch="x86_64">
  <version epoch="0" ver="1.4" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
  <changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
  <changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
  <changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
  <changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>
</package>
<package pkgid="24f6158665e987453d5abbae2c24e2987239ff46dab00fad8efd9ae6acc30626" name="frei0r-plugins-devel" arch="x86_64">
  <version epoch="0" ver="1.4" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
  <changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
  <changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
  <changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
  <changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>
</package>
<package pkgid="eb3792a63ab297663c9e21445fa57814d8386491feff7d44c21e4bd0c9c291c8" name="frei0r-plugins-opencv" arch="x86_64">
  <version epoch="0" ver="1.4" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
  <changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
  <changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
  <changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
  <changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>
</package>
<package pkgid="87d01a55540aebbf67132b850894efebf5740bb4030f0cfbfaafc1a32f67fcfe" name="ft2demos" arch="src">
  <version epoch="0" ver="2.6.3" rel="5.3.1"/>
  <changelog author="werner@suse.com" date="1371038400">- Add conflict to package dtc for /usr/bin/ftdump as the two tools
  are different,
  dtc:      ftdump -- Flat Tree dumping utility
  ft2demos: ftdump -- Simple font dumper</changelog>
  <changelog author="idonmez@suse.com" date="1372852800">- Update to version 2.5.0
  * ftview has been updated to  support color embedded bitmaps.
  * The 'ttdebug' program has been further improved.  In particular,
    it accepts a new command line  option `-H' to select the hinting
    engine.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1385553600">- Update to version 2.5.1
  * For  some WinFNT  files,  the last  glyph  wasn't displayed  but
    incorrectly marked as invalid.
  * The vertical size of glyphs was  incorrectly set after a call to
    `FT_GlyphSlot_Embolden', resulting in clipped glyphs.
  * Many fields of the `PCLT' table in SFNT based fonts (if accessed
    with `FT_Get_Sfnt_Table') were computed incorrectly.
  * In TrueType fonts,  hinting of composite glyphs  could sometimes
    deliver  incorrect positions  of  components or  even  distorted
    shapes.
  * WOFF font format support has been added.
  * The auto-hinter now supports Hebrew.  Greek and Cyrillic support
    has been improved.
  * Support for the forthcoming `OS/2'  SFNT table version 5, as can
    be found e.g. in the `Sitka' font family for Windows 8.1.
  * The header  file layout  has been changed.   After installation,
    all files are now located in `&lt;prefix&gt;/include/freetype2'.
    Applications  that  use   (a)  `freetype-config'  or  FreeType's
    `pkg-config' file to get the include directory for the compiler,
    and (b) the documented way for header inclusion like
    [#]include &lt;ft2build.h&gt; or #include FT_FREETYPE_H
    don't need any change to the source code.
  * The stem  darkening feature  of the  new CFF  engine can  now be
    fine-tuned with the new `darkening-parameters' property.
  * `ftgrid' has been updated to toggle various engines with the `H'
    key, similar to `ftview' and `ftdiff'.
  * The functionality of `ttdebug' has been greatly enhanced.
  . It now displays twilight, storage, and control value data; key
  * Better support of ARMv7 and x86_64 processors.
  * Apple's `sbix' color bitmap format is now supported.
  * Improved   auto-hinter  rendering   for  many   TrueType  fonts,
    especially in the range 20-40ppem.
  * A  new face  flag  `FT_FACE_FLAG_COLOR' has  been  added (to  be
    accessed with the macro `FT_HAS_COLOR').
  * `FT_Gzip_Uncompress'   (modeled    after   zlib's   `uncompress'
    function)  has been  added; this  is a  by-product of  the newly
    added WOFF support.
  * Support for  a build with  `cmake' has been contributed  by John
    Cary &lt;cary@txcorp.com&gt;.
  * Support for x64  builds with Visual C++ has  been contributed by
    Kenneth Miller &lt;kennethadammiller@yahoo.com&gt;
  * Manual pages for most demo programs have been added.
  * The GETINFO bytecode instruction for TrueType fonts was buggy if
    used to retrieve subpixel hinting information.  It was necessary
    to set  selector bit 6  to get  results for selector  bits 7-10,
    which is wrong.
  * Improved computation  of emulated vertical metrics  for TrueType
    fonts.
  * Fixed horizontal start-up position of vertical phantom points in
    TrueType bytecode.
- Rebase freetype2-subpixel.patch to current release
- Added fix-compile-in-non-debug.patch, fixes release build of ftdemos
- Added overflow.patch for resolving post-build-check detected error:
  I: Statement is overflowing a buffer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Update to version 2.5.2
  * Fixed bug  that made  FreeType crash  on some  popular (but  not
    fully conformant) fonts like `ahronbd.ttf'
  * Another round of improvements to correct positioning and hinting
    of composite glyphs in TrueType fonts
  * Fixed bug introduced in version  2.5.1: handling embedded
    bitmap strikes of  TrueType fonts, caused garbage display
    under some circumstances
  * Fixed `ftgrid' demo program compilation in non-development
    builds
- Droped fix-compile-in-non-debug.patch, included in this release</changelog>
  <changelog author="arvidjaar@gmail.com" date="1386763200">- freetype2 pkgconfig now includes -lpng16; make sure freetype2-devel
  Requires libpng-devel</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386849600">- Added patches:
  * don-t-mark-libpng-as-required-library-in-freetype-co.patch: it's
    private in pkgconfig file, and causes issues in downstream
    packages
- As per patch, remove libpng-devel Requires from devel package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394366400">- Update to version 2.5.3
  * IMPORTANT BUG FIXES
  - A vulnerability was  identified and fixed in the  new CFF
    driver (cf. http://savannah.nongnu.org/bugs/?41697;  it
    doesn't have a CVE number yet).  All users should upgrade.
  - More  bug  fixes related  to  correct  positioning of
    composite glyphs.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - FreeType can now use the HarfBuzz library to greatly improve
    the auto-hinting of  fonts that  use OpenType features:
    Many glyphs that are part  of such features but don't have
    cmap entries are now handled  properly, for  example small
    caps or superscripts. Define the configuration  macro
    FT_CONFIG_OPTION_USE_HARFBUZZ to activate HarfBuzz support.
    You need HarfBuzz version 0.9.19 or newer. Note that HarfBuzz
    depends on  FreeType; this currently causes a chicken-and-egg
    problem  that can be  solved as follows  in case HarfBuzz
    is not yet installed on your system.
    1. Compile  and  install  FreeType without the configuration
    macro FT_CONFIG_OPTION_USE_HARFBUZZ.
    2. Compile and install HarfBuzz.
    3. Define  macro  FT_CONFIG_OPTION_USE_HARFBUZZ, then
    compile and install FreeType again.
    With FreeType's  `configure' script the procedure  boils
    down to configure, build, and install Freetype, then
    configure, compile, and  install  HarfBuzz,  then configure,
    compile,  and  install FreeType again (after executing
    `make distclean').
  - All  libraries FreeType  depends on  are now  checked
    using  the `pkg-config' configuration files  first,
    followed by alternative methods.
  - The  new  value  `auto'  for the  various  `--with-XXX'
    library options   (for   example   `--with-harfbuzz=auto')
    makes   the `configure' script automatically link to the
    libraries it finds. This is now the default.
  - In case FreeType's `configure' script  can't find a
    library, you can  pass environment  variables to  circumvent
    pkg-config,  and those variables  have been  harmonized as
    a consequence  of the changes mentioned above:
    LIBZ           -&gt; removed; use LIBZ_CFLAGS and LIBZ_LIBS
    LIBBZ2         -&gt; removed; use BZIP2_CFLAGS and BZIP2_LIBS
    LIBPNG_LDFLAGS -&gt; LIBPNG_LIBS
    `./configure --help' shows all available environment variables.
  - The `freetype-config'  script now understands
    option `--static' to emit static linking information.
- Due to buildsystem changes, rename and rebase
  don-t-mark-libpng-as-required-library-in-freetype-co.patch to
  don-t-mark-libpng-as-required-library.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394712000">- Improve don-t-mark-libpng-as-required-library.patch: also handle
  Requires.private case (freetype does not include png headers)</changelog>
  <changelog author="ro@suse.de" date="1399464000">- mark bnc628213_test.otf as NoSource to avoid triggering
  clamav check</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
</package>
<package pkgid="0e61ac7d86b6dfdf678d83fcd96056c0cf574a10e6c57c198eac49429ff42306" name="ft2demos" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="5.3.1"/>
  <changelog author="werner@suse.com" date="1371038400">- Add conflict to package dtc for /usr/bin/ftdump as the two tools
  are different,
  dtc:      ftdump -- Flat Tree dumping utility
  ft2demos: ftdump -- Simple font dumper</changelog>
  <changelog author="idonmez@suse.com" date="1372852800">- Update to version 2.5.0
  * ftview has been updated to  support color embedded bitmaps.
  * The 'ttdebug' program has been further improved.  In particular,
    it accepts a new command line  option `-H' to select the hinting
    engine.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1385553600">- Update to version 2.5.1
  * For  some WinFNT  files,  the last  glyph  wasn't displayed  but
    incorrectly marked as invalid.
  * The vertical size of glyphs was  incorrectly set after a call to
    `FT_GlyphSlot_Embolden', resulting in clipped glyphs.
  * Many fields of the `PCLT' table in SFNT based fonts (if accessed
    with `FT_Get_Sfnt_Table') were computed incorrectly.
  * In TrueType fonts,  hinting of composite glyphs  could sometimes
    deliver  incorrect positions  of  components or  even  distorted
    shapes.
  * WOFF font format support has been added.
  * The auto-hinter now supports Hebrew.  Greek and Cyrillic support
    has been improved.
  * Support for the forthcoming `OS/2'  SFNT table version 5, as can
    be found e.g. in the `Sitka' font family for Windows 8.1.
  * The header  file layout  has been changed.   After installation,
    all files are now located in `&lt;prefix&gt;/include/freetype2'.
    Applications  that  use   (a)  `freetype-config'  or  FreeType's
    `pkg-config' file to get the include directory for the compiler,
    and (b) the documented way for header inclusion like
    [#]include &lt;ft2build.h&gt; or #include FT_FREETYPE_H
    don't need any change to the source code.
  * The stem  darkening feature  of the  new CFF  engine can  now be
    fine-tuned with the new `darkening-parameters' property.
  * `ftgrid' has been updated to toggle various engines with the `H'
    key, similar to `ftview' and `ftdiff'.
  * The functionality of `ttdebug' has been greatly enhanced.
  . It now displays twilight, storage, and control value data; key
  * Better support of ARMv7 and x86_64 processors.
  * Apple's `sbix' color bitmap format is now supported.
  * Improved   auto-hinter  rendering   for  many   TrueType  fonts,
    especially in the range 20-40ppem.
  * A  new face  flag  `FT_FACE_FLAG_COLOR' has  been  added (to  be
    accessed with the macro `FT_HAS_COLOR').
  * `FT_Gzip_Uncompress'   (modeled    after   zlib's   `uncompress'
    function)  has been  added; this  is a  by-product of  the newly
    added WOFF support.
  * Support for  a build with  `cmake' has been contributed  by John
    Cary &lt;cary@txcorp.com&gt;.
  * Support for x64  builds with Visual C++ has  been contributed by
    Kenneth Miller &lt;kennethadammiller@yahoo.com&gt;
  * Manual pages for most demo programs have been added.
  * The GETINFO bytecode instruction for TrueType fonts was buggy if
    used to retrieve subpixel hinting information.  It was necessary
    to set  selector bit 6  to get  results for selector  bits 7-10,
    which is wrong.
  * Improved computation  of emulated vertical metrics  for TrueType
    fonts.
  * Fixed horizontal start-up position of vertical phantom points in
    TrueType bytecode.
- Rebase freetype2-subpixel.patch to current release
- Added fix-compile-in-non-debug.patch, fixes release build of ftdemos
- Added overflow.patch for resolving post-build-check detected error:
  I: Statement is overflowing a buffer</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Update to version 2.5.2
  * Fixed bug  that made  FreeType crash  on some  popular (but  not
    fully conformant) fonts like `ahronbd.ttf'
  * Another round of improvements to correct positioning and hinting
    of composite glyphs in TrueType fonts
  * Fixed bug introduced in version  2.5.1: handling embedded
    bitmap strikes of  TrueType fonts, caused garbage display
    under some circumstances
  * Fixed `ftgrid' demo program compilation in non-development
    builds
- Droped fix-compile-in-non-debug.patch, included in this release</changelog>
  <changelog author="arvidjaar@gmail.com" date="1386763200">- freetype2 pkgconfig now includes -lpng16; make sure freetype2-devel
  Requires libpng-devel</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386849600">- Added patches:
  * don-t-mark-libpng-as-required-library-in-freetype-co.patch: it's
    private in pkgconfig file, and causes issues in downstream
    packages
- As per patch, remove libpng-devel Requires from devel package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394366400">- Update to version 2.5.3
  * IMPORTANT BUG FIXES
  - A vulnerability was  identified and fixed in the  new CFF
    driver (cf. http://savannah.nongnu.org/bugs/?41697;  it
    doesn't have a CVE number yet).  All users should upgrade.
  - More  bug  fixes related  to  correct  positioning of
    composite glyphs.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - FreeType can now use the HarfBuzz library to greatly improve
    the auto-hinting of  fonts that  use OpenType features:
    Many glyphs that are part  of such features but don't have
    cmap entries are now handled  properly, for  example small
    caps or superscripts. Define the configuration  macro
    FT_CONFIG_OPTION_USE_HARFBUZZ to activate HarfBuzz support.
    You need HarfBuzz version 0.9.19 or newer. Note that HarfBuzz
    depends on  FreeType; this currently causes a chicken-and-egg
    problem  that can be  solved as follows  in case HarfBuzz
    is not yet installed on your system.
    1. Compile  and  install  FreeType without the configuration
    macro FT_CONFIG_OPTION_USE_HARFBUZZ.
    2. Compile and install HarfBuzz.
    3. Define  macro  FT_CONFIG_OPTION_USE_HARFBUZZ, then
    compile and install FreeType again.
    With FreeType's  `configure' script the procedure  boils
    down to configure, build, and install Freetype, then
    configure, compile, and  install  HarfBuzz,  then configure,
    compile,  and  install FreeType again (after executing
    `make distclean').
  - All  libraries FreeType  depends on  are now  checked
    using  the `pkg-config' configuration files  first,
    followed by alternative methods.
  - The  new  value  `auto'  for the  various  `--with-XXX'
    library options   (for   example   `--with-harfbuzz=auto')
    makes   the `configure' script automatically link to the
    libraries it finds. This is now the default.
  - In case FreeType's `configure' script  can't find a
    library, you can  pass environment  variables to  circumvent
    pkg-config,  and those variables  have been  harmonized as
    a consequence  of the changes mentioned above:
    LIBZ           -&gt; removed; use LIBZ_CFLAGS and LIBZ_LIBS
    LIBBZ2         -&gt; removed; use BZIP2_CFLAGS and BZIP2_LIBS
    LIBPNG_LDFLAGS -&gt; LIBPNG_LIBS
    `./configure --help' shows all available environment variables.
  - The `freetype-config'  script now understands
    option `--static' to emit static linking information.
- Due to buildsystem changes, rename and rebase
  don-t-mark-libpng-as-required-library-in-freetype-co.patch to
  don-t-mark-libpng-as-required-library.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394712000">- Improve don-t-mark-libpng-as-required-library.patch: also handle
  Requires.private case (freetype does not include png headers)</changelog>
  <changelog author="ro@suse.de" date="1399464000">- mark bnc628213_test.otf as NoSource to avoid triggering
  clamav check</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
</package>
<package pkgid="6895d6396455b3228fcd9589504f1f32b1f07889a8c24fa574229e2281442ae8" name="ftsteutates" arch="src">
  <version epoch="0" ver="20160601" rel="4.2.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="23068e702a9c7759ce0128d29da226608e72f537c880ecb37b75538f6ffc55e3" name="ftsteutates" arch="src">
  <version epoch="0" ver="20160601" rel="4.4.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="75a5470cea2c1f5a425bc08603230d9853a3627800f30ec2bfb32aba325048e7" name="ftsteutates-kmp-default" arch="x86_64">
  <version epoch="0" ver="20160601_k4.4.114_42" rel="4.2.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="183a61aaf70418ea2c0feeb589bcfa137a5e88c0b375a2ec286279411780b69f" name="ftsteutates-kmp-default" arch="x86_64">
  <version epoch="0" ver="20160601_k4.4.132_53" rel="4.4.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="9a8a287dd0e1bbfcd4a031f9cc50a6eb6dcf903a8a69e0ae5f03ae8cbaa78ed7" name="ftsteutates-sensors" arch="noarch">
  <version epoch="0" ver="20160601" rel="4.2.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="5ddee36d028147e40cf518df3c8ff0c93695ae91d75ae57bb93100a6de51ee6e" name="ftsteutates-sensors" arch="noarch">
  <version epoch="0" ver="20160601" rel="4.4.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1468324800">- initial package ftsteutates version 20160601</changelog>
  <changelog author="mpluskal@suse.com" date="1472990400">- Use url for source
- Use modern macros for KMP handling</changelog>
</package>
<package pkgid="6078d7b365c61f72a8095939f62079f152d7d9f008e51e9a08074ae30cc4ae9b" name="fuse" arch="src">
  <version epoch="0" ver="2.9.3" rel="12.3.2"/>
  <changelog author="mhrusecky@suse.cz" date="1317038400">- enabling libulockmgr</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mszeredi@suse.cz" date="1320321600">- handle case of failure to allocate request [bnc#723616]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492800">- update to 2.8.7
  * fix ambiguous symbol version for fuse_chan_new
  * prevent calling ulockmgr_server with illegal arguments
  * fix hang in wait_on_path()</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492801">- compile /bin/fusermount as a position independent executable
  [bnc#743155]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492802">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432036800">- add libfuse-fix-exec-environment-for-mount-and-unmount.patch
  (bsc#931452 CVE-2015-3202)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="4ba265481289ffb245fb37d96509b28e525f3a7f95e0b2de192881863e77cdd2" name="fuse" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="12.3.2"/>
  <changelog author="mhrusecky@suse.cz" date="1317038400">- enabling libulockmgr</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mszeredi@suse.cz" date="1320321600">- handle case of failure to allocate request [bnc#723616]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492800">- update to 2.8.7
  * fix ambiguous symbol version for fuse_chan_new
  * prevent calling ulockmgr_server with illegal arguments
  * fix hang in wait_on_path()</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492801">- compile /bin/fusermount as a position independent executable
  [bnc#743155]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492802">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432036800">- add libfuse-fix-exec-environment-for-mount-and-unmount.patch
  (bsc#931452 CVE-2015-3202)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="5a086b61b6afdd68a2e047741ddd3d5eae75a8eed677c2b6ea0ff5b9a839d63e" name="fuse-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="12.3.2"/>
  <changelog author="mhrusecky@suse.cz" date="1317038400">- enabling libulockmgr</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mszeredi@suse.cz" date="1320321600">- handle case of failure to allocate request [bnc#723616]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492800">- update to 2.8.7
  * fix ambiguous symbol version for fuse_chan_new
  * prevent calling ulockmgr_server with illegal arguments
  * fix hang in wait_on_path()</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492801">- compile /bin/fusermount as a position independent executable
  [bnc#743155]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492802">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432036800">- add libfuse-fix-exec-environment-for-mount-and-unmount.patch
  (bsc#931452 CVE-2015-3202)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="797e3636775f27991d510c6a0f8c9ea6d481092c2aaf225a3355fc50b0ce457e" name="fuse-devel-static" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="12.3.2"/>
  <changelog author="mhrusecky@suse.cz" date="1317038400">- enabling libulockmgr</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mszeredi@suse.cz" date="1320321600">- handle case of failure to allocate request [bnc#723616]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492800">- update to 2.8.7
  * fix ambiguous symbol version for fuse_chan_new
  * prevent calling ulockmgr_server with illegal arguments
  * fix hang in wait_on_path()</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492801">- compile /bin/fusermount as a position independent executable
  [bnc#743155]</changelog>
  <changelog author="mszeredi@suse.cz" date="1327492802">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432036800">- add libfuse-fix-exec-environment-for-mount-and-unmount.patch
  (bsc#931452 CVE-2015-3202)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="536cf98a6cf59124b10797149758a353b014ded6ff0fb60bd6f6bbd24078a6d5" name="fwts" arch="src">
  <version epoch="0" ver="17.07.00" rel="8.1"/>
  <changelog author="mpluskal@suse.com" date="1443009600">- Update to 05.09.00
  * Update ACPICA to version 20150717
  * SMBios 3.0.0 tests supported
  * new features:
  + acpi: method: add _CR3 test
  + acpi: method: add _MTL test
  + acpi: method: add _RST test
  + acpi: method: add _PRR test
  + data: klog.json: sync with latest 4.2 kernel messages
    (LP: #1493039)
  + lib: smbios: add smbios version 3.0.0 entry find helper
  + dmicheck: add test for smbios 3.0.0 entry point
  + dmicheck: add error test for SMBIOS 3.0.0 table
  + dmicheck: sync the dmi value test with smbios 3.0.0 spec
  * fixed bugs:
  + acpi: fadt: merge tests for reset register
  + cpu: cpufreq: reduce scope of variables
  + acpi: gpedump: clarify precedence for &amp; and ?
  + lib: fwts_cpu: reduce scope on variables
  + ACPICA: Update to version 20150717 (LP: #1486253)
  + lib: fwts_log: re-work to clean up va_arg scoping
  + uefi: uefirtvariable: clean up cppcheck style warning
  + acpi: rsdp: make OEM ID test less strict
  + fix some spelling mistakes in code and sync fwts-tests
    accordingly
  + cpu: maxfreq: check for unlikely event that no CPUs in cpu
    list
  + acpi: crsdump: fix incorrect use of string size in string
    copies
  + lib: fwts_acpi_tables: add checking for empty table parsing
  + lib: fwts_acpi_table: remove dead initialisation of ptr
  + dmi: dmicheck: fix build error on 32 bit builds
  + Makefile.am: use pkg-config for json-c
  + lib: fwts_smbios: fix the smbios version from uefi always
    zero (LP: #1484023)
  + lib: fwts_scan_efi_systable: fix getting wrong smbios entry
    (LP: #1484046)
  + acpi: dbg2: won't find obj when no namespace device path
    (lp: #1486893)
  + lib: fwts_smbios: add the struct definition for smbios
    3.0.0
  + dmicheck: re-orgainise the smbios entry point check
  + dmicheck: fix the Base Board type range typos
  + auto-packager: mkpackage.sh: remove utopic</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 05.11.00
  * Update ACPICA to version 20150930
  * New Features
  + Add in the notion of ACPI compliance tests.
  + MADT subtables: Local SAPIC structure has 3 reserved bytes,
  not 1
  + ACPI: MADT: update GICC flag checks for ACPI 6.0
  + ACPI: MADT: further update to GICC flag checks for 6.0
  + acpi: method: skip scope names in method_evaluate_method
  + acpi: method: add _GPE test
  + acpi: method: add _TSN test
  + acpi: method: add _TFP test
  + acpi: method: add _EC test
  + acpi: method: add _CWS test
  + acpi: method: add _BTH test
  + auto-packager: mkpackage.sh: add xenial
  + acpi: tpm2: add check for zero control area address (LP:
  [#1506442])
  + securebootcert: change fail to warning when MS UEFI CA not
  found in DB
  + lib: fwts_uefi: add BMC device path define
  + uefidump: add dumping the BMC device path
  + uefibootpath: add test for the BMC device path
  + lib: fwts_uefi: add the URI device path define
  + uefibootpath: add test for the URI device path
  + uefidump: add dumping for the URI device path
  + lib: fwts_uefi: add the UFS device path define
  + uefidump: add dumping for the UFS device path
  + uefibootpath: add test for the UFS device path
  * Fixed Bugs
  + dmi: dmicheck: fix SMBIOS issues on aarch64 systems
  + acpidump: add missing reserved fields to MADT structures
  + cpufreq: the calibration is taking a long time, make it
  faster
  + acpi: tcpa: replace tab with spaces to fix formatting
  alignment</changelog>
  <changelog author="mpluskal@suse.com" date="1450526400">- Update to 05.12.00
  * Update ACPICA to version 20151124
  * live-image/fwts-frontend-text: add a selection for recommended
  * data: klog.json: add in some more kernel error messages for
  4.3
  * ACPI: Add ASPT test
  * lib: framework: allow mixed tests and test category options
  * fwts: framework: Add --log-level option
  * lib: fwts_uefi: add SD device path define
  * Boot path sync with UEFI spec. 2.5
  + uefibootpath: add test for the SD device path
  + uefidump: add dumping for the SD device path
  + lib: fwts_uefi: add efi bluetooth device path define
  + uefibootpath: add test for the bluetooth device path
  + uefidump: add dumping for the bluetooth device path
  + lib: fwts_uefi: add wireless device path define
  + uefibootpath: add test for the wireless device path
  + uefidump: add dumping for the wireless device path
  + lib: fwts_uefi: add ramdisk device path define
  + uefibootpath: add test for the ramdisk device path
  + uefidump: add dumping for the ramdisk device path
  * Fixed bugs
  + acpi: fpdt: add a terminate for buggy BIOS that reports zero
  length
  + lib: klog: remove use of pcre, use regex instead
  + utilities: kernelscan: remove use of pcre, use regex instead
  + uefidump: add more bounds checking and remove need for heap
  + utilities: fix memory leak, line not being free'd
  + acpi: bert: remove redundant variable 'length'
  + lib: iasl: rework IASL interface to ACPICA
  + acpi: acpidump: use IASL rather than fwts custom table dump
  code
  + s3 + klog: make log scanning more robust for S3 (LP: #1522292)
  + lib: acpica: make region handler more robust (LP: #1524217)
  + debian: copyright, fix lintian warnings
  + Debian: update Standards-Version to 3.9.6
  + acpi: acpidump: check for fwts_iasl_init failure
  + lib: fwts_acpi_tables: fix segfault when tables fail to load
  (LP: #1452201)
  + acpi: dbg2: remove dead store to ptr1
  + hotkey: fix key reading loop, it needs to loop more than once
  + lib: fwts_framework: remove dead store to len in for loop
  + lib: fwts_acpi_table: remove redundant store to rsdt
  + acpi: gpedump: remove redundant store to gpe_xrupt_info
  + lib: fwts_acpi_tables: remove dead store to facs
  + acpica: fwts_acpica: remove redundant store to length
  + lib: fwts_acpi_tables: remove redundant store to xsdt
  + lib: fwts_acpi_tables: check table to avoid dereferencing
  NULL ptr
  + lib: fwts_acpi_table: Fix FADT update in creation of fake
  FACS table.
  + uefibootpath: fix the wrong type for relative offset range
  path</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 16.01.00
  * ACPICA: Update to version 20160108
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218
  * esrtdump: add dumping for esrt table
  * fixed bugs:
    + Fix spelling mistakes of "ACPI"
    + method: update method status
    + utilities: kernelscan: fix memory leaks and a segfault
    + acpi: cstates: fix clang build warning on zero CPUs.
    + acpi: s3, s3power, s4: replace cleanup free with explicit
    frees
    + data: klog.json: add in some more kernel error messages for
    4.4
    + acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
    + acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should
    be an info
    + Update copyright year to 2016
    + dmi: dmicheck: fix reserved bits mask for Processor
    Information
    + uefirtvariable: fix decalred VLA have zero size</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 16.02.00
  * Start defining FWTS architectures as variables
  * Define some utility functions for using the fwts_architecture
    enum
  * Add mechanism to tell FWTS what architecture is being tested
  * ACPI: MADT: add in compliance tests for the MADT and subtables
  * ACPI: Add in MADT subtable description for GIC ITS subtable
  * ACPI: MADT: add in compliance checks for the GIC ITS subtable
  * Documentation: add --acpicompliance to man page
  * Documentation: add --arch to the man page
  * RSDP: minor cleanups to rsdp.c for checkpatch issues
  * utilities: add a helper function for printing out architecture
    names
  * ACPI tables: when bodging up an RSDP, do the right thing for
    the arch
  * ACPI RSDP: flesh out the tests to check for full spec
    compliance.
  * Update regression test rsdp-0001/test-0001.sh
  * Update the regression test arg-help-0001/test-0001.sh
  * Update regression test for arg-help-0001/test-0002.sh
  * Update regression test for arg-show-tests-0001/test-0001.sh
  * Update regression test arg-show-tests-full-0001/test-0001.sh
  * Update the regression test arg-table-path-0001/test-0001.sh
  * Update the regression test madt-0001/test-0001.sh
  * Update the regression test madt-0001/test-0002.sh
  * FADT: enable compiling on non-x86 architectures
  * FADT: non-x86 machines need an FADT but x86 can survive
    without one
  * FADT: disable SCI_EN and RESET_REG tests when in reduced
    hardware mode
  * FADT: add in code to log basic info about the various FADT
    flag fields
  * Add in bit masks for FACS flags.
  * FADT: move log info out of test2, will provide it elsewhere
  * ACPI: Add hypervisor ID field to FADT.
  * FADT: minor cleanup and initial compliance tests
  * FADT: expand the compliance test for FIRMWARE_CTRL fields
  * FADT: expand compliance checks for DSDT and X_DSDT fields
  * FADT: add compliance tests for reserved fields, PM profile,
    reduced hardware
  * FADT: restructure test sequence around reduced hardware mode
  * FADT: expand compliance tests for the SMI_CMD field
  * FADT: add compliance tests for the ACPI_ENABLE and
    ACPI_DISABLE fields
  * FADT: add compliance tests for S4BIOS_REQ and PSTATE_CNT
    fields
  * FADT: extend and add PM address block compliance tests
  * FADT: enhance compliance tests for GPE blocks
  * FADT: add compliance test for the CST_CNT field
  * FADT: add in compliance tests for C2/C3 latency fields
  * FADT: add in SLEEP_CONTROL_REG and SLEEP_STATUS_REG
    compliance tests
  * FADT: remove no longer useful variables from test1
  * FADT: add safety checks for older versions of FADT
  * FADT: update regression tests to incorporate new/changed
    tests
  * acpi: method: add _PMC test
  * acpi: method: add _PRT test
  * fwts-test: update for _PMC and _PRT tests
  * acpi: method: add _RDI test
  * acpi: method: add _LPI test
  * fwts-test: update for _RDI and _LPI tests
  * acpi: method: remove non-method names from the top comments
  * acpi: erst: fix incorrect error message for reserved field
  * fwts-test: update erst test for the fix of reserved field
  * lib: fwts_klog: fix incorrect indentation, detected by gcc-6
  * lib: fwts_hwinfo: clean up type punning, fixes warning with
    gcc-6
  * fwts: wakealarm: reset wakealarm timer at end of test
    (LP: #1534003)
  * Update arg-show-tests-full now that we have an extra test in
    wakealarm
  * dmi: dmicheck: add some simple sanity checks to table size
  * lib: fwts_args: use safer strncat than strcat
  * lib: fwts_acpi_tables: don't do expensive low allocs multiple
    times
  * acpi: fadt: check 32/64 bit PM register addresses for
    inconsistency (LP: #1536606)
  * acpi: madt: fix incorrect format specifier for size_t
  * cpu: microcode: fix a couple of warnings found by cppcheck:
  * acpi: madt: clean up some minor style issues detected by
    cppcheck
  * data: klog.json: update to sync with 4.6 kernel changes
  * ACPICA: Update to version 20160212 (LP: #1545099)
  * lib: fwts_acpi_tables: fix warnings found by clang scan-build
  * lib: fwts_cpu: check for MSR read failures
  * lib: fwts_klog: handle the case where klog_old is empty list
  * acpica: fix disassembly on i386 platforms (LP: #1547469)
  * lib: fwts_arch: i686 arch name is also an X86 arch
    (LP: #1547554)
  * fwts-test: only run rsdp regression test on specific arches
    (LP: #1547602)
  * Fix null_gass initializer for older versions of gcc
    (LP: #1549429)
  * fwts-test: sync up with the arg-table-path</changelog>
  <changelog author="mpluskal@suse.com" date="1458216000">- Update to 16.03.00
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
    + ACPICA: Update to version 20151218 (LP: #1527733)
    + esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP:#1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor
    Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
  <changelog author="mpluskal@suse.com" date="1463572800">- Update to version 16.05.01:
  * ACPICA: Update to version 20160108 (LP: #1532268)
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218 (LP: #1527733)
  * esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP: #1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Update to version 16.06.01:
  * lib: acpi: add an acpi category
  * live-image/fwts-frontend-text: add selections of acpi and uefi
    tests
  * acpi: add tests to acpi category
  * acpi: fwts-tests: Remove redundant tailing space and update
    fwts-tests
  * auto-packager: mkpackage.sh: remove lucid
  * auto-packager: mkpackage.sh: add wily
  * acpi: Add SPCR ACPI table check (LP: #1433604)
  * dmi: dmicheck: add 4 new DMI chassis types
  * lots of bugfixes
- Enable building on all architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 16.07.00:
  * --uefi and --acpi options renamed to --uefitests and
  - -acpitests
  * ACPI table tests in the acpitables test have been moved into
    specific ACPI tests.
  * cpi: acpidump: update TCPA table and acpidump accordingly
  * acpi: add ACPI TCPA test
  * acpi: add XENV table test
  * lib: fwts_framework: Append "tests" to --uefi and --acpi
  * live-image/fwts-frontend-text: update to --uefitests and
  - -acpitests
  * lib: acpi, acpidump: rename slit tables types
  * lib: acpi: add in new GICC table fwts_acpi_table_gicc_affinity
  * acpi: add SRAT table sanity checking (LP: #1464658)
  * acpi: add BERT table sanity checking (LP: #1464712)
  * lib: acpi: Add in GAS address types
  * acpi: add ECDT table sanity checking (LP: #1464716)
  * lib: acpi: Add support for the SPMI table
  * acpi: add ACPI SPMI table sanity checking (LP: #1465256)
  * acpi: add ACPI SLIT table sanity checking (LP: #1465276)
  * lib: acpi: Add support for the HEST family of ACPI tables
  * acpi: add ACPI HEST table sanity checking (LP: #1465379)
  * acpi: Add BOOT table test (LP: #1465435)
  * acpi: Add DBGP table test (LP: #1465441)
  * acpi: Add DBG2 table test (LP: #1465710)
  * acpi: re-orgainise HPET tests
  * acpi: move MADT test from acpitables into new MADT test
  * acpi: move GTDT test from acpitables into new GTDT test
  * acpi: move XSDT test from acpitables into new XSDT test
  * acpi: move RSDP test from acpitables into new RSDP test
  * acpi: move RSDT test from acpitables into new RSDT test
  * acpi: acpitables: remove no-op MCFG test
  * acpi: move SBST test from acpitables into new SBST test
  * acpi: move FADT test from acpitables into existing FADT test
  * acpi: acpitables: remove redundant acpi table checking
  * acpi: allow various ACPI table tests to run without root access
  * lib: fwts_acpi_tables: fully pad out fixed up ACPI OEM IDs
  * acpi: spcr: add missing white space in error messages
  * acpi: add ACPI ERST test (LP: #1467835)
  * acpi: correct ACPI BGRT table type
  * acpi: add ACPI BGRT test (LP: #1467863)
  * acpi: add ACPI CPEP test (LP: #1467870)
  * acpi: add ACPI FACS test (LP: #1467966)
  * acpi: acpidump: add in missing exponent field to SLIC
  * acpi: add CSRT ACPI Table test (LP: #1470116)
  * acpi: add LPIT ACPI test (LP: #1470184)
  * acpi: add WAET ACPI table test (LP: #1470495)
  * acpi: add SLIC table test (LP: #1470518)
  * acpi: add MSDM table test (LP: #1470538)
  * acpi: add UEFI ACPI data table test (LP: #1471698)
  * bios: os2gap: remove ancient legacy test (LP: #1470573)
  * lost of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1471521600">- Update to version 16.08.00 (boo#994319):
  * acpi: nfit: add ACPI NFIT test
  * lib: acpi: add support for MPST
  * acpi: mpst: add ACPI MPST test
  * lib: acpi: add support for PMTT
  * acpi: pmtt: add ACPI PMTT test
  * ACPICA: Update to version 20160729
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1473595200">- Update to version 16.09.00:
  * lib: acpi: add supports for WPBT
  * acpi: wpbt: add ACPI WPBT test
  * lib: acpi: add supports for DRTM
  * acpi: drtm: add ACPI DRTM test
  * lib: fwts_guid: add a compare function
  * acpi: nfit: check fields equals 0 for Virtual CD and Disk
  * opal: mtd: Add OPAL MTD Validation
  * acpi: ACPI Platform check updates
  * acpi: fadt: Remove HEADLESS check on reduced hardware
  * pci: aspm: Add segment support
  * ACPICA: Update to version 20160831
  * lots of bugs fixed
- Drop no longer needed json-c-includes.patch
- Exclude s390x from building</changelog>
  <changelog author="mpluskal@suse.com" date="1479038400">- Update to version 16.11.00:
  * ACPICA: Update to version 20160930
  * uefibootpath: add test for eMMC device path
  * uefidump: add dumping for the eMMC device path
  * miscelanous bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1480593600">- Replace requires with recommends for dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>
</package>
<package pkgid="d61e6d4471a047b0a84676d152ab3c24d590c075f224d156912c841686c3a4ef" name="fwts" arch="x86_64">
  <version epoch="0" ver="17.07.00" rel="8.1"/>
  <changelog author="mpluskal@suse.com" date="1443009600">- Update to 05.09.00
  * Update ACPICA to version 20150717
  * SMBios 3.0.0 tests supported
  * new features:
  + acpi: method: add _CR3 test
  + acpi: method: add _MTL test
  + acpi: method: add _RST test
  + acpi: method: add _PRR test
  + data: klog.json: sync with latest 4.2 kernel messages
    (LP: #1493039)
  + lib: smbios: add smbios version 3.0.0 entry find helper
  + dmicheck: add test for smbios 3.0.0 entry point
  + dmicheck: add error test for SMBIOS 3.0.0 table
  + dmicheck: sync the dmi value test with smbios 3.0.0 spec
  * fixed bugs:
  + acpi: fadt: merge tests for reset register
  + cpu: cpufreq: reduce scope of variables
  + acpi: gpedump: clarify precedence for &amp; and ?
  + lib: fwts_cpu: reduce scope on variables
  + ACPICA: Update to version 20150717 (LP: #1486253)
  + lib: fwts_log: re-work to clean up va_arg scoping
  + uefi: uefirtvariable: clean up cppcheck style warning
  + acpi: rsdp: make OEM ID test less strict
  + fix some spelling mistakes in code and sync fwts-tests
    accordingly
  + cpu: maxfreq: check for unlikely event that no CPUs in cpu
    list
  + acpi: crsdump: fix incorrect use of string size in string
    copies
  + lib: fwts_acpi_tables: add checking for empty table parsing
  + lib: fwts_acpi_table: remove dead initialisation of ptr
  + dmi: dmicheck: fix build error on 32 bit builds
  + Makefile.am: use pkg-config for json-c
  + lib: fwts_smbios: fix the smbios version from uefi always
    zero (LP: #1484023)
  + lib: fwts_scan_efi_systable: fix getting wrong smbios entry
    (LP: #1484046)
  + acpi: dbg2: won't find obj when no namespace device path
    (lp: #1486893)
  + lib: fwts_smbios: add the struct definition for smbios
    3.0.0
  + dmicheck: re-orgainise the smbios entry point check
  + dmicheck: fix the Base Board type range typos
  + auto-packager: mkpackage.sh: remove utopic</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 05.11.00
  * Update ACPICA to version 20150930
  * New Features
  + Add in the notion of ACPI compliance tests.
  + MADT subtables: Local SAPIC structure has 3 reserved bytes,
  not 1
  + ACPI: MADT: update GICC flag checks for ACPI 6.0
  + ACPI: MADT: further update to GICC flag checks for 6.0
  + acpi: method: skip scope names in method_evaluate_method
  + acpi: method: add _GPE test
  + acpi: method: add _TSN test
  + acpi: method: add _TFP test
  + acpi: method: add _EC test
  + acpi: method: add _CWS test
  + acpi: method: add _BTH test
  + auto-packager: mkpackage.sh: add xenial
  + acpi: tpm2: add check for zero control area address (LP:
  [#1506442])
  + securebootcert: change fail to warning when MS UEFI CA not
  found in DB
  + lib: fwts_uefi: add BMC device path define
  + uefidump: add dumping the BMC device path
  + uefibootpath: add test for the BMC device path
  + lib: fwts_uefi: add the URI device path define
  + uefibootpath: add test for the URI device path
  + uefidump: add dumping for the URI device path
  + lib: fwts_uefi: add the UFS device path define
  + uefidump: add dumping for the UFS device path
  + uefibootpath: add test for the UFS device path
  * Fixed Bugs
  + dmi: dmicheck: fix SMBIOS issues on aarch64 systems
  + acpidump: add missing reserved fields to MADT structures
  + cpufreq: the calibration is taking a long time, make it
  faster
  + acpi: tcpa: replace tab with spaces to fix formatting
  alignment</changelog>
  <changelog author="mpluskal@suse.com" date="1450526400">- Update to 05.12.00
  * Update ACPICA to version 20151124
  * live-image/fwts-frontend-text: add a selection for recommended
  * data: klog.json: add in some more kernel error messages for
  4.3
  * ACPI: Add ASPT test
  * lib: framework: allow mixed tests and test category options
  * fwts: framework: Add --log-level option
  * lib: fwts_uefi: add SD device path define
  * Boot path sync with UEFI spec. 2.5
  + uefibootpath: add test for the SD device path
  + uefidump: add dumping for the SD device path
  + lib: fwts_uefi: add efi bluetooth device path define
  + uefibootpath: add test for the bluetooth device path
  + uefidump: add dumping for the bluetooth device path
  + lib: fwts_uefi: add wireless device path define
  + uefibootpath: add test for the wireless device path
  + uefidump: add dumping for the wireless device path
  + lib: fwts_uefi: add ramdisk device path define
  + uefibootpath: add test for the ramdisk device path
  + uefidump: add dumping for the ramdisk device path
  * Fixed bugs
  + acpi: fpdt: add a terminate for buggy BIOS that reports zero
  length
  + lib: klog: remove use of pcre, use regex instead
  + utilities: kernelscan: remove use of pcre, use regex instead
  + uefidump: add more bounds checking and remove need for heap
  + utilities: fix memory leak, line not being free'd
  + acpi: bert: remove redundant variable 'length'
  + lib: iasl: rework IASL interface to ACPICA
  + acpi: acpidump: use IASL rather than fwts custom table dump
  code
  + s3 + klog: make log scanning more robust for S3 (LP: #1522292)
  + lib: acpica: make region handler more robust (LP: #1524217)
  + debian: copyright, fix lintian warnings
  + Debian: update Standards-Version to 3.9.6
  + acpi: acpidump: check for fwts_iasl_init failure
  + lib: fwts_acpi_tables: fix segfault when tables fail to load
  (LP: #1452201)
  + acpi: dbg2: remove dead store to ptr1
  + hotkey: fix key reading loop, it needs to loop more than once
  + lib: fwts_framework: remove dead store to len in for loop
  + lib: fwts_acpi_table: remove redundant store to rsdt
  + acpi: gpedump: remove redundant store to gpe_xrupt_info
  + lib: fwts_acpi_tables: remove dead store to facs
  + acpica: fwts_acpica: remove redundant store to length
  + lib: fwts_acpi_tables: remove redundant store to xsdt
  + lib: fwts_acpi_tables: check table to avoid dereferencing
  NULL ptr
  + lib: fwts_acpi_table: Fix FADT update in creation of fake
  FACS table.
  + uefibootpath: fix the wrong type for relative offset range
  path</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 16.01.00
  * ACPICA: Update to version 20160108
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218
  * esrtdump: add dumping for esrt table
  * fixed bugs:
    + Fix spelling mistakes of "ACPI"
    + method: update method status
    + utilities: kernelscan: fix memory leaks and a segfault
    + acpi: cstates: fix clang build warning on zero CPUs.
    + acpi: s3, s3power, s4: replace cleanup free with explicit
    frees
    + data: klog.json: add in some more kernel error messages for
    4.4
    + acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
    + acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should
    be an info
    + Update copyright year to 2016
    + dmi: dmicheck: fix reserved bits mask for Processor
    Information
    + uefirtvariable: fix decalred VLA have zero size</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 16.02.00
  * Start defining FWTS architectures as variables
  * Define some utility functions for using the fwts_architecture
    enum
  * Add mechanism to tell FWTS what architecture is being tested
  * ACPI: MADT: add in compliance tests for the MADT and subtables
  * ACPI: Add in MADT subtable description for GIC ITS subtable
  * ACPI: MADT: add in compliance checks for the GIC ITS subtable
  * Documentation: add --acpicompliance to man page
  * Documentation: add --arch to the man page
  * RSDP: minor cleanups to rsdp.c for checkpatch issues
  * utilities: add a helper function for printing out architecture
    names
  * ACPI tables: when bodging up an RSDP, do the right thing for
    the arch
  * ACPI RSDP: flesh out the tests to check for full spec
    compliance.
  * Update regression test rsdp-0001/test-0001.sh
  * Update the regression test arg-help-0001/test-0001.sh
  * Update regression test for arg-help-0001/test-0002.sh
  * Update regression test for arg-show-tests-0001/test-0001.sh
  * Update regression test arg-show-tests-full-0001/test-0001.sh
  * Update the regression test arg-table-path-0001/test-0001.sh
  * Update the regression test madt-0001/test-0001.sh
  * Update the regression test madt-0001/test-0002.sh
  * FADT: enable compiling on non-x86 architectures
  * FADT: non-x86 machines need an FADT but x86 can survive
    without one
  * FADT: disable SCI_EN and RESET_REG tests when in reduced
    hardware mode
  * FADT: add in code to log basic info about the various FADT
    flag fields
  * Add in bit masks for FACS flags.
  * FADT: move log info out of test2, will provide it elsewhere
  * ACPI: Add hypervisor ID field to FADT.
  * FADT: minor cleanup and initial compliance tests
  * FADT: expand the compliance test for FIRMWARE_CTRL fields
  * FADT: expand compliance checks for DSDT and X_DSDT fields
  * FADT: add compliance tests for reserved fields, PM profile,
    reduced hardware
  * FADT: restructure test sequence around reduced hardware mode
  * FADT: expand compliance tests for the SMI_CMD field
  * FADT: add compliance tests for the ACPI_ENABLE and
    ACPI_DISABLE fields
  * FADT: add compliance tests for S4BIOS_REQ and PSTATE_CNT
    fields
  * FADT: extend and add PM address block compliance tests
  * FADT: enhance compliance tests for GPE blocks
  * FADT: add compliance test for the CST_CNT field
  * FADT: add in compliance tests for C2/C3 latency fields
  * FADT: add in SLEEP_CONTROL_REG and SLEEP_STATUS_REG
    compliance tests
  * FADT: remove no longer useful variables from test1
  * FADT: add safety checks for older versions of FADT
  * FADT: update regression tests to incorporate new/changed
    tests
  * acpi: method: add _PMC test
  * acpi: method: add _PRT test
  * fwts-test: update for _PMC and _PRT tests
  * acpi: method: add _RDI test
  * acpi: method: add _LPI test
  * fwts-test: update for _RDI and _LPI tests
  * acpi: method: remove non-method names from the top comments
  * acpi: erst: fix incorrect error message for reserved field
  * fwts-test: update erst test for the fix of reserved field
  * lib: fwts_klog: fix incorrect indentation, detected by gcc-6
  * lib: fwts_hwinfo: clean up type punning, fixes warning with
    gcc-6
  * fwts: wakealarm: reset wakealarm timer at end of test
    (LP: #1534003)
  * Update arg-show-tests-full now that we have an extra test in
    wakealarm
  * dmi: dmicheck: add some simple sanity checks to table size
  * lib: fwts_args: use safer strncat than strcat
  * lib: fwts_acpi_tables: don't do expensive low allocs multiple
    times
  * acpi: fadt: check 32/64 bit PM register addresses for
    inconsistency (LP: #1536606)
  * acpi: madt: fix incorrect format specifier for size_t
  * cpu: microcode: fix a couple of warnings found by cppcheck:
  * acpi: madt: clean up some minor style issues detected by
    cppcheck
  * data: klog.json: update to sync with 4.6 kernel changes
  * ACPICA: Update to version 20160212 (LP: #1545099)
  * lib: fwts_acpi_tables: fix warnings found by clang scan-build
  * lib: fwts_cpu: check for MSR read failures
  * lib: fwts_klog: handle the case where klog_old is empty list
  * acpica: fix disassembly on i386 platforms (LP: #1547469)
  * lib: fwts_arch: i686 arch name is also an X86 arch
    (LP: #1547554)
  * fwts-test: only run rsdp regression test on specific arches
    (LP: #1547602)
  * Fix null_gass initializer for older versions of gcc
    (LP: #1549429)
  * fwts-test: sync up with the arg-table-path</changelog>
  <changelog author="mpluskal@suse.com" date="1458216000">- Update to 16.03.00
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
    + ACPICA: Update to version 20151218 (LP: #1527733)
    + esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP:#1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor
    Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
  <changelog author="mpluskal@suse.com" date="1463572800">- Update to version 16.05.01:
  * ACPICA: Update to version 20160108 (LP: #1532268)
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218 (LP: #1527733)
  * esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP: #1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Update to version 16.06.01:
  * lib: acpi: add an acpi category
  * live-image/fwts-frontend-text: add selections of acpi and uefi
    tests
  * acpi: add tests to acpi category
  * acpi: fwts-tests: Remove redundant tailing space and update
    fwts-tests
  * auto-packager: mkpackage.sh: remove lucid
  * auto-packager: mkpackage.sh: add wily
  * acpi: Add SPCR ACPI table check (LP: #1433604)
  * dmi: dmicheck: add 4 new DMI chassis types
  * lots of bugfixes
- Enable building on all architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 16.07.00:
  * --uefi and --acpi options renamed to --uefitests and
  - -acpitests
  * ACPI table tests in the acpitables test have been moved into
    specific ACPI tests.
  * cpi: acpidump: update TCPA table and acpidump accordingly
  * acpi: add ACPI TCPA test
  * acpi: add XENV table test
  * lib: fwts_framework: Append "tests" to --uefi and --acpi
  * live-image/fwts-frontend-text: update to --uefitests and
  - -acpitests
  * lib: acpi, acpidump: rename slit tables types
  * lib: acpi: add in new GICC table fwts_acpi_table_gicc_affinity
  * acpi: add SRAT table sanity checking (LP: #1464658)
  * acpi: add BERT table sanity checking (LP: #1464712)
  * lib: acpi: Add in GAS address types
  * acpi: add ECDT table sanity checking (LP: #1464716)
  * lib: acpi: Add support for the SPMI table
  * acpi: add ACPI SPMI table sanity checking (LP: #1465256)
  * acpi: add ACPI SLIT table sanity checking (LP: #1465276)
  * lib: acpi: Add support for the HEST family of ACPI tables
  * acpi: add ACPI HEST table sanity checking (LP: #1465379)
  * acpi: Add BOOT table test (LP: #1465435)
  * acpi: Add DBGP table test (LP: #1465441)
  * acpi: Add DBG2 table test (LP: #1465710)
  * acpi: re-orgainise HPET tests
  * acpi: move MADT test from acpitables into new MADT test
  * acpi: move GTDT test from acpitables into new GTDT test
  * acpi: move XSDT test from acpitables into new XSDT test
  * acpi: move RSDP test from acpitables into new RSDP test
  * acpi: move RSDT test from acpitables into new RSDT test
  * acpi: acpitables: remove no-op MCFG test
  * acpi: move SBST test from acpitables into new SBST test
  * acpi: move FADT test from acpitables into existing FADT test
  * acpi: acpitables: remove redundant acpi table checking
  * acpi: allow various ACPI table tests to run without root access
  * lib: fwts_acpi_tables: fully pad out fixed up ACPI OEM IDs
  * acpi: spcr: add missing white space in error messages
  * acpi: add ACPI ERST test (LP: #1467835)
  * acpi: correct ACPI BGRT table type
  * acpi: add ACPI BGRT test (LP: #1467863)
  * acpi: add ACPI CPEP test (LP: #1467870)
  * acpi: add ACPI FACS test (LP: #1467966)
  * acpi: acpidump: add in missing exponent field to SLIC
  * acpi: add CSRT ACPI Table test (LP: #1470116)
  * acpi: add LPIT ACPI test (LP: #1470184)
  * acpi: add WAET ACPI table test (LP: #1470495)
  * acpi: add SLIC table test (LP: #1470518)
  * acpi: add MSDM table test (LP: #1470538)
  * acpi: add UEFI ACPI data table test (LP: #1471698)
  * bios: os2gap: remove ancient legacy test (LP: #1470573)
  * lost of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1471521600">- Update to version 16.08.00 (boo#994319):
  * acpi: nfit: add ACPI NFIT test
  * lib: acpi: add support for MPST
  * acpi: mpst: add ACPI MPST test
  * lib: acpi: add support for PMTT
  * acpi: pmtt: add ACPI PMTT test
  * ACPICA: Update to version 20160729
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1473595200">- Update to version 16.09.00:
  * lib: acpi: add supports for WPBT
  * acpi: wpbt: add ACPI WPBT test
  * lib: acpi: add supports for DRTM
  * acpi: drtm: add ACPI DRTM test
  * lib: fwts_guid: add a compare function
  * acpi: nfit: check fields equals 0 for Virtual CD and Disk
  * opal: mtd: Add OPAL MTD Validation
  * acpi: ACPI Platform check updates
  * acpi: fadt: Remove HEADLESS check on reduced hardware
  * pci: aspm: Add segment support
  * ACPICA: Update to version 20160831
  * lots of bugs fixed
- Drop no longer needed json-c-includes.patch
- Exclude s390x from building</changelog>
  <changelog author="mpluskal@suse.com" date="1479038400">- Update to version 16.11.00:
  * ACPICA: Update to version 20160930
  * uefibootpath: add test for eMMC device path
  * uefidump: add dumping for the eMMC device path
  * miscelanous bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1480593600">- Replace requires with recommends for dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>
</package>
<package pkgid="a277b1d7f7d1881bf87c6c55188f361000d01e18789fb55276b3ec3cb60c3538" name="fwupdate" arch="src">
  <version epoch="0" ver="0.5" rel="5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1540987200">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="6a8b73d5c7b6f07ddc29398c035747caa2cd2113098d951a3ba0592ba00762d9" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="0.5" rel="5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1540987200">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="a7891ba8c4ab13aab1f6f1da4eca37f987f6d295bba215f78ece6e992ee7a5db" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="0.5" rel="5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1540987200">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="cc023e70fde91df27a841515d4affacb5eaf35c8aa8432c28a24840deab461f6" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="0.5" rel="5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1540987200">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="21912f94ccf769845779c8ae901122a6b84a8704b3b6a4bf14bdc5fe70555395" name="g3utils" arch="x86_64">
  <version epoch="0" ver="1.1.36" rel="65.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="ceb046191bc2768fd829ed32ba25426521128bac70855ddff2bb1486465a1ace" name="gajim" arch="noarch">
  <version epoch="0" ver="0.16.7" rel="4.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1273924800">- add patch to fix #4788: Error receiving OpenPGP encrypted messages with
  utf-8 characters</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273924801">- update to 0.13.1:
  * adds BOSH connection
  * adds roster versioning
  * adds the ability to send contacts
  * adds a GUI to send XHTML messages
  * adds pubsub storage (for bookmarks)</changelog>
  <changelog author="bernhard@bwalle.de" date="1274011200">- update to 0.13.4
  * Fix some TLS connection
  * Don't raise a lot of "DB Error" dialog
  * Fix contact synchronisation
  * Add japanese translation
  * Minor fixes
  * Fix facebook xmpp server connection
  * Fix copy / paste with Ctrl+C on non-latin keyboard
  * Fix sending PEP information when connecting
  * Fix parsing HTML messages that have ascii markup
  * Fix some translations
  * Fix string comparison according to locales
  * Fix some gnomekeyring glitches
  * Copy emoticons when we copy / paste in conversations
- convert changelog to SUSE-style changes file</changelog>
  <changelog author="prusnak@opensuse.org" date="1315051200">- updated to 0.14.4
  * Fix translation issue
  * other minor fixes
- updated to 0.14.3
  * Fix history viewer
  * Fix closing roster window
  * Prevent some erros with metacontacts
- updated to 0.14.2
  * Fix CPU usage when testing file transfer proxies
  * Fix invalid XML char regex
  * Fix subscription request window handling
  * Fix URL display in chat message banner
  * Other minor bugfixes
- updated to 0.14.1
  * Fix changing account name
  * Fix sending XHTML
  * Fix GnomeKayring usage
  * Fix some GPG bugs
  * Minor bugfixes
- updated to 0.14
  * Jingle audio / video chat
  * Improve Startup time
  * Copy emoticons, LaTeX expressions when they are selected
  * Fix status icon transparency by using gtk.statusicon
  * Groupchat auto-rejoin
  * geolocation (with geoclue)
  * use XDG standards
  * SCRAM-SHA-1 and SASL EXTERNAL authentication
  * MUC captcha
  * Lots of refactoring
- spec cleanup</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1315656000">- changed Requires:python-gstreamer to python-gstreamer-0_10, thanks to Peter
  von Arx for reporting</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337774400">- update to 0.15</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337860800">- add gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch
  (CVE#2012-2093) which fixes insecure usage of temporary files for rendering
  LaTeX markup, see also bnc#763452</changelog>
  <changelog author="zaitor@opensuse.org" date="1369656000">- Update to version 0.15.4:
  * Fix usage of OTR plugin
  * Fix connection to non-SSL server
  * Fix receiving GPG-encrypted messages while offline.
- Changes from version 0.15.3:
  * Better handling of SSL errors
  * Better handling of canceling file transfer
  * Improve farstream calls
  * Minor fixes and improvements
- Changes from version 0.15.2:
  * Show punycode encoded urls if they contain non-ascii chars
  * Fix crash when pressing Esc in chat window
  * Support Network Manager 0.9
  * decrypt GPG messages in the correct order
- Changes from version 0.15.1:
  * Switch from python-farsight to python-farstream
  * improve performances
  * Fix roster filter with unicode chars
  * Fix connection to msn jabber server
  * Fix some GPG issues
  * Fix other small issues
- Drop gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch,
  fixed upstream.
- Add python-farstream Recommends, fixes bnc#821233.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.16:
  * Improve File transfer support by adding Jingle file transfer.
  * Use external python-nbxmpp library.
  * improve security.
  * Improve audio / Video calls and add screensharing feature.
  * Support audio under windows.
  * Support systemd-logind.
  * Support XEP-0308 Last message correction.
  * Support XEP-0224 Attention.
  * Support XEP-0191 Blocking command.
  * Support XEP-0249 Direct Invitation.
  * Better RTL languages support.
  * Use host command to resolve SRV records if it is available.
- Completely review dependencies.
- Spec cleanup.
- Separate gajim-lang package.
- Purge --enable-{remote ,gtkspell,idle,trayicon} from configure
  options and trust the defaults.
- Replace Python bytecode generation script with a more verbose one.
- Generate icon cache after package installation.
- Enable Python site packages.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1423569600">- Add python-farstream-0_1 optional dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1425211200">- Update to 0.16.1:
  * Fix sending Zeroconf messages.
  * Make ipython compatible to version &gt;= 1.0.
  * Support XEP-0313 MAM.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead (boo#1071571).</changelog>
</package>
<package pkgid="cb63bbeb25133371ce5458dddc74f3ab71ca4989db9ad82af8ac84787d8621c9" name="gajim" arch="src">
  <version epoch="0" ver="0.16.7" rel="4.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1273924800">- add patch to fix #4788: Error receiving OpenPGP encrypted messages with
  utf-8 characters</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273924801">- update to 0.13.1:
  * adds BOSH connection
  * adds roster versioning
  * adds the ability to send contacts
  * adds a GUI to send XHTML messages
  * adds pubsub storage (for bookmarks)</changelog>
  <changelog author="bernhard@bwalle.de" date="1274011200">- update to 0.13.4
  * Fix some TLS connection
  * Don't raise a lot of "DB Error" dialog
  * Fix contact synchronisation
  * Add japanese translation
  * Minor fixes
  * Fix facebook xmpp server connection
  * Fix copy / paste with Ctrl+C on non-latin keyboard
  * Fix sending PEP information when connecting
  * Fix parsing HTML messages that have ascii markup
  * Fix some translations
  * Fix string comparison according to locales
  * Fix some gnomekeyring glitches
  * Copy emoticons when we copy / paste in conversations
- convert changelog to SUSE-style changes file</changelog>
  <changelog author="prusnak@opensuse.org" date="1315051200">- updated to 0.14.4
  * Fix translation issue
  * other minor fixes
- updated to 0.14.3
  * Fix history viewer
  * Fix closing roster window
  * Prevent some erros with metacontacts
- updated to 0.14.2
  * Fix CPU usage when testing file transfer proxies
  * Fix invalid XML char regex
  * Fix subscription request window handling
  * Fix URL display in chat message banner
  * Other minor bugfixes
- updated to 0.14.1
  * Fix changing account name
  * Fix sending XHTML
  * Fix GnomeKayring usage
  * Fix some GPG bugs
  * Minor bugfixes
- updated to 0.14
  * Jingle audio / video chat
  * Improve Startup time
  * Copy emoticons, LaTeX expressions when they are selected
  * Fix status icon transparency by using gtk.statusicon
  * Groupchat auto-rejoin
  * geolocation (with geoclue)
  * use XDG standards
  * SCRAM-SHA-1 and SASL EXTERNAL authentication
  * MUC captcha
  * Lots of refactoring
- spec cleanup</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1315656000">- changed Requires:python-gstreamer to python-gstreamer-0_10, thanks to Peter
  von Arx for reporting</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337774400">- update to 0.15</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337860800">- add gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch
  (CVE#2012-2093) which fixes insecure usage of temporary files for rendering
  LaTeX markup, see also bnc#763452</changelog>
  <changelog author="zaitor@opensuse.org" date="1369656000">- Update to version 0.15.4:
  * Fix usage of OTR plugin
  * Fix connection to non-SSL server
  * Fix receiving GPG-encrypted messages while offline.
- Changes from version 0.15.3:
  * Better handling of SSL errors
  * Better handling of canceling file transfer
  * Improve farstream calls
  * Minor fixes and improvements
- Changes from version 0.15.2:
  * Show punycode encoded urls if they contain non-ascii chars
  * Fix crash when pressing Esc in chat window
  * Support Network Manager 0.9
  * decrypt GPG messages in the correct order
- Changes from version 0.15.1:
  * Switch from python-farsight to python-farstream
  * improve performances
  * Fix roster filter with unicode chars
  * Fix connection to msn jabber server
  * Fix some GPG issues
  * Fix other small issues
- Drop gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch,
  fixed upstream.
- Add python-farstream Recommends, fixes bnc#821233.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.16:
  * Improve File transfer support by adding Jingle file transfer.
  * Use external python-nbxmpp library.
  * improve security.
  * Improve audio / Video calls and add screensharing feature.
  * Support audio under windows.
  * Support systemd-logind.
  * Support XEP-0308 Last message correction.
  * Support XEP-0224 Attention.
  * Support XEP-0191 Blocking command.
  * Support XEP-0249 Direct Invitation.
  * Better RTL languages support.
  * Use host command to resolve SRV records if it is available.
- Completely review dependencies.
- Spec cleanup.
- Separate gajim-lang package.
- Purge --enable-{remote ,gtkspell,idle,trayicon} from configure
  options and trust the defaults.
- Replace Python bytecode generation script with a more verbose one.
- Generate icon cache after package installation.
- Enable Python site packages.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1423569600">- Add python-farstream-0_1 optional dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1425211200">- Update to 0.16.1:
  * Fix sending Zeroconf messages.
  * Make ipython compatible to version &gt;= 1.0.
  * Support XEP-0313 MAM.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead (boo#1071571).</changelog>
</package>
<package pkgid="4c43c28dea2ada9744351ff9638d877734668c40b61b6d3310c930cb53e758a1" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="0.16.7" rel="4.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1273924800">- add patch to fix #4788: Error receiving OpenPGP encrypted messages with
  utf-8 characters</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273924801">- update to 0.13.1:
  * adds BOSH connection
  * adds roster versioning
  * adds the ability to send contacts
  * adds a GUI to send XHTML messages
  * adds pubsub storage (for bookmarks)</changelog>
  <changelog author="bernhard@bwalle.de" date="1274011200">- update to 0.13.4
  * Fix some TLS connection
  * Don't raise a lot of "DB Error" dialog
  * Fix contact synchronisation
  * Add japanese translation
  * Minor fixes
  * Fix facebook xmpp server connection
  * Fix copy / paste with Ctrl+C on non-latin keyboard
  * Fix sending PEP information when connecting
  * Fix parsing HTML messages that have ascii markup
  * Fix some translations
  * Fix string comparison according to locales
  * Fix some gnomekeyring glitches
  * Copy emoticons when we copy / paste in conversations
- convert changelog to SUSE-style changes file</changelog>
  <changelog author="prusnak@opensuse.org" date="1315051200">- updated to 0.14.4
  * Fix translation issue
  * other minor fixes
- updated to 0.14.3
  * Fix history viewer
  * Fix closing roster window
  * Prevent some erros with metacontacts
- updated to 0.14.2
  * Fix CPU usage when testing file transfer proxies
  * Fix invalid XML char regex
  * Fix subscription request window handling
  * Fix URL display in chat message banner
  * Other minor bugfixes
- updated to 0.14.1
  * Fix changing account name
  * Fix sending XHTML
  * Fix GnomeKayring usage
  * Fix some GPG bugs
  * Minor bugfixes
- updated to 0.14
  * Jingle audio / video chat
  * Improve Startup time
  * Copy emoticons, LaTeX expressions when they are selected
  * Fix status icon transparency by using gtk.statusicon
  * Groupchat auto-rejoin
  * geolocation (with geoclue)
  * use XDG standards
  * SCRAM-SHA-1 and SASL EXTERNAL authentication
  * MUC captcha
  * Lots of refactoring
- spec cleanup</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1315656000">- changed Requires:python-gstreamer to python-gstreamer-0_10, thanks to Peter
  von Arx for reporting</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337774400">- update to 0.15</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337860800">- add gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch
  (CVE#2012-2093) which fixes insecure usage of temporary files for rendering
  LaTeX markup, see also bnc#763452</changelog>
  <changelog author="zaitor@opensuse.org" date="1369656000">- Update to version 0.15.4:
  * Fix usage of OTR plugin
  * Fix connection to non-SSL server
  * Fix receiving GPG-encrypted messages while offline.
- Changes from version 0.15.3:
  * Better handling of SSL errors
  * Better handling of canceling file transfer
  * Improve farstream calls
  * Minor fixes and improvements
- Changes from version 0.15.2:
  * Show punycode encoded urls if they contain non-ascii chars
  * Fix crash when pressing Esc in chat window
  * Support Network Manager 0.9
  * decrypt GPG messages in the correct order
- Changes from version 0.15.1:
  * Switch from python-farsight to python-farstream
  * improve performances
  * Fix roster filter with unicode chars
  * Fix connection to msn jabber server
  * Fix some GPG issues
  * Fix other small issues
- Drop gajim-CVE-2012-2093-fix_insecure_temp_file_for_latex.patch,
  fixed upstream.
- Add python-farstream Recommends, fixes bnc#821233.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.16:
  * Improve File transfer support by adding Jingle file transfer.
  * Use external python-nbxmpp library.
  * improve security.
  * Improve audio / Video calls and add screensharing feature.
  * Support audio under windows.
  * Support systemd-logind.
  * Support XEP-0308 Last message correction.
  * Support XEP-0224 Attention.
  * Support XEP-0191 Blocking command.
  * Support XEP-0249 Direct Invitation.
  * Better RTL languages support.
  * Use host command to resolve SRV records if it is available.
- Completely review dependencies.
- Spec cleanup.
- Separate gajim-lang package.
- Purge --enable-{remote ,gtkspell,idle,trayicon} from configure
  options and trust the defaults.
- Replace Python bytecode generation script with a more verbose one.
- Generate icon cache after package installation.
- Enable Python site packages.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1423569600">- Add python-farstream-0_1 optional dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1425211200">- Update to 0.16.1:
  * Fix sending Zeroconf messages.
  * Make ipython compatible to version &gt;= 1.0.
  * Support XEP-0313 MAM.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead (boo#1071571).</changelog>
</package>
<package pkgid="96b34809773e0cbebfb13d7d40f8a05bf52d31549594a123e95379652709c514" name="gcc48-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="8de8cea12e1bef4a0e0b8b7e10ac73572c3c861d83b3ef6a65f79766defdfe6b" name="gcc48-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="13b35b8ca1e72137bfdcafd050ae81d71fd9902dfe05d1333348f621410f301a" name="gcc48-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="eded6813bc6b6d16489c9bb8ce4d975daae9405efc0fbc74e9612e5965da7833" name="gcc48-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="8f7cb8db12a692ce09257af34214ae7b1af6f0d5c5bd459e45a7db3a07d45978" name="gcc48-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="bc986ccad3fab264d559befbd77921058fbbd1dcb584f14883a65082ebd6cc8f" name="gcc48" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="bead4d1e788f9d5e7a2519366817bcbb5bc4da10026b3830fe08612136e117ee" name="gcc48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="5958d40a684e4fba17d3371f50d1111602b57702059d8eefa6768da847148dfb" name="gcc48" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="11eb25091481d387d37e34cadb7c1be3e40cb63ed14a66c2cccec0397949f169" name="gcc48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="228fae7a5cc23435508a5b6e69ac576f8af160eba14c6c0e8513c298745f14e2" name="gcc48" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="91a00ccd6cbefa7d751b0192daf98d156cd2e1fc2fd327c9e78cbe0ab2af0c3c" name="gcc48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="0637faa3044f71cb83d09324b038cc6f67e032c3766f7d6e36b703b8ca8b809f" name="gcc48" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="9cedf2eada04b42c29c6406c86b4c8cd592b9f33bd8413e61cc2e7c0819172ab" name="gcc48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="88eb67acf0c8dfa440cc0c8e0f5adf7e41b9f18f34d26c9d712454f694f6204b" name="gcc48" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="3db6e44c262b18f4917c1ffd49d37627f9c312df22523966757fa350f62c2995" name="gcc48" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="ac11f5dd19bb609b2e524f482803df5ccf4aafe7908cfbed3b090f6d7b06507a" name="gcc48-ada-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="291e87aab7e023756cc9af5a32619f9609efbba160a8c7fe49df781d44f96910" name="gcc48-ada-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="f38b811ba450db8d9ad83712b4c22d1ff5a727a106af2fb90fcecf4460d9b6fc" name="gcc48-ada-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="17924fd54d37e944c596c89889e78423c4ab9a71961c1199fab062f35eaf24e6" name="gcc48-ada-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="7b6fee3687f1f52d2b2a4cb9d62f6f9b37039d9cb56a9ced3ac5d71b8e27d215" name="gcc48-ada-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="3a78b72577bba014845e954c0555ef26a1f5286e7b73dae2b6dee62e06acc8d3" name="gcc48-ada" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="67339fc9b2d086fd30413c168441732bb2903232e1cad0883ca76a75c5a10e50" name="gcc48-ada" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="f13315aaa3df56c0b4cedfdbc5efb505a8f771a99e36a82c7810f43ea00f7f91" name="gcc48-ada" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="0378468d4c15f40353afccdecb82069e96ca95550e26db464e0677a8f96d7c2b" name="gcc48-ada" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="d53460b2b28b6d3421c11e51ab7a07b2078854d1429686aee77a30188fb93c01" name="gcc48-ada" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="c8c39f7487b61e82ce90f1505b827becc6ea555032dae5d95e4742de26598633" name="gcc48-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="ed94578321c8982a66a6c66979e6d5f5b07ad3422f3f7abb838acd3818c05baf" name="gcc48-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="0f3212c4eb8f85adc68736c188d10dab09656414c1b4b7449c4ca95664273d5c" name="gcc48-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="6c1e246578e2fd040c587f13ec4d7e2b1e5670a8e78c6691e1919050646078a4" name="gcc48-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="4ae783c0a16b3a9ce72a9bc0a56e8533c2a693e4ab56c64f1998a995841595dc" name="gcc48-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="d204e253420b2e339afde08f567367e25494be44df275d4e3637baaae85b721f" name="gcc48-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="b7dc1d618c9108c8bb187d3df5253d2c74cad7c4b11512da1903ab18d11b482e" name="gcc48-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="0ea1230cc2935780a994b3cb0f1390b807af180a860ff8f198b835d6154e2cdc" name="gcc48-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="33471c6310ed92f732dcc55e211bf86fdb66842f4de4f592ed691ea8033f0694" name="gcc48-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="9327aedc285ae0394d3d2845ae91244c9615169e46519c9f86db60accb4f5099" name="gcc48-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="acdd515b821016e448c950c1e56a6677a7b89deff39fa7e9cdf6ab93d4494d09" name="gcc48-fortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="2da6046bbc115e1dd63f792e45af39554ce3146a3ce2e8c58cc66c6a45a5d8b2" name="gcc48-fortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="48d79f8eba1e748817186ccabb5664e0c761064aee9cab77db0978043b0db1b0" name="gcc48-fortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="70925302d47d84c22f5d2deaf35c76b9b47a0536216baf32525882e5c0660f21" name="gcc48-fortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="4cc96932d93d433adb836bfc1409c75a3623f27dd8ae27ca99a470cb7b692a25" name="gcc48-fortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="df003508254f8e228d8ac762a4c819820b9371f93200524ece45dcba267cc8b7" name="gcc48-gij-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c2e6e6bd66d823e03a73196305b7d1d7123ec44e7f4a0654c0300d328882078c" name="gcc48-gij-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="d0bf02133e52861da3402df00697a812b9cf2fc2216d726c86365aba8eb658ed" name="gcc48-gij-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="5463864019b7828d85f20bd0757ad93b220ca3a2b8520fa69bed8c2d51a6ccba" name="gcc48-gij-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="7f46e2782f212120e3a41bc7eba3d9f5a11c267c72702c6b74e31327007be150" name="gcc48-gij-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="7b24926ac4e8772b43d25dd5cfa87094069d82a6947c10c429695f6a32c6cbf6" name="gcc48-gij" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="bca85aca89f45541b199f3d2a50e7e8c41d23665983f790350d00b4ada29d4cc" name="gcc48-gij" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c1c055f4ee150382407bc351bafee0c4495644df1881e21efa7c587a398e3d18" name="gcc48-gij" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="e6c3ab7179edadf0f13621debc0064b21a01b14a0808e2bd66d0c7ae75a861a7" name="gcc48-gij" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="4ebee78dfb8ad37250553af04811c02f0aa70eb84940391a99b5f38e7acdfa9b" name="gcc48-gij" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="a137c880cb6045083524df99ef3f713f0d664bb9374fa673baf7ec6cd9de030f" name="gcc48-info" arch="noarch">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="52abc49cac3b9dcf76fc3cc1a7f456a3c3fad72921086b59170313708be5b523" name="gcc48-info" arch="noarch">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="01fca293f6229c2406dff1cb9ea8afbff6b4e3429510250ec8802fe6ce24afb9" name="gcc48-info" arch="noarch">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="78b9c212d9c0837443e62fb059cc1796511ef139923596221462f6d630665584" name="gcc48-info" arch="noarch">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="7efa9343346cfda7844312457137e241f8a6d5a93873c9b2881480ff9e9a673c" name="gcc48-info" arch="noarch">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="1acd6ae4bbbb02db97b824c8e78da7f2638e4d6b85ccea6df02482d01e9ba7d4" name="gcc48-java" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="7b759993030cb1d19a7672a43a04698332d8cc4b920e4221996119e78ac4f54d" name="gcc48-java" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="ee2be4af43b3202a6f2d91e08a7deadcefbf67287b5c784509d0e72c99c05824" name="gcc48-java" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="1263ba691c8a9a61ed1fc13f0f81fe75f724253e2d08c6d6bed12959ce09b4f6" name="gcc48-java" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="8f7ff44931805af48f88ca43a7ad8e8683051d89d71271363cfecc3a779d15e8" name="gcc48-java" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="aa2a29f5b36d587ad955df4a21f0452ddfa3e17be779529385b96209af263d7c" name="gcc48-locale" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="f9fcba6bbd9fa8189a7b293d026027f6de343ee1a88609255b77b0c6981a6e0f" name="gcc48-locale" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="9488621b48616d70bda9392c2acdfb2fe4e135ebff3120c52ca27bc04ceb76af" name="gcc48-locale" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="8f2670544064c67e462055148b27d6a771f72ff367510ae42e885ca4b99d9f6a" name="gcc48-locale" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="738bff21eda94972fd73bdbe3d33cf3de73ed16c704be20a3291250e2feeecfb" name="gcc48-locale" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="f1532f7c64a908b257c0f3326b69b1455b1edfed38b9cbc29387265841ecccdf" name="gcc48-obj-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="0945d6d4303af6998b36e2d5e751fa509a074fec4a26970706bc4019bc20068e" name="gcc48-obj-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="c0cbf3651238a993bd39a69919d2493c17c794bba3f56707fd8479483289169a" name="gcc48-obj-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="be2f98bb097b864ce485d33aa6813aa33128f53cdc6b720e27e32540db2ab9bb" name="gcc48-obj-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="2f7300914c825b82355e9caf9e2de7354551eedc3209d5742387f0d67ab15519" name="gcc48-obj-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="c160d34ea762af0c56a6668f32883311489e36578a3ad63083173734cdacb8d8" name="gcc48-objc-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="6ddc4ebf2bc56114b88126c9abd02c550804b3fd98cf4e35927c1e6be1b53f7a" name="gcc48-objc-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="f54c952d88358e896d1f521189e73afa6d3f150555fcb453caa654e517e0ae4c" name="gcc48-objc-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="8af5d3c03c4c44cf80753434460f79569108010adde3733c596ab9a983b21194" name="gcc48-objc-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="aca9c884df1bc4b78fc2f02c8674a294812ea182e7da7b259ab4d30918ecd529" name="gcc48-objc-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="f561464ddc318d23bec1ee58ddbb37ff359bd61129f349dcbdf86f0ec46d7d41" name="gcc48-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.2"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="237f869952b572b85df4a074c3c235bc2bd024979d64cb8346d8bd3e30f003e4" name="gcc48-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.1"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="da5fa6a35063684228fa5233f8097700a7981a8685dedd2554ea265d3a64aa23" name="gcc48-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="e9842dc2edaacaf5cb2a2791c77e7bd3171483dba173b89aff5534c24c353c09" name="gcc48-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="9780592177368ae7bfeb36e19209b16059f552ca0e05c581f687dc1be92a6e94" name="gcc48-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="2773b63146e76abf677d944b6398fd98cbef040d17d3d5f858501302f7717a01" name="gcc48-testresults" arch="src">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="84482590b5774b5eb3118d9428ce8c78935050aaab03d789256d1a901639d52b" name="gcc48-testresults" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="26.4"/>
  <changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="71cb27c14d960fe2ebc8d71dc1db3dd4bc0aeeed149018797f541fcffa06382b" name="gcc48-testresults" arch="src">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="7ce942926ba1f2e53ff1adda737d68db54ea56f3f4b0f9f83d54b1dccd2ddb81" name="gcc48-testresults" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="29.2"/>
  <changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
</package>
<package pkgid="38cdd1f2d32fea43d4fb002ccdb3d82b75f97bb2e23ff131901d9e5ce3a986a2" name="gcc48-testresults" arch="src">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="6bb12df5d965c8545cd67e1019e58c822ee9376f387fae9a676327104147833f" name="gcc48-testresults" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="32.1"/>
  <changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
  <changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
  <changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
  <changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
</package>
<package pkgid="b9961cdb4e42530ba27f0f4ebcb5d49cafcd9e3afdfcae194ded35d3d4706a59" name="gcc48-testresults" arch="src">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="6305210fd5a8ff772f5f7e5899078caf31402b35bad53e0af279f96f4ff3952b" name="gcc48-testresults" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="35.1"/>
  <changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
  <changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
</package>
<package pkgid="2971764cf55057154c1d987b1d026a577a67bc08049295844a3fbcb22d20640f" name="gcc48-testresults" arch="src">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="e39843250db26c6746d6fb214f5f563b2e5e7110d7de5d1e1bb8efb1062abd9f" name="gcc48-testresults" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="38.4"/>
  <changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
  <changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
  <changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
  <changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
  <changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
  <changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
  <changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
  <changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
  <changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc48-stack-probe.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1516276800">- Add support for retpolines. [bnc #1074621]
  Adds gcc48-mindirect-branch.diff.</changelog>
  <changelog author="mliska@suse.cz" date="1516708800">- Document revisions of which gcc48-mindirect-branch.diff contains of.</changelog>
  <changelog author="rguenther@suse.com" date="1520251200">- Add gcc48-s390-spectre.patch, spectre V2 mitigation for s390x.
  [bnc#1083945]</changelog>
  <changelog author="rguenther@suse.com" date="1522843200">- Add gcc48-bnc1087932.patch, backport of -mfix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1087932]
- Add gcc48-bnc1082130.patch to fix inliner behavior for SPEC CPU 2017
  526.blender on s390x.  [bnc#1082130]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Enable --enable-fix-cortex-a53-835769 for aarch64.  [bnc#1087932]</changelog>
  <changelog author="matz@suse.de" date="1534161600">- Add gcc48-aarch64-hack-reload-alt.diff for fixing a reload
  bug on aarch64 causing a kernel miscompile.  [bnc#1093797]</changelog>
  <changelog author="matz@suse.de" date="1534248000">- Work-around useless source validator complaints.</changelog>
</package>
<package pkgid="a2aa51d66bbc263891df2952d0e2d5be4ba326b7c802721d700b854cf28bcf59" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="ea5f48f20b07c22730e1e8931aad2635ec30e5e8200ec34cf08dbfaeca9d7cd6" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="63103d47ae761888921c5b39a84e4920bc7820233e6d97d22fb3de11e8f3d713" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="1506699e49633998d500566233054afe74d1a3b1bd64e454431c735bed5a1277" name="gcc7" arch="src">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="d88fa1cfa95a8500c3a553806e95fbdc06a0520071408df1d860d9fee95753c1" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="b9c52b714db89b23388e76ac9415565a969e49f7c8b6f673c19d53d42ebef3c0" name="gcc7" arch="src">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="ef46c6adc1d4a93918ab135e0435c0860d70f9c95e306f79d8a58a16ee681f1d" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="60852c6fb0f20319294a82860938afdd579ed60487414389a9ca21865e91f14b" name="gcc7" arch="src">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="fd6fb283aaf51f3f7a3c67295bea669215aa148d56fdf1f21e885234340226ae" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="a96ce54e5c52d9d9a0aa61e7541c2c014937008ce1c7e7ed5c6c1489e50c3b3f" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="fb1ebe5915253d8fdbb79b8912734b8e23b3c4a4be20f039cca92c67fd950525" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="9fdb9f5ff93fc0aa0e0337cbf0d4d774fc4ead569a37c298ed6e2e7d3ed156f7" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="fa3e6bd562dda8d7e9490e4983d49f9dbbea08368296f7c3f463e59898b2f0a2" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="a475a2b58ae0095341df4bd6d17cf271ccdb9800dde23e2e61edbba36976ee64" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="a1a425ea5c9a024ca95213932e875c84b675844f2f5ddfa64957eec18cf8db05" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="aa5561564b5342747969f39bd4dfe8bb5f135ada8aa3e5a53652188bcadf3417" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="1328849990b644e50ea2788b9a123fff17b033101c284105e24c6c5bd3c8e0d1" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="fd83984f5054c83187d769a551c95bc5a607eb0d2896852a0ad45fc91e312a52" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="113df6722944a3704995eb67c89db545c4c48f32a7c84c49959008b86a785cec" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="a4705c58097f24900960d40a39cf02e7c44f2a51b05f5edf23c9f759c4d13437" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="b860069edf0e5152ca1f1a036446244ea1294ddeea9e865a5801b5523630459a" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="d686b1939ee1532ba1df553d4254ca2f58c9edffa358f46864a6e77d9b456442" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="8fc97dbc73c2b7a8ab3ee6bd082217c66e892b40b192dfb2bc1ef09ceed687db" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="e56e816f6c93d69da0534cec45c3c754e67bd96a84d610608bf6e49553175723" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="b79b5c9e4575f22c820b2805a5074ce17c630e406be9bfc18fcd8e02bd825018" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="2b4b1638626291cc8f454c295cd12f73354da6d9a9cf8d06be9267b020113f2f" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="7c02cdad6abf0531c9ea953739c43f56e6af24a13618c6c9c2d01af550085bcd" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="6cb5f6020a452fdfb8e116561a9daecd5d57b0df9ffd07ef63c73aee5a8b7516" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="e773cebaf9563f1287e59db3e8fc526cb29e4e187b85d988100761365b16456b" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="7d94bd20fc0649bdab8cc4cf9a9f8b0dc0bdebefb7413b00a4f71646f2edd459" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="4aabd594a4ee813a12a08585c42b3f5ec7a1b5f34fc3f4a2bd08c77e27086e39" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="af14ea469ec04b17a58e1cce2ebc7fca64347c11002e66f67790128905b0be9d" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="15d5ed9692584c629ca28ea4fab7a719e2ea1e173aa580060313f1c16d430f8a" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="48bda94e07310d165ccf80e0259b461cfa4b6a0e933237044ee70a3d6f58d821" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="36fd145f24cb4dfdc1772c968ab79474b13c6d37b2d4afa6db33b5b7ef6bbd2f" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="4892bf564de57fbd7dea8c521701d23e99c50884d2f40bac3832c54f497a8bdb" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="0d4fbe1086bca2931b073a635224f1fdf4cfed775db37c83a78b2cfb9ea72718" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="61f09ea7bab75a974fc73e8789972f6551164f9173aad71b1e88cd50d6e65859" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="6f301a99a5ca8aef293fe877ad449a3ce69d5bd7002d48b67b1774a82f08aa28" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="5b6f5389757b515d551161daf7d7b47b8d20aca51a38341e14c732f849fcc0ec" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="eea866061e851e9e7b987a4bca4bb6f60f0b4e5f78af3ea05024ba260ff41848" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="f2bf66f2c97bbf62d58b386dce8a231b9c646b8b2a73279936e9f1ef4ac568e7" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="8fe2393df392a5815cfcfa4c72171ae60eb4f9b5c04afb03cd0b905580110df7" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="12001ec5b74cb8fbcca10b61f6a6744c7b982a798658211c55b7227aa9aeb64f" name="gcc7-testresults" arch="src">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="282b27c49a0dd6cac64c68c1669ecdd9f7cd1e24b6f0a46f9957e3e5b116b196" name="gcc7-testresults" arch="x86_64">
  <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>
  <changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
  <changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
  <changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
  <changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
  <changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
  <changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
  <changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
  <changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
  <changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
  <changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
</package>
<package pkgid="5186a5af0189295a9f2a9c1b925610ce750d622a56eae2383b8a05b8ec674d1c" name="gcc7-testresults" arch="src">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="4b31553dda0f3278ee0c28904f94426d0ff4d520ba919db00538c4d25c903e0c" name="gcc7-testresults" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258313" rel="6.1"/>
  <changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
  <changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
  <changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>
  <changelog author="rguenther@suse.com" date="1508500800">- Update to gcc-7-branch head (r253932).
  * contains fix for PR82445 which is about a RPI1 bootloader
    miscompile.  [bnc#1061667]</changelog>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
</package>
<package pkgid="42ead6b3db002759df9684e9f17c5a3fc34eb48317c8233bfdabdecb1e3d79e0" name="gcc7-testresults" arch="src">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="d435600c3e276dd789091de7ed88a3096fe0e236d7177136671843cb4a05423b" name="gcc7-testresults" arch="x86_64">
  <version epoch="0" ver="7.3.1+r258812" rel="10.1"/>
  <changelog author="rguenther@suse.com" date="1511438400">- Add gcc7-pr82248.diff to fix bogus stack probe instruction on ARM.
  [bnc#1068967]</changelog>
  <changelog author="rguenther@suse.com" date="1512734400">- Add gcc7-avoid-fixinc-error.diff to avoid install-host aborting
  on non-existing target include directory.  Remove --with-build-sysroot=/
  hack from icecream cross configs, no longer prune include-fixed for
  them to retain a GCC provided limits.h.  Remove installed install-tools.</changelog>
  <changelog author="rguenther@suse.com" date="1513080000">- Split cross-avr into -bootstrap and non-bootstrap variant for avr-libc
  integration.</changelog>
  <changelog author="rguenther@suse.com" date="1514894400">- Update to gcc-7-branch head (r256067).
- Deal with C++ being disabled for crosses.
- For crosses that have a target triplet not matching that of binutils
  create symlinks to as and ld in the GCC private directory.</changelog>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
</package>
<package pkgid="90ae4d7671b6f25b0867d67797d5a300d00ed09d9e77402fe3d274f6cea4e126" name="gcc8-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="2b26a970585bd66ac7135532674fa0e9a7c78591de46afb2de14affd69f0e316" name="gcc8" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="670e30ffe2bef81d18ab2218a3103a00dc5b6466d8b87f3f71295ce48f20cc4b" name="gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="169257d5965ba5932ab7b6d891cf4ac78996a14e3df6743ee4cff58eee304d23" name="gcc8-ada-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="42774ad4cf5ec7143287d682fc730c8300d323e34cf3753fb4cd74ef29d63eb4" name="gcc8-ada" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="2432c15742e12354d51be76f02135e01c1f91f779ff4d9cccddce70406f2a606" name="gcc8-c++-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="50243955c58f76ebbc2673e31c7d5132856d84950e3125100568e66d74bf0142" name="gcc8-c++" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="bbf2c3ef5f79e63d387a9cb8a9235953965566c739a773fcb70afa5d21fcb107" name="gcc8-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="3b9ef6c2e04640b5f3ae73fad09a8c2ad79e8179423bb21a3eab0b70f9096314" name="gcc8-fortran" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="3a5ced69abeb0da75f6781bdbff850c10452cdf427288329fd72f906df1c456b" name="gcc8-go-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="b692bc203ea0ce9f9008e6c123b0b36249c9d7d07435295c4d31fb1a5c089bad" name="gcc8-go" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="9d3efadf7f87b11e71a5e4e2b2fed2e393e5016485d5072bb5cbb69da6e4c897" name="gcc8-info" arch="noarch">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="f15f4df7a7449166c7ccbcd072a61a945281b2e4a8d4235db4be8d11e2717215" name="gcc8-locale" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="a6aa0f2b6b824a555a6b21f09e490262786f8877defb40689a74fd461462bdc4" name="gcc8-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="7cbaf4f7215f7f7e31c2149c62d0c7349d1b445558eedd043efe14f6720ddb3f" name="gcc8-obj-c++" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="29d4d68e6b69f9da4209042837aa6061282167cde37f0af2a78c927f5757dbc0" name="gcc8-objc-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="121365e786c220e619af341b4725d57760b4a306bdb6671eb630b06470a157e0" name="gcc8-objc" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="19ae5a276ce625e65274ed6d643e9729c4c26d78c629a121e0f38ac122f40031" name="gcc8-testresults" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="2.2"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="60bfd2d2fe6748e40cba91f770d440c038b47ad0b2aafd45349339b23f7f5a4d" name="gcc8-testresults" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="2.2"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="dee9ad015c5f0d83608d78363aac3b01ca453b3a84c6e2818e44d95856c76f0a" name="gcompris-qt" arch="src">
  <version epoch="0" ver="0.91" rel="2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451217600">- Update to new upstream 0.50 release
- Added add-option-to-disable-qml-box2d-module-and-depending\
  - activites.patch in case qml-box2d is not available
- Recreated voices tar.xz for 0.50 version
- Upstream move to tar.xz format
- Added deps to libBox2D-devel</changelog>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
</package>
<package pkgid="f8697fa82d6a39639d590b623cda91c3394960979dc38837fbbcceb561710818" name="gcompris-qt" arch="x86_64">
  <version epoch="0" ver="0.91" rel="2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451217600">- Update to new upstream 0.50 release
- Added add-option-to-disable-qml-box2d-module-and-depending\
  - activites.patch in case qml-box2d is not available
- Recreated voices tar.xz for 0.50 version
- Upstream move to tar.xz format
- Added deps to libBox2D-devel</changelog>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
</package>
<package pkgid="acebd98fc465e125f8042adcb5d66779da107c2df4b288e0bfc5f0c6c1473c76" name="gcompris-qt-activities" arch="noarch">
  <version epoch="0" ver="0.91" rel="2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451217600">- Update to new upstream 0.50 release
- Added add-option-to-disable-qml-box2d-module-and-depending\
  - activites.patch in case qml-box2d is not available
- Recreated voices tar.xz for 0.50 version
- Upstream move to tar.xz format
- Added deps to libBox2D-devel</changelog>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
</package>
<package pkgid="a0eacdc4a2134089f7ddf3665626ae0fedee3ae11d72130af7e7b5a119156f49" name="gcompris-qt-lang" arch="noarch">
  <version epoch="0" ver="0.91" rel="2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451217600">- Update to new upstream 0.50 release
- Added add-option-to-disable-qml-box2d-module-and-depending\
  - activites.patch in case qml-box2d is not available
- Recreated voices tar.xz for 0.50 version
- Upstream move to tar.xz format
- Added deps to libBox2D-devel</changelog>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
</package>
<package pkgid="1e65480300fd33c83fa342ac315e4d66e057b4f649a531b72e1690a657b0ff30" name="gcompris-qt-voices" arch="noarch">
  <version epoch="0" ver="0~20180517" rel="2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093989</changelog>
</package>
<package pkgid="0cc0ba0a5f6218f7a81356d94302b8b7d6228f881156ac1968d2fba61b504ad9" name="gcompris-qt-voices" arch="src">
  <version epoch="0" ver="0~20180517" rel="2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093989</changelog>
</package>
<package pkgid="b3b112f8a3095a1e2daae880ab09a33f2a03d19b9721dcf0323ec8664eb2b325" name="gd" arch="src">
  <version epoch="0" ver="2.1.0" rel="21.1"/>
  <changelog author="crrodriguez@suse.de" date="1226491200">- QA Results: Regression on PPC64 only, detected by PHP test suite,
  the system libgd part, fix by IBM</changelog>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
</package>
<package pkgid="4d148c166fe0d5ee0fc6ea226ab77dc9b6e55749a67e1797ae8de7ccd35b74ad" name="gd" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="21.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
</package>
<package pkgid="3d208bec87f26fb928d4010a56b4f63c518da51d14ef4f0b5173b109addf1ea4" name="gd" arch="src">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="a31a918933a99e36600f38e737d0b0fdb2ed6cf14fdd965141d88f933e2bbb55" name="gd" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="5f62fe1bebb5c8630541c2d81741b5cb9a555663b083e7b30d48d0fb8e73d349" name="gd" arch="src">
  <version epoch="0" ver="2.1.0" rel="27.1"/>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="fb9af6a47292609205b00fd52122d729cdfee1bf9d35b68227b0cce435c9243b" name="gd" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="27.1"/>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f58ecfb08a79fb26b53aac0595f625bc757042f63a66ca481d1ca52660bfebbf" name="gd-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="21.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
</package>
<package pkgid="88e132ca893fac7bd21d8b658edb89a809434e2028a307ea2dcb7ad796590cd3" name="gd-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="80d38f10042f08db207a3922823d4c2ac19745b9a731cd9037a0ea187d36f83f" name="gd-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="27.1"/>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d8559ead7934ff9612b8dd176cba76b76c034d6bdfe2336a54e3fada83458e84" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="21.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
</package>
<package pkgid="871ea8f73ae874cf1215bbe835b86896019f50193a305e6df57fbc9f9e00a996" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="24.1"/>
  <changelog author="ro@suse.de" date="1270382400">- replace png_check_sig by negated png_sig_cmp for libpng14</changelog>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
</package>
<package pkgid="d5bbd342331febd2281997c3a4366a9029fc5b7f28c2ca35a830faaaa458de0d" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="27.1"/>
  <changelog author="ro@suse.de" date="1270555200">- add baselibs.conf (for libpghoto2)</changelog>
  <changelog author="aj@suse.de" date="1308052800">- Devel package needs zlib-devel and libpng-devel.</changelog>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use libpng from sysroot</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Remove pointless INSTALL file from rpm package
  (it's just the default autotools INSTALL blurb)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359892800">- gd-autoconf.patch fix up compile file so gd can handle
  large files on 32 bit</changelog>
  <changelog author="pgajdos@suse.com" date="1387281600">- updated to 2.1.0
- removed warn.patch (not needed)
- removed ppc64.patch (upstreamed)
- removed gd-png_check_sig.patch (upstreamed)</changelog>
  <changelog author="tchvatal@suse.com" date="1388145600">- Cleanup here&amp;there to parallelize everything
- Remove bogus cmake dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1396612800">- fixed CVE-2014-2497 [bnc#868624]
- build against libvpx and libtiff</changelog>
  <changelog author="pgajdos@suse.com" date="1427198400">- fixed CVE-2014-9709 [bnc#923945]
  + gd-CVE-2014-9709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1470657600">- security update:
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6128 [bsc#991710]
    + gd-CVE-2016-6128.patch
  * CVE-2016-6207 [bsc#991622]
    + gd-CVE-2016-6207.patch
  * CVE-2016-6161 [bsc#988032]
    + gd-CVE-2016-6161.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476360000">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + gd-CVE-2016-7568.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    gd-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    gd-CVE-2016-6911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
  * gd-CVE-2016-9933.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1485950400">- security update:
  * CVE-2016-6906 [bsc#1022553]
    + gd-CVE-2016-6906.patch
  * CVE-2016-10167 [bsc#1022264]
    + gd-CVE-2016-10167.patch
  * CVE-2016-9317 [bsc#1022283]
    + gd-CVE-2016-9317.patch
  * CVE-2016-10168 [bsc#1022265]
    + gd-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + gd-CVE-2016-10166.patch
  * CVE-2016-6912 [bsc#1022284]
    + gd-CVE-2016-6912.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- security update:
  * CVE-2017-6362 [bsc#1056993]
    + gd-cVE-2017-6362.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="26d8bced48379e4371ec31e0d95a8dc2031b6e091e3424cf4f055bc4e95814b1" name="gdb" arch="src">
  <version epoch="0" ver="8.0.1" rel="3.1"/>
  <changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
  <changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
  <changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
  <changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
  <changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
  <changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
</package>
<package pkgid="ecbdbee223b93274438fab34382a69ac2dafb479f6513919dd762de5158f773e" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="3.1"/>
  <changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
  <changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
  <changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
  <changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
  <changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
  <changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
</package>
<package pkgid="35ec27da8b7a2579c2e7286235bfdf2badb593583c5fb2c1d268ba9617767017" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="10.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="748d0c7a5b933cf33dee70b4ee3c980280e64000494d236825463ea5ea8efa23" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="10.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="20c73dcab24c9717dc57a861bf69556b786d323929a61dfda528684c7da5db7f" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="7.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="a91663f250471604a9cba24131e2fa5936e7b407c60ea4e45afc9ab4661a675d" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="7.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="8abac23482e4def340d3d580734b8ebf5749f52a76ab1b51e45345ce29b5760a" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="3.1"/>
  <changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
  <changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
  <changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
  <changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
  <changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
  <changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
</package>
<package pkgid="d417af3c37c22e65c30ca5fbc19a91994131268b8ead5c34bf2b72b876ecb5f2" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="10.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="f3c0d7ad2bfc8873b54d7d921afdcd2ac043f656e2e30805a3e8e547cc8c7f28" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="7.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="641fae0b7927963a023daeda9171ec565daf19db48862ea1086ba7f818cf2607" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="3.1"/>
  <changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
  <changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
  <changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
  <changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
  <changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
  <changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
</package>
<package pkgid="37a588a9aef6796d16905db578c28f5fc3fcef39975bff2dc5d6c4bdc30658b9" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="10.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="637874aefcd8bbfc6c909009f48ed6ff3b7fd9465ff3c30b6e7feedf0671109b" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="7.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="22ee64cd33f11fac15ce16a3a42a10f47650add13336b9e39ec7ae79ee94c794" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="78c0e4bbd2e54952bd55e3def03e53e6cfe13f95f183282874f744f1804eac6f" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="04a7b3e14b0d7d190e08b627370b3941eb8f322641057dadccf0a12578c38f7c" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="423e7b98762d14f1887d5c34d2f13ae3ba7c97676734c2a3ee529b556c34cc9e" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="cc45eceacc446e741b720da7e857bfdf89bd1760b31a89381d0d92ef52b05164" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="153107ec5dd1afad1e3a37fff9c79ddcf48003d90c1105766489e3ff87330345" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="caeceac6914856f580048ac12019d525b69962d603a9b7a0e9f469dea1674e10" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="3a1022019154e80eec5b7bf2bd5335941820f16026b01d7a09a2947af24cc7af" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="13e30d1e0c2f384563b861d0a7149485d9ab9b9f9707b936c723b7051a8f0352" name="gdk-pixbuf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="f69b5fc39f5f4c7361132736d4926753d2a9b8ce3ef40ad294b62cf8a5fa2291" name="gdk-pixbuf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="ba66febfd199d52e2cf7d2ec60951bf94b44f3bb12eb192e1fee958870ffaceb" name="gdk-pixbuf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="bff7773f33f58181470b58ed6ed8e3f9f85a0f2187a89fbe4009246182daea9b" name="gdk-pixbuf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="5112065e165299e65e42b46723dd41ec7266deb6fd93dc470ab47b7845d954f6" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="86ce99a2e5721fb090d5f81a2f1eeab65d262fb67125b64783c4ed5d9ddf4b38" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="6a08a019bd8977567fe311e949d527b74ad212b23aad49246265c1551d827e5f" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="f4037af363965a4bb007c2322cd705665fecd45a54a6f802d06c5b90a2f4d3a7" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="ecde07e8738b4f9fd5a267d20c663323297185f84b50e6abe691743ccd9627f8" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.40.18" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
  <changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>
</package>
<package pkgid="80234141b13a4221169c16df550513c7b179b008fef14da713a11d46d5d3e15f" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.40.20" rel="15.1"/>
  <changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
  <changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>
  <changelog author="federico@suse.com" date="1525694400">- Update to version 2.40.19:
  + bgo#621088: Using text objects as clipping paths is now supported.
  + bgo#587721: Fix rendering of text elements with transformations (Massimo).
  + bgo#777833 - Fix memory leaks when an RsvgHandle is disposed before
    being closed (Philip Withnall).
  + bgo#782098 - Don't pass deprecated options to gtk-doc (Ting-Wei Lan).
  + bgo#786372 - Fix the default for the "type" attribute of the &lt;style&gt; element.
  + bgo#785276 - Don't crash on single-byte files.
  + bgo#634514: Don't render unknown elements and their sub-elements.
  + bgo#777155 - Ignore patterns that have close-to-zero dimensions.
  + bgo#634324 - Fix Gaussian blurs with negative scaling.
  + Fix the &lt;switch&gt; element; it wasn't working at all.
  + Fix loading when rsvg_handle_write() is called one byte at a time.
  + bgo#787895 - Fix incorrect usage of libxml2.  Thanks to Nick Wellnhofer
    for advice on this.
  + Backported the test suite machinery from the master branch (Chun-wei Fan,
    Federico Mena).
  + We now require Pango 1.38.0 or later (released in 2015).
  + We now require libxml2 2.9.0 or later (released in 2012).</changelog>
  <changelog author="federico@suse.com" date="1525694401">- Fixes bsc#1083232 - CVE-2018-1000041 - input validation issue could
  lead to credentials leak.
- Update to version 2.40.20:
  + Except for emergencies, this will be the LAST RELEASE of the
    librsvg-2.40.x series.  We are moving to 2.41, which is vastly
    improved over the 2.40 series.  The API/ABI there remain unchaged,
    so we strongly encourage you to upgrade your sources and binaries to
    librsvg-2.41.x.
  + bgo#761175 - Allow masks and clips to reuse a node being drawn.
  + Don't access the file system when deciding whether to load a remote
    file with a UNC path for a paint server (i.e. don't try to load it at all).
  + Vistual Studio: fixed and integrated introspection builds, so
    introspection data is built directly from the Visual Studio project
    (Chun-wei Fan).
  + Visual Studio: We now use HIGHENTROPYVA linker option on x64 builds,
    to enhance the security of built binaries (Chun-wei Fan).
  + Fix generation of Vala bindings when compiling in read-only source
    directories (Emmanuele Bassi).
- Added librsvg-post-2.40.20-updates.patch to accumulate fixes after
  the 2.40.20 release.</changelog>
</package>
<package pkgid="14f96493c32aa5dcd06ec9e0ac81abe4cf2aadd2a7fafcfafbb316c739b925aa" name="gdk-pixbuf-loader-rsvg-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.18" rel="12.1"/>
  <changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
  <changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>
</package>
<package pkgid="f43becc700c2a1718c69bf7cd5a432ecfab4300a6526ce389ca798766b27f0b9" name="gdk-pixbuf-loader-rsvg-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.20" rel="15.1"/>
  <changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
  <changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>
  <changelog author="federico@suse.com" date="1525694400">- Update to version 2.40.19:
  + bgo#621088: Using text objects as clipping paths is now supported.
  + bgo#587721: Fix rendering of text elements with transformations (Massimo).
  + bgo#777833 - Fix memory leaks when an RsvgHandle is disposed before
    being closed (Philip Withnall).
  + bgo#782098 - Don't pass deprecated options to gtk-doc (Ting-Wei Lan).
  + bgo#786372 - Fix the default for the "type" attribute of the &lt;style&gt; element.
  + bgo#785276 - Don't crash on single-byte files.
  + bgo#634514: Don't render unknown elements and their sub-elements.
  + bgo#777155 - Ignore patterns that have close-to-zero dimensions.
  + bgo#634324 - Fix Gaussian blurs with negative scaling.
  + Fix the &lt;switch&gt; element; it wasn't working at all.
  + Fix loading when rsvg_handle_write() is called one byte at a time.
  + bgo#787895 - Fix incorrect usage of libxml2.  Thanks to Nick Wellnhofer
    for advice on this.
  + Backported the test suite machinery from the master branch (Chun-wei Fan,
    Federico Mena).
  + We now require Pango 1.38.0 or later (released in 2015).
  + We now require libxml2 2.9.0 or later (released in 2012).</changelog>
  <changelog author="federico@suse.com" date="1525694401">- Fixes bsc#1083232 - CVE-2018-1000041 - input validation issue could
  lead to credentials leak.
- Update to version 2.40.20:
  + Except for emergencies, this will be the LAST RELEASE of the
    librsvg-2.40.x series.  We are moving to 2.41, which is vastly
    improved over the 2.40 series.  The API/ABI there remain unchaged,
    so we strongly encourage you to upgrade your sources and binaries to
    librsvg-2.41.x.
  + bgo#761175 - Allow masks and clips to reuse a node being drawn.
  + Don't access the file system when deciding whether to load a remote
    file with a UNC path for a paint server (i.e. don't try to load it at all).
  + Vistual Studio: fixed and integrated introspection builds, so
    introspection data is built directly from the Visual Studio project
    (Chun-wei Fan).
  + Visual Studio: We now use HIGHENTROPYVA linker option on x64 builds,
    to enhance the security of built binaries (Chun-wei Fan).
  + Fix generation of Vala bindings when compiling in read-only source
    directories (Emmanuele Bassi).
- Added librsvg-post-2.40.20-updates.patch to accumulate fixes after
  the 2.40.20 release.</changelog>
</package>
<package pkgid="bd1d41a555965f954653e07603e42d5894120bb8289f9c02ff8ee2023a2fd669" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="469436b3223a3b8be886ec9972b0b9548ab590a7b144ed0a98266ed93f4fefff" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="45b093730354d358d8fa9d8821a8fba1f5315e56f74718e80a1fed5ec7346497" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="7076bf7a7c56dd476b944bf2f6a71dfb65c32667a850da7a2d78a37ef04f3d54" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="cc253f3f650331bb471507517f5d1d18ea540df573a6da504e7957f838af3a0e" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="10.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
</package>
<package pkgid="4209ae71b982cbe8bc002650da447bbeef8904292e862faf733b0e5e4cff1d8a" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="13.1"/>
  <changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
</package>
<package pkgid="c99a9fab5ef4d970b8e203dd71a3d6c000ecfb3a23a39dbe0b95ebd4af067668" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="16.1"/>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
</package>
<package pkgid="bdbbbe190ddad5f1687352ce8cd597b95e231c77296a2a5159bd48ce541e3838" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="19.1"/>
  <changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
  <changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
  <changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
  <changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027026 bgo#779012,
  CVE-2017-6313 bsc#1027024 bgo#779016,
  CVE-2017-6314 bsc#1027025 bgo#779020):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
  <changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>
  <changelog author="federico@suse.com" date="1511524800">- Added gdk-pixbuf-toplevel-overflow-checks.patch - This adds overflow
  checks when creating pixbuf structures in general.
- gdk-pixbuf-bsc1053417-bmp-updates.patch - Fixes bsc#1053417, for
  arithmetic overflow in the BMP loader.  Also adds support for BMPv3
  with bitmasks.</changelog>
  <changelog author="mgorse@suse.com" date="1515412800">- Add gdk-pixbuf-bgo785973-large-gif.patch: fail quickly when image
  dimentions are too big (boo#1074462 CVE-2017-1000422).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Replace gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch, and
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch with upstream
  versions.</changelog>
  <changelog author="mgorse@suse.com" date="1526472000">- Fix the build: revert to original version of
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch</changelog>
  <changelog author="mgorse@suse.com" date="1531828800">- Add gdk-pixbuf-bsc1053417-test-fix.patch: update the
  CVE-2015-4491 test, since we now return an error after the
  patch for bsc#1053417.</changelog>
</package>
<package pkgid="eb5523f45171c8c985190caa96b33647e2a15544fcf6296d1f3c3b0ea10f2b3a" name="genisoimage" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="25.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- build require zlib-devel and fix cmake scripts to detect
  when it is missing.</changelog>
  <changelog author="seife@opensuse.org" date="1266235200">- fix xconfig.h installation with newer cmake</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow warnings from gcc-4.5</changelog>
  <changelog author="reddwarf@opensuse.org" date="1285675200">- updated to 1.1.10:
  * genisoimage: add support for sha256 and sha512 checksum generation
    when making jigdo files.
  * genisoimage: checksumming with lots of algorithms can be very
    time-consuming, so split it out into multiple threads if possible.
  * genisoimage: allow user to specify which checksum algorithms to run
    on the command line.
  * Fix FTBFS with missing xconfig.h. Thanks to Matt Kraai for the patch.
  * genisoimage: fix string overflow breakage when using the -root
    option (https://bugzilla.redhat.com/show_bug.cgi?id=508449)
  * librols: remove or rename several functions that clash with POSIX.
    Fix up callers.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- updated to 1.1.11:
  * genisoimage: Fix silly bug in MD5 output in template files. (Debian
    bug #596681)
  * genisoimage: Minor tweaks to the the genisoimage.1 man page.
  * genisoimage: Update references to atterer.org (Debian bug #596860)
  * genisoimage.1: Make the description of the md5-list format clearer.
  * genisoimage: Use memmove() instead of strcpy() when cleaning
    up graft points.
- Spec file updates:
  - Changes based on rpmdevtools templates and spec-cleaner run.
  - Changed License: to GPLv2.
  - Added description for patches based on openSUSE Patches Guidelines (where
    possible).
  - Updates in Buildrequires:, Requires:,
  - Updates in %prep, %build and %install sections.
  - Fixed rpmlint warnings ("description-shorter-than-summary" for wodim-devel
    and "files-duplicate").
  - Other updates based also on Fedora package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1301918400">- Spec file updates:
  * Added "libbz2-devel" in BuildRequires:.
  * Added "permissions" package in Requires:.
  * Moved mkhybrid to cdrkit-cdrtools-compat.
  * Install also libedc.a library.
  * Changed the installation path of header files (to be more compatible with
    Fedora, at least for libusal).
  * Changed wodim-devel package name to cdrkit-devel-static.
  * Added "-DPIC -fPIC" in CFLAGS to built the static libraries.
  * Added smp_mflags to make.
  * Install config files in /etc.
  * Updates in %post installation script of wodim according to openSUSE spec
    file guidelines.
  * Updates in %files sections.
  * Minor other updates.
- Added a patch from upstream for icedax.1 to fix rpmlint warning "macro `wav,'
  not defined".</changelog>
  <changelog author="davejplater@gmail.com" date="1302177600">- Fixed provides/requires to enable clean installation of cdrtools
  and vice versa.</changelog>
  <changelog author="jengelh@inai.de" date="1364904000">- Dissolve Obsoletes cycle between cdrkit (source package "wodim")
  and cdrtools. Add proper Conflicts instead.
- Use more robust make install call; kill redundant %clean section</changelog>
  <changelog author="coolo@suse.com" date="1366286400">- switch _service to localonly</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Avoid collision of iso{dump,vfy} etc. by moving binaries into
  separate directory. This allows parallel installation of mkisofs
  and genisoimage.</changelog>
  <changelog author="jengelh@inai.de" date="1370520000">- Avoid calling fdupes on entire buildroot; it is not valid for /etc
- Install manpage symlinks inside cdrkit-cdrtools-compat
- Remove static libraries for which there are no header files
  packaged</changelog>
  <changelog author="nadvornik@suse.com" date="1394020800">- fixed large file support (bnc#615177, bnc#831820)
  genisoimage-multi-extent-fix-bnc615177.patch</changelog>
  <changelog author="lnussel@suse.de" date="1403265600">- make wodim position independent (bnc#882035, cdrkit-pie.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1422619200">- add cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (fate#318444)</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Update geteltorito script to latest version
  source: http://userpages.uni-koblenz.de/~krienke/ftp/noarch/geteltorito/geteltorito</changelog>
  <changelog author="jkeil@suse.de" date="1433851201">- Use full url as source</changelog>
  <changelog author="dmueller@suse.com" date="1436356800">- disable source download service, upstream download location
  is dead</changelog>
  <changelog author="dmueller@suse.com" date="1439467200">- remove cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (bsc#939456)</changelog>
  <changelog author="jkeil@suse.de" date="1441108800">- add fix-check_linux_26.patch: also compare major kernel version
  number. (bsc#897950)</changelog>
  <changelog author="jdelvare@suse.com" date="1532692800">- add genisoimage-fix-TRANS.TBL-with-large-files.patch: fix a crash
  when option -T (generate TRANS.TBL) is used in conjunction with
  multi-extent files (files larger than 4 GB) (bsc#1100466)</changelog>
</package>
<package pkgid="7ec126014a34de838fc8a6a24f7c31868326896a64da12679b48bb7e6945726a" name="geoclue2" arch="src">
  <version epoch="0" ver="2.4.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
  <changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
  <changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
  <changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
  <changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2.3.0
  * Add a network NMEA source, which together with this application:
    https://wiki.gnome.org/Apps/GeoclueShare allows you to use the
    GPS of your Android device on your geoclue-enabled machine.
  * Allow root to own the name on the bus, i-e run the service.
  * Make use of compass device if available, through iio-proxy.
  * Fix a hang on client starting twice.
  * More helpful error on agent rejection.
  * Improved documentation.
  * Do not ship generated D-Bus service files in the tarball.
  * Only allow the geoclue user and root to call methods on agents.
  * Fix ignoring of valid location updates due to comparison of
    stances in different units.
  * Correctly handle two consecutive location updates with same
    mestamp on them.
  * Correctly handle late location update.
  * Build system fixes:
    + Fix detection of gdbus-codegen tool.
    + Workaround an intltool issue.
- Update dependencies
- Make build more verbose</changelog>
  <changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.4.0:
  + Add a convenience library to make interacting with Geoclue very
    easy.
  + Put each D-Bus interface description in it's own file. Unified
    interface file still provided for backwards compatibility.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Enable GObject introspection (required by gnome-weather 3.19+):
  + Pass --enable-introspection to configure.
  + Add pkgconfig(gobject-introspection-1.0) BuildRequires.
  + Split typelib-1_0-Geoclue-2_0 subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456574400">- Update to version 2.4.2:
  + Reliable desktop ID detection for xdg-app. This together with
    latest gnome-shell and gnome-control-center, allows for
    per-application geolocation access controls.
  + Don't require xdg-app applications to pass a valid desktop ID
    since Geoclue can automatically detect it.
  + Don't allow xdg-app application to become user-authorization
    agents.
  + Correct introspection namespace version for libgeoclue.
  + Option to disable the backend build.
  + Demo: Provide reason to access location data.
  + Demo agent:
  - Critical log message on failing to show notification.
  - If app provides a reason string in it's desktop file, show
    that to the user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 2.4.3:
  + Fix a crash in the helper library.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Do not use systemd macros for geoclue2.service, they are not
  designed for dbus systemd unit file [bsc#982216].</changelog>
  <changelog author="zaitor@opensuse.org" date="1464609601">- Add geoclue2-rpmlintrc to sources to filter out bogus rpmlint
  warning about missing systemd-service and nonstandard user.
- Add missing post/postun handling of library.
- Remove useless desktop file for demos, we do not build the demos.</changelog>
  <changelog author="qzhao@suse.com" date="1526990400">- Add geoclue-auto-detect-timezone-when-network-change.patch: Port
  upstream fix in commit c5d13936dec0676f6b30d17600f7b3fd33099ce0
  and 4c011afc5b1516a7e5d9631fca06975f6f48d50d to enable auto time
  zone switch(fdo#95493, bnc#1051612).</changelog>
</package>
<package pkgid="d448108e93fb59983f9516383309b40679cb3c89c21461e1e682c031af828893" name="geoclue2" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
  <changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
  <changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
  <changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
  <changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2.3.0
  * Add a network NMEA source, which together with this application:
    https://wiki.gnome.org/Apps/GeoclueShare allows you to use the
    GPS of your Android device on your geoclue-enabled machine.
  * Allow root to own the name on the bus, i-e run the service.
  * Make use of compass device if available, through iio-proxy.
  * Fix a hang on client starting twice.
  * More helpful error on agent rejection.
  * Improved documentation.
  * Do not ship generated D-Bus service files in the tarball.
  * Only allow the geoclue user and root to call methods on agents.
  * Fix ignoring of valid location updates due to comparison of
    stances in different units.
  * Correctly handle two consecutive location updates with same
    mestamp on them.
  * Correctly handle late location update.
  * Build system fixes:
    + Fix detection of gdbus-codegen tool.
    + Workaround an intltool issue.
- Update dependencies
- Make build more verbose</changelog>
  <changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.4.0:
  + Add a convenience library to make interacting with Geoclue very
    easy.
  + Put each D-Bus interface description in it's own file. Unified
    interface file still provided for backwards compatibility.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Enable GObject introspection (required by gnome-weather 3.19+):
  + Pass --enable-introspection to configure.
  + Add pkgconfig(gobject-introspection-1.0) BuildRequires.
  + Split typelib-1_0-Geoclue-2_0 subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456574400">- Update to version 2.4.2:
  + Reliable desktop ID detection for xdg-app. This together with
    latest gnome-shell and gnome-control-center, allows for
    per-application geolocation access controls.
  + Don't require xdg-app applications to pass a valid desktop ID
    since Geoclue can automatically detect it.
  + Don't allow xdg-app application to become user-authorization
    agents.
  + Correct introspection namespace version for libgeoclue.
  + Option to disable the backend build.
  + Demo: Provide reason to access location data.
  + Demo agent:
  - Critical log message on failing to show notification.
  - If app provides a reason string in it's desktop file, show
    that to the user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 2.4.3:
  + Fix a crash in the helper library.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Do not use systemd macros for geoclue2.service, they are not
  designed for dbus systemd unit file [bsc#982216].</changelog>
  <changelog author="zaitor@opensuse.org" date="1464609601">- Add geoclue2-rpmlintrc to sources to filter out bogus rpmlint
  warning about missing systemd-service and nonstandard user.
- Add missing post/postun handling of library.
- Remove useless desktop file for demos, we do not build the demos.</changelog>
  <changelog author="qzhao@suse.com" date="1526990400">- Add geoclue-auto-detect-timezone-when-network-change.patch: Port
  upstream fix in commit c5d13936dec0676f6b30d17600f7b3fd33099ce0
  and 4c011afc5b1516a7e5d9631fca06975f6f48d50d to enable auto time
  zone switch(fdo#95493, bnc#1051612).</changelog>
</package>
<package pkgid="1c2eff1b1be7390e3bd07522bfc00f84d0274ca52e9fccc1cf7f1d112f0056b3" name="geoclue2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
  <changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
  <changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
  <changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
  <changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
  <changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2.3.0
  * Add a network NMEA source, which together with this application:
    https://wiki.gnome.org/Apps/GeoclueShare allows you to use the
    GPS of your Android device on your geoclue-enabled machine.
  * Allow root to own the name on the bus, i-e run the service.
  * Make use of compass device if available, through iio-proxy.
  * Fix a hang on client starting twice.
  * More helpful error on agent rejection.
  * Improved documentation.
  * Do not ship generated D-Bus service files in the tarball.
  * Only allow the geoclue user and root to call methods on agents.
  * Fix ignoring of valid location updates due to comparison of
    stances in different units.
  * Correctly handle two consecutive location updates with same
    mestamp on them.
  * Correctly handle late location update.
  * Build system fixes:
    + Fix detection of gdbus-codegen tool.
    + Workaround an intltool issue.
- Update dependencies
- Make build more verbose</changelog>
  <changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.4.0:
  + Add a convenience library to make interacting with Geoclue very
    easy.
  + Put each D-Bus interface description in it's own file. Unified
    interface file still provided for backwards compatibility.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450872000">- Enable GObject introspection (required by gnome-weather 3.19+):
  + Pass --enable-introspection to configure.
  + Add pkgconfig(gobject-introspection-1.0) BuildRequires.
  + Split typelib-1_0-Geoclue-2_0 subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456574400">- Update to version 2.4.2:
  + Reliable desktop ID detection for xdg-app. This together with
    latest gnome-shell and gnome-control-center, allows for
    per-application geolocation access controls.
  + Don't require xdg-app applications to pass a valid desktop ID
    since Geoclue can automatically detect it.
  + Don't allow xdg-app application to become user-authorization
    agents.
  + Correct introspection namespace version for libgeoclue.
  + Option to disable the backend build.
  + Demo: Provide reason to access location data.
  + Demo agent:
  - Critical log message on failing to show notification.
  - If app provides a reason string in it's desktop file, show
    that to the user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 2.4.3:
  + Fix a crash in the helper library.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Do not use systemd macros for geoclue2.service, they are not
  designed for dbus systemd unit file [bsc#982216].</changelog>
  <changelog author="zaitor@opensuse.org" date="1464609601">- Add geoclue2-rpmlintrc to sources to filter out bogus rpmlint
  warning about missing systemd-service and nonstandard user.
- Add missing post/postun handling of library.
- Remove useless desktop file for demos, we do not build the demos.</changelog>
  <changelog author="qzhao@suse.com" date="1526990400">- Add geoclue-auto-detect-timezone-when-network-change.patch: Port
  upstream fix in commit c5d13936dec0676f6b30d17600f7b3fd33099ce0
  and 4c011afc5b1516a7e5d9631fca06975f6f48d50d to enable auto time
  zone switch(fdo#95493, bnc#1051612).</changelog>
</package>
<package pkgid="397a4b3f0b917e1dd9f581e8a80aeb82d7d699994d6108d0564726db515342b3" name="geotiff" arch="src">
  <version epoch="0" ver="1.4.2" rel="6.3.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1184414400">- spec file cleanup
  Mon Jun 19 12:00:00 UTC 2006 - Tim Fischer
- SPEC file created for SUSE 10.1</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.4" date="1213012800">- SPEC file created for openSUSE build service</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="9fafbccfecafbbcb063b382f88dda0d0acaa18ab37ee676f0fafa06e1de627f0" name="geotiff" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="6.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="78dd0e18d391f2fd580cc35f07a7f377fc27dcfd4a6f86f6282ecc463a16be70" name="geotiff-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="6.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="cde37260024ead36058bfd88217f76454586114a652f61d1f12b9c833d298324" name="ghostscript" arch="src">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="97920dd2a0436fdcfcc8d1db172ce93f4c92aa2f78799132828e548e9e583277" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="c58cf8b0f4607ae58ccadb75b5661cffe3ed9e880523be9c77e06ad955da562f" name="ghostscript" arch="src">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="c25d8960c3953e57f1f5f7718395aa02e26297e020c5e718b3286d7f1d01379a" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="a4c40c346f829e8599f8e8dff568351d630d47296cf8ea69caf6d6f98b1fa07c" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="d97fc1dee39b588a42a988cd170acf0fee4de03c9b108a09aa8517fe0801a53f" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="7f63776cd70229e4a01766239322015ec33aa680c5f2557f5a1a158c67e3a660" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="007a0e37b2455943b2a24e06b2aff661b9625ceb8a9925622403771c018cc139" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="e3bff1e31929ced75a24782e6fe3aba41111f9422596dfdc4e8d3d509a2c3797" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="e85b2a83890f458d3571e3d50753b8f5cf68aa2ebb9968f1f25e60713c82482f" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="1fe77aa108fcb4ec1a13785ea1b529204271c961f7ccc9f95fff813c90edfe36" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="0226ecf13dc35b1f4e3b4682372b1bc0751c5beccfc90e5a2198ecc7810bd798" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="532d844854e66e0f8c886c36866cf9f0a9b0899e380200246cb1e05b946d8249" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="10f175ffda36d436a785cc759c781c7eb5edbfe9c55216bde0a01764333e3ba0" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="7fa9108feebcd52afc1bba1b9426355b34b6561c051321acae208cfc81af24ec" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="ab712740af58048cf93f676ee23342bbc17e663e219d3f82a33231988080e089" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="jsmeix@suse.de" date="1361275200">- Version upgrade to 9.07.
  * As of this release (9.07), Ghostscript is distributed
    under the GNU Affero General Public License (AGPL).
  * Ghostscript has been extended to support file sizes &gt;4Gb
    in particular reading and writing PDF files.
  * Color management enhancements. Full details of the color
    management features can be found in: GS9_Color_Management.pdf
  * The pdfwrite devices now supports linearized (or optimized
    for fast web view) output directly ("-dFastWebView").
  * With the addition of linearisation to pdfwrite, pdfopt.ps
    has become redundant. Since it is difficult to maintain,
    has a number of bugs, and is believed not to work properly
    anyway, it is removed. Accordingly the pdfopt shell script
    that used pdfopt.ps is also removed.</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="21597299ecc5b32bb5df468a600370869cfec6dc5622743420aad3822da21c61" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="jsmeix@suse.de" date="1361275200">- Version upgrade to 9.07.
  * As of this release (9.07), Ghostscript is distributed
    under the GNU Affero General Public License (AGPL).
  * Ghostscript has been extended to support file sizes &gt;4Gb
    in particular reading and writing PDF files.
  * Color management enhancements. Full details of the color
    management features can be found in: GS9_Color_Management.pdf
  * The pdfwrite devices now supports linearized (or optimized
    for fast web view) output directly ("-dFastWebView").
  * With the addition of linearisation to pdfwrite, pdfopt.ps
    has become redundant. Since it is difficult to maintain,
    has a number of bugs, and is believed not to work properly
    anyway, it is removed. Accordingly the pdfopt shell script
    that used pdfopt.ps is also removed.</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="24fef5b4b6dc1f5e03d20eeb3b97151aed6603ce8340cea4a33a02be786becab" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="305a68888f523416728ba7990a1e885cc30e4fd6863b4b552c7ba2543bf80f27" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="dba0a5e8f8c6059eb9e72719087d34987fb2d694281d235840c96a54d6fa0d40" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="ea8b00ae96c43af9923fdbdc95f4f24447e89a1b6ba845ddb8e857cce22d7f8e" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="f1761fe4ceb299781dc68ed40afd5359a25c8fc91d229af43478930c007fb506" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="8e38cf304396f98e91cfcddde78100279998ed90f3146b3c041045e905a4582f" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="6b9cb2abe8b5605438571f597d057971ddce20bd531e99df80fdba985472916d" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="f03b0ba5cd4e0119ab4f7d0ff3a98a049478f8b4df84016213213b07f749f454" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="497343d7304d3232d5642f03c92088f4961b63a7013f5d4704ff94eca320024d" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="jsmeix@suse.de" date="1361275200">- Version upgrade to 9.07.
  * As of this release (9.07), Ghostscript is distributed
    under the GNU Affero General Public License (AGPL).
  * Ghostscript has been extended to support file sizes &gt;4Gb
    in particular reading and writing PDF files.
  * Color management enhancements. Full details of the color
    management features can be found in: GS9_Color_Management.pdf
  * The pdfwrite devices now supports linearized (or optimized
    for fast web view) output directly ("-dFastWebView").
  * With the addition of linearisation to pdfwrite, pdfopt.ps
    has become redundant. Since it is difficult to maintain,
    has a number of bugs, and is believed not to work properly
    anyway, it is removed. Accordingly the pdfopt shell script
    that used pdfopt.ps is also removed.</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="c2c0eda6f90634523aabc72c6a05881b56fdba67959d5946253188325bba4a8e" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="e54eacb381c467718670dd31fffe953f66dff8855fd273f40fd63c9273e33b43" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="4ab34d0c250faed1a1418b016cc106040819ed183d916d698900d92d1123f07e" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="8c263c1d26f072b8720da7e3347edb7cef1fa49463a7311cd7a72bcf0e15a71c" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="7436ba84d5ab2dfef18a71a66ca8498f4c965576e1852aac72c630cacae7aa3d" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1477915200">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
</package>
<package pkgid="f64782825ce6859cb699da318473c879297bfe2e67c257b057eba29878c5f4c3" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.15" rel="14.6.1"/>
  <changelog author="jsmeix@suse.de" date="1377777600">- Version upgrade to 9.10rc1 (release candidate for the 9.10 version).
  For details see the News.htm and History9.htm files.
- Prepare spec files to build both releases and release candidates
  easily in the future by using special different version strings.
- fix-undefined-operation.patch fixes
  http://bugs.ghostscript.com/show_bug.cgi?id=694546
- Removed BuildRequires for liblcms-devel because it is not needed
  when we build Ghostscript that works in compliance with upstream
  (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5).</changelog>
  <changelog author="jsmeix@suse.de" date="1378209600">- Version upgrade to 9.10. Primarily a maintenance release.
  Highlights in this release include:
  * LittleCMS2 and libpng have both been updated to the
    latest versions.
  * The URW Postscript font set has been updated to the
    latest version, fixing many compatibility problems
    with the Adobe fonts.
  * The CUPS filters gstoraster and gstopxl have been
    removed from Ghostscript. Those filters are now provided by
    cups-filters (a free software package hosted by OpenPrinting)
    that contains all CUPS filters needed by CUPS under Linux
    (see also the openSUSE issue bnc#735404 comment#44 at
    https://bugzilla.novell.com/show_bug.cgi?id=735404#c44).
  For details see the News.htm and History9.htm files.
- fix-undefined-operation.patch is no longer needed because
  it is fixed in the upstream sources.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1386936000">- ppc64le-support.patch from IBM fixes endianness
  in lcms (the Little-CMS library) to support the new
  architecture ppc64le (IBM Power PC Little Endian architecture)
  because ppc64 is big-endian and ppc64le is little-endian
  and lcms has a hard-coded check that assumes PowerPC
  is always big-endian which is incorrect on ppc64le.
  The fix is already in the main Little-CMS repository
  by this Git commit
  https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79
  (There are some cosmetic changes in the upstream patch.)
  It is not yet in the imported copy in Ghostscript.
  IBM will work with upstream to get the fix imported too.</changelog>
  <changelog author="jsmeix@suse.de" date="1395921600">- Version upgrade to 9.14. Primarily a maintenance release.
  Highlights in this release include (excerpt):
  * pdfwrite now uses the same color management engine as
    Ghostscript rendering devices (by default LCMS2). For
    the duration of this release a new switch -dPDFUseOldCMS
    is available which will restore the old color management.
    See: "Color Conversion and Management" in Ps2pdf.htm
    Due to constraints of the PDF/A-1 specification, the new color
    management does not yet apply when producing PDF/A files.
  * A new device 'eps2write' has been added which allows for the
    creation of EPS files using the ps2write device instead of
    the deprecated and removed pswrite device. The epswrite device
    is now also deprecated and will be removed in a future release.
  * Ghostscript has a new "pwgraster" output device for PWG Raster
    output.
  * The CUPS device now has improved support for PPD-less printing.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- gs does not seem to require libopenssl-devel for building.</changelog>
  <changelog author="jsmeix@suse.de" date="1410264000">- Version upgrade to 9.15rc1 (first release candidate for 9.15).
  For details see the News.htm and History9.htm files.
- ppc64le-support.patch is no longer needed because
  it is fixed in the upstream sources.
- Removed trailing whitespaces in spec file and changes file.</changelog>
  <changelog author="jsmeix@suse.de" date="1410955200">- Version upgrade to 9.15rc2 (second release candidate for 9.15).
  Ghostscript upstream QA highlighted a couple of issues
  that they felt warranted a fresh release candidate.
  For details see the History9.htm file.</changelog>
  <changelog author="jsmeix@suse.de" date="1411473600">- Version upgrade to 9.15. Primarily a maintenance release.
  There are no recorded incompatible changes (as of this writing).
  Highlights in this release include:
  * Ghostscript now supports the PDF security handler revision 6.
  * The pdfwrite and ps2write (and related) devices can now be
    forced to "flatten" glyphs into "basic" marking operations
    (rather than writing fonts to the output), by giving
    the -dNoOutputFonts command line option (defaults to "false").
  * PostScript programs can now use get_params or get_param to
    determine if a page contains color markings by reading the
    pageneutralcolor state from the device (so whether the page
    is "color" or "mono"). Note that this is only accurate when in
    clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should
    both be used.
  * The pdfwrite device now supports Link annotations with GoTo
    and GoToR actions.
  * The pdfwrite device now supports BMC/BDC/EMC pdfmarks
  * Regarding the new color management for the pdfwrite device
    introduced in the previous release, the proscription on using
    the new color management when producing PDF/A-1 compliant files
    is now lifted. To reiterate, also, with the new color
    management implementation, using the UseCIEColor option is
    strongly discouraged. For further information on the new
    pdfwrite color management, see in Ps2pdf.htm the
    "Color Conversion and Management" section.
  * Plus the usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For details see the News.htm and History9.htm files.</changelog>
  <changelog author="ro@suse.de" date="1411905600">- readd ppc64le patch ppc64le-support.patch
  lcms has not been fixed upstream and lcms2 has been fixed
  in a broken way</changelog>
  <changelog author="jsmeix@suse.de" date="1437998400">- CVE-2015-3228.patch fixes out of bound read/write cause
  by integer overflow in gsmalloc.c (boo#939342).</changelog>
  <changelog author="fcrozat@suse.com" date="1454068800">- Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017)
  (ghostscript bug #695862)</changelog>
  <changelog author="sflees@suse.de" date="1476100800">- Fix multiple -dsafer realated CVE's (bsc#1001951)
  * CVE-2013-5653.patch
  * CVE-2016-7978.patch
  * CVE-2016-7979.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1476964800">- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="alarrosa@suse.com" date="1478001600">- Add 0001-Fix-locksafe.patch to fix a regression introduced
  in CVE-2013-5653.patch by which ps files couldn't be opened
  in okular/evince (boo#1006592, kde#371887).</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  (bsc#1036453)</changelog>
  <changelog author="vcizek@suse.com" date="1493380801">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)
- CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize
  see https://bugs.ghostscript.com/show_bug.cgi?id=697450
  (bsc#1032120)
- CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index
  see https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)
- CVE-2016-10219.patch fixes DoS in intersect() function
  see https://bugs.ghostscript.com/show_bug.cgi?id=697453
  (bsc#1032138)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="jsmeix@suse.de" date="1525262400">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="4f38c97c60ffec5db6379fa6886a2bc94bee3dc831e67173967ec8e9f08637dd" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.25" rel="14.9.1"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
</package>
<package pkgid="8c39008e99660376c5e341854ab023bf5df96e88e05dd4267809552d660183fe" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26" rel="14.12.1"/>
  <changelog author="vcizek@suse.com" date="1493380800">- CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new
  see https://bugs.ghostscript.com/show_bug.cgi?id=697457
  (bsc#1018128)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="eb6b9c0830970b2a7ba4cd090260b271310f81fbfe291ad7c9b2153a0d28a8b5" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="14.15.1"/>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer
  see https://bugs.ghostscript.com/show_bug.cgi?id=697459
  (bsc#1032230)
- CVE-2017-9612.patch fixes DoS in Ins_IP function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698026
  (bsc#1050891)
- CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP
  see http://bugs.ghostscript.com/show_bug.cgi?id=698055
  (bsc#1050889)
- CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function
  see http://bugs.ghostscript.com/show_bug.cgi?id=698056
  (bsc#1050888)
- CVE-2017-9739.patch fixes DoS in Ins_JMPR function
  see https://bugs.ghostscript.com/show_bug.cgi?id=698063
  (bsc#1050887)
- CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr()
  (bsc#1051184)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516622400">- Update CVE-2016-10317.patch to final upstream patch,
  required another commit which has been sqashed in
- CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array
  see https://bugs.ghostscript.com/show_bug.cgi?id=697985
  (bsc#1050879)</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1537272000">- The following patches are no longer needed
  because the issues are fixed in the upstream sources:
  CVE-2016-10317.patch
  CVE-2016-9601.patch
  CVE-2017-11714.patch
  CVE-2017-9612.patch
  CVE-2017-9726.patch
  CVE-2017-9727.patch
  CVE-2017-9739.patch
  CVE-2017-9835.patch
  0001-Fix-locksafe.patch
  fix-mutex-crash.patch</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="5ebf6b7e2ea686e5e498dd7dfde8bf666ef4d221f620f6f881d7f813caccc50a" name="gifsicle" arch="src">
  <version epoch="0" ver="1.91" rel="5.1"/>
  <changelog author="manfred99@gmx.ch" date="1452772800">- rpm packaging for OBS</changelog>
  <changelog author="manfred99@gmx.ch" date="1453464000">- update license indication in the spec file: it is GPL-2.0 (only)</changelog>
  <changelog author="mpluskal@suse.com" date="1453636800">- Use macro for configure
- Use correct obsoletes/provides</changelog>
  <changelog author="manfred99@gmx.ch" date="1475064000">- add fix-escapes-in-info-mode.patch:
  upstream fix for github issue #75, commit 2eff5e69e78b9fb28840508e8fc723be115a0167</changelog>
  <changelog author="manfred99@gmx.ch" date="1475064001">- add coverity.patch:
  upstream fix, commit f679917e8290804ea9ba2d954aedf9caa7e5f142
- add coverity2.patch:
  upstream fix, commit 9ca87d7b1f24e01d30eb41b2304b96131f6c3b53</changelog>
  <changelog author="manfred99@gmx.ch" date="1491825600">- add document-no-conserve-memory.patch:
  upstream fix, commit f27a90731ef1152a106612c4293622736e20e6f8
- fix-out-of-bound.patch:
  upstream fix, commit 1a29f8f5a0e19a2c671eea3604bb43ad0de8c467</changelog>
  <changelog author="manfred99@gmx.ch" date="1492776000">- add no_status-1_when_valid_output.patch:
  upstream fix, commit 0e02f7b62a9a3a344c34f92ddb7e178ad3b3e3ff
- add fix_ignore-errors_and_merge_mode.patch:
  upstream fix, commit 62110e4392230a7e49c339173ee41128ba4ccea9</changelog>
  <changelog author="manfred99@gmx.ch" date="1498305600">- add initialize_missing_image.patch:
    upstream fix, first hunk of commit a0a365136f44e5519f7f486b00a67387f641d0e8
- add correct_zero-element_colormaps.patch:
    upstream fix, commit 1638a43201436f796bdf46d33b87468c089e90b8</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove market survey from description.</changelog>
  <changelog author="manfred99@gmx.ch" date="1502625600">- use spec description of the in-tree spec file.
- add fix_use-after-free.patch:
    upstream fix, commit 81fd7823f6d9c85ab598bc850e40382068361185
- drop following patches:
  * fix-escapes-in-info-mode.patch
  * coverity.patch
  * coverity2.patch
  * document-no-conserve-memory.patch
  * fix-out-of-bound.patch
  * no_status-1_when_valid_output.patch
  * fix_ignore-errors_and_merge_mode.patch
  * initialize_missing_image.patch
  * correct_zero-element_colormaps.patch
- upgrade to version 1.89:
  * Add SIMD support for resizing. When enabled this improves resize
    performance enormously for complex resize methods.
  * Add thread support for resizing. `-j[NTHREADS]` tells gifsicle to use
    up to NTHREADS threads to resize an input image. There are several
    caveats---multiple threads can be only used on unoptimized images.
    Thanks to Github user @wilkesybear.
  * Quashed several crashes and undefined behaviors. Thanks to Github users
    including @pornel, @strazzere, and @b0b0505.
  * Minor bug fixes.</changelog>
  <changelog author="manfred99@gmx.ch" date="1502712000">- drop SLE 11 support in spec file</changelog>
  <changelog author="manfred99@gmx.ch" date="1503057600">- drop patch fix_use-after-free.patch
- upgrade to version 1.90:
  * Kill a use-after-free error reported by @junxzm1990.</changelog>
  <changelog author="manfred99@gmx.ch" date="1506513600">- add fix-null-deref.patch:
    upstream fix, commit f1b8e6323a8fdd029847b7efd400d5fc2ac9aecc</changelog>
  <changelog author="manfred99@gmx.ch" date="1514980800">- add fix_double-free.patch:
    upstream fix, commit 118a46090c50829dc543179019e6140e1235f909
- add fix_gifdiff_null-deref.patch:
    upstream fix, commit 263cd4519f45bc6ecde74ee280eb1d68ee2de642</changelog>
  <changelog author="manfred99@gmx.ch" date="1515153600">- drop patches fix_double-free.patch, fix_gifdiff_null-deref.patch
    and fix-null-deref.patch
- upgrade to version 1.91:
  * Several security bug fixes with malicious GIFs.</changelog>
</package>
<package pkgid="151fb3e503fc1d45ae5bf76b8b900d891e017a0bea15579427d723f8221cc0f7" name="gifsicle" arch="x86_64">
  <version epoch="0" ver="1.91" rel="5.1"/>
  <changelog author="manfred99@gmx.ch" date="1452772800">- rpm packaging for OBS</changelog>
  <changelog author="manfred99@gmx.ch" date="1453464000">- update license indication in the spec file: it is GPL-2.0 (only)</changelog>
  <changelog author="mpluskal@suse.com" date="1453636800">- Use macro for configure
- Use correct obsoletes/provides</changelog>
  <changelog author="manfred99@gmx.ch" date="1475064000">- add fix-escapes-in-info-mode.patch:
  upstream fix for github issue #75, commit 2eff5e69e78b9fb28840508e8fc723be115a0167</changelog>
  <changelog author="manfred99@gmx.ch" date="1475064001">- add coverity.patch:
  upstream fix, commit f679917e8290804ea9ba2d954aedf9caa7e5f142
- add coverity2.patch:
  upstream fix, commit 9ca87d7b1f24e01d30eb41b2304b96131f6c3b53</changelog>
  <changelog author="manfred99@gmx.ch" date="1491825600">- add document-no-conserve-memory.patch:
  upstream fix, commit f27a90731ef1152a106612c4293622736e20e6f8
- fix-out-of-bound.patch:
  upstream fix, commit 1a29f8f5a0e19a2c671eea3604bb43ad0de8c467</changelog>
  <changelog author="manfred99@gmx.ch" date="1492776000">- add no_status-1_when_valid_output.patch:
  upstream fix, commit 0e02f7b62a9a3a344c34f92ddb7e178ad3b3e3ff
- add fix_ignore-errors_and_merge_mode.patch:
  upstream fix, commit 62110e4392230a7e49c339173ee41128ba4ccea9</changelog>
  <changelog author="manfred99@gmx.ch" date="1498305600">- add initialize_missing_image.patch:
    upstream fix, first hunk of commit a0a365136f44e5519f7f486b00a67387f641d0e8
- add correct_zero-element_colormaps.patch:
    upstream fix, commit 1638a43201436f796bdf46d33b87468c089e90b8</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove market survey from description.</changelog>
  <changelog author="manfred99@gmx.ch" date="1502625600">- use spec description of the in-tree spec file.
- add fix_use-after-free.patch:
    upstream fix, commit 81fd7823f6d9c85ab598bc850e40382068361185
- drop following patches:
  * fix-escapes-in-info-mode.patch
  * coverity.patch
  * coverity2.patch
  * document-no-conserve-memory.patch
  * fix-out-of-bound.patch
  * no_status-1_when_valid_output.patch
  * fix_ignore-errors_and_merge_mode.patch
  * initialize_missing_image.patch
  * correct_zero-element_colormaps.patch
- upgrade to version 1.89:
  * Add SIMD support for resizing. When enabled this improves resize
    performance enormously for complex resize methods.
  * Add thread support for resizing. `-j[NTHREADS]` tells gifsicle to use
    up to NTHREADS threads to resize an input image. There are several
    caveats---multiple threads can be only used on unoptimized images.
    Thanks to Github user @wilkesybear.
  * Quashed several crashes and undefined behaviors. Thanks to Github users
    including @pornel, @strazzere, and @b0b0505.
  * Minor bug fixes.</changelog>
  <changelog author="manfred99@gmx.ch" date="1502712000">- drop SLE 11 support in spec file</changelog>
  <changelog author="manfred99@gmx.ch" date="1503057600">- drop patch fix_use-after-free.patch
- upgrade to version 1.90:
  * Kill a use-after-free error reported by @junxzm1990.</changelog>
  <changelog author="manfred99@gmx.ch" date="1506513600">- add fix-null-deref.patch:
    upstream fix, commit f1b8e6323a8fdd029847b7efd400d5fc2ac9aecc</changelog>
  <changelog author="manfred99@gmx.ch" date="1514980800">- add fix_double-free.patch:
    upstream fix, commit 118a46090c50829dc543179019e6140e1235f909
- add fix_gifdiff_null-deref.patch:
    upstream fix, commit 263cd4519f45bc6ecde74ee280eb1d68ee2de642</changelog>
  <changelog author="manfred99@gmx.ch" date="1515153600">- drop patches fix_double-free.patch, fix_gifdiff_null-deref.patch
    and fix-null-deref.patch
- upgrade to version 1.91:
  * Several security bug fixes with malicious GIFs.</changelog>
</package>
<package pkgid="9daad8698c50cd18a7f7e71dc0575a6ad95a38a2ccb4587fa888b76682909107" name="gimp" arch="src">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="58cd8b5734442533aab7f11148bc9a7795f01c8775c53dcd1844ccc92ab338a5" name="gimp" arch="x86_64">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="637c1a84072e412a5e5cacb8d4a185dc7ead8dc138de9a1d644bcef8e76567c7" name="gimp-devel" arch="x86_64">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="81f583ab57c5f78404adbd9bcae20407c64087cbca1a08247495900ed9379a0c" name="gimp-lang" arch="noarch">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="6f37dad8ed58396385cc317591c4d58c953ac26d333b4c3bb41233f0aeb5a471" name="gimp-plugin-aa" arch="x86_64">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="d56f2bed6e23072c261b7e9fb3d601c914dec411a8595ac16910083389dd563e" name="gimp-plugins-python" arch="x86_64">
  <version epoch="0" ver="2.8.18" rel="6.3"/>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Correctly version librsvg-devel BuildRequires: 2.36.0 is needed.
  We don't version the BuildRequires on 12.1 and earlier to avoid
  useless unresolvables; it will just result in file-svg plugin not
  being built when librsvg is not recent enough there.</changelog>
  <changelog author="vuntz@opensuse.org" date="1340625600">- Add gimp-CVE-2012-3236.patch: fix crash in file handling for fit
  files. Fix CVE-2012-3236, bnc#768376.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 2.8.2:
  + Core:
  - Make tag matching always case-insensitive
  - Let the tile-cache-size default to half the physical memory
  + GUI:
  - Mention that the image was exported in the close warning
    dialog
  - Make sure popup windows appear on top on OSX
  - Allow file opening by dropping to the OSX dock
  - Fix the visibility logic of the export/overwrite menu items
  - Remove all "Use GEGL" menu items, they only add bugs and zero
    function
  - Improve performance of display filters, especially color
    management
  - Fix the image window title to comply with the save/export
    spec and use the same image name everywhere, not only in the
    title
  - Fix positioning of pasted/dropped stuff to be more reasonable
  + Libgimp:
  - Move gimpdir and thumbnails to proper locations on OSX
  - Implement relocation on OSX
  - Allow to use $(gimp_installation_dir) in config files
  + Plug-ins:
  - Fix remembering of JPEG load/save defaults
  - Revive the page setup dialog on Windows
  + Source and build system:
  - Add Windows installer infrastructure
  - Add infrastructure to build GIMP.app on OSX
  + General:
  - Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-3236.patch: fixed upstream.
- Clean spec-file using spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add gimp-CVE-2012-5576.patch: fix memory corruption vulnerability
  when reading XWD files (bnc#791372, bgo#687392, CVE-2012-5576).</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 2.8.4:
  + Core:
  - Move the OSX gimpdir to "~/Library/Application Support".
  + GUI:
  - Better names for the default filters in save and export
  - Make tool drawing (esp. the brush outline) much more
    responsive
  - Remember the "maximized" state across sessions
  - Simplify the splash image code a lot, makes it appear
    immediately again
  - Allow the text tool to start on an image without layers
  - Various fixes for text style attribute handling
  - Set unconfigured input devices to eraser if GTK+ says they
    are erasers
  - Make language selectable in Preferences on OSX
  + Libgimp:
  - Make libgimp drawable combo boxes aware of layer groups
  - Make sure plug-in windows appear on top on OSX
  - Fix item width in GimpPageSelector (used e.g. in PDF import)
  + Plug-ins:
  - Better default values in the Drop Shadow script
  - Fix a whole bunch of bugs in the BMP plug-in
  - On OSX, use the system's screenshot utility
  + Installer:
  - Add Brazilian-Portuguese translation to the Windows installer
  + Source and build system:
  - Many improvements to the OSX bundle build system
  - Support automake 1.13
  + General: Lots of bug fixes
  + Updated translations.
- Drop gimp-CVE-2012-5576.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.8.6:
  + Core:
  - Fix saving to URIs, it was broken to only allow exporting,
    and fix save/export of compressed files.
  - Fix brush spacing for drawing in any direction.
  - Increase the maximum size of clipboard brushes and patterns
    to 1024x1024.
  - Make sure data objects are saved when only their name was
    changed.
  + GUI:
  - Don't allow single-window docks to shrink smaller than their
    requisition.
  - Make sure a single-window's right docks keep their size
    across sessions.
  - Allow to change the spacing of non-generated brushes again.
  - In single-window mode, make Escape move the focus to the
    canvas, and beep if the focus is already there.
  - Be smarter about unavailable fonts, and don't crash.
  - Make clicking the single-window's close button quit GIMP.
  - Make view-close (Ctrl+W) only close image windows and tabs,
    not docks.
  + Libgimp: Add SIGNED_ROUND() which also rounds negative values
    correctly.
  + Plug-ins:
  - Make GIMP_PLUGIN_DEBUG work again after GLib changed logging.
  - Fix zealous crop for transparent borders.
  + Installer: Add Hungarian translation.
  + Data: Add a default "Color from Gradient" dynamics and tool
    preset.
  + General: Lots of bug fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376913600">- Drop branding-upstream subpackage: starting with openSUSE 13.1,
  we will no longer replace the gimp splashcreen with a branded
  version. This in order to maintain the identity of gimp.
- Remove gimp-branding Requires.
- Obsolete gimp-branding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 2.8.8:
  + General:
  - Fix lots of places to use GIO to get proper file sizes and
    times on windows.
  - Add an AppData file for GIMP.
  - Backport lcms2 support from master, because lcms1 is not
    getting bug fixes any longer.
  - Lots of bug fixes.
  + Core:
  - Make sure indexed images always have a colormap.
  - Fix language selection via preferences on Windows.
  - Don't crash on setting a large text size.
  + GUI:
  - Keep the same image active when switching between MWM and
    SWM.
  - Make sure all dockables are properly resizable (particularly
    shrinkable).
  - Add links to jump directly to Save/Export from the
    Export/Save file extension warning dialogs.
  + Libgimp: Fix GimpPickButton on OSX.
  + Plug-ins:
  - Properly document plug-in-autocrop-layer's PDB interface.
  - Fix importing of indexed BMPs.
  + Updated translations.
- Split out ASCII-Art plugin in subpackage gimp-plugin-aa. The
  package supplements gimp and libaa1, so any user having both
  installed will get the plugin as well (bnc#851509).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385899200">- Update to version 2.8.10:
  + Core:
  - Set manifest as Windows 8 compatible.
  + GUI:
  - Indicate if a file was exported in the Quit dialog.
  - Add shortcuts and hint labels to the close and quit dialogs
    that make closing and quitting easier and more consistent.
  - Rename the File-&gt;Export menu labels to match Save/Save as.
  - Fix keyboard shortcuts on OSX Mavericks.
  - Don't open lots of progress popups when opening many files.
  - Correctly restore the hidden state of docks in single window
    mode.
  + Libgimp:
  - Fix exporting an image consisting of a single layer group.
  - Don't attempt to pick transparent colors.
  + Plug-ins: Fix crash in LCMS plugin if RGB profile was missing.
  + General:
  - Fix compile on NetBSD (missing -lexecinfo).
  - Bug fixes.
  + Updated translations.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Add gimp-use-recommended-freetype-include.patch:
  Freetype upstream recommends using their macros together with
  ft2build include. Positive sideeffect is that this patch makes
  it build with both freetype2 2.5.1, and older versions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1411214400">- update to version 2.8.14:
  + Fix libtool versioning (forgot to bump gimp_interface_age).
- Changes from Version 2.8.12:
  + Core:
  - Fix brush sizes when used from plug-ins.
  - Make XCF loading more robust against broken files.
  + GUI:
  - Make sure the widget direction matches the GUI language.
  - Remove the option to disable the warning when closing a
    modified image.
  - Fix canvas overlay widgets (like the text options) for
    tablets.
  - Make DND work between images in one dockable.
  + Libgimp: Make gimp_image_get_name() return the string used for
    the image title.
  + Plug-ins:
  - Make script-fu-server more secure by listening to 127.0.0.1
    by default and add a warning about changing that IP. This
    breaks the procedure's API, but for security reasons.
  - Bring back proper script-fu translations.
  + General:
  - Add Jenkins tutorial.
  - Documentation updates.
  - Bug fixes.
  + Updated translations.
- Drop gimp-use-recommended-freetype-include.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Replace liblcms-devel BuildRequires with pkgconfig(lcms2): gimp
  has been ported to lcms2 since version 2.8.8.</changelog>
  <changelog author="plinnell@opensuse.org" date="1448712000">- update to version 2.8.16
- fix a couple of rpmlint warnings
  +Core:
  - Seek much less when writing XCF
  - Don't seek past the end of the file when writing XCF
  - Windows: call SetDLLDirectory() for less DLL hell
  - Fix velocity parameter on .GIH brushes
  - Fix brokenness while transforming certain sets of linked layers
  +GUI:
  - Always show image tabs in single window mode
  - Fix switching of dock tabs by DND hovering
  - Don't make the scroll area for tags too small
  - Fixed a crash in the save dialog
  - Fix issue where ruler updates made things very slow on Windows
  +Plug-ins:
  - Fix several issues in the BMP plug-in
  - Make Gfig work with the new brush size behavior again
  - Fix font export in the PDF plug-in
  - Support layer groups in OpenRaster files
  - Fix loading of PSD files with layer groups
  + General:
  - OSX build system fixes
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="plinnell@opensuse.org" date="1449316800">- Explcitly declare the libgimp version in Requires, so upgrades
  bring in the updated libraries as well. Makes the upgrade from
  2.8.x &gt; 2.8.16 seamless and avoids an error on start.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466683200">- Fix CVE-2016-4994 (boo#986021, bgo#767873):
  + Add gimp-Multiple-Use-After-Free.patch: Multiple Use-After-Free
    when parsing XCF channel and layer properties.</changelog>
  <changelog author="plinnell@opensuse.org" date="1469966400">- update to 2.8.18
- Drop gimp-Multiple-Use-After-Free.patch - upstreamed
  +Core:
  - Initialize fontconfig cache in separate thread to keep GUI
  responsive on first startup
  - Properly recognize layer masks as deactivated, e.g. for moving layers
  - Create $XDG_DATA_HOME if it doesn't exist
  - (CVE-2016-4994) Multiple Use-After-Free when parsing XCF channel
  and layer properties
  - Fix progress access to prevent crash on rapid sequence of commands
  - Fix crash in gimp-gradient-segment-range-move
  +GUI:
  - Disable color picker buttons on OS X to prevent a GUI lockup
  - Disable "new-style" full-screen mode on OS X to prevent a crash
  - Pulsing progress bar in splash screen to indicate unknown durations
  - Fix gamut warning color for lcms display filter
  - Fix unbolding of bold font on edit
  - Prevent accidental renaming of wrong adjacent item
  +Installer:
  - Change compression settings to decrease size by 20%
  - Add Catalan, Danish, French, Dutch
  +Plug-ins:
  - Fix crash on sRGB JPEG image drag &amp; drop
  - Fix ambiguous octal-escaped output of c-source
  - Fix KISS CEL export
  - Fix progress bar for file-compressor
  - Make Script-Fu regex match return proper character indexes for
  Unicode characters
  - Fix Script-Fu modulo for large numbers
  +General:
  - Documentation updates
  - Bug fixes
  - Translation updates</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Add gimp-bgo773233-CVE-2007-3126.patch: Gimp 2.3.14 allows
  context-dependent attackers to cause a denial of service (crash)
  via an ICO file with an InfoHeader containing a Height of zero
  (bgo#773233, CVE-2007-3126, bsc#1032241).
- Add gimp-fix-PDF-Import-filter-crash.patch: Fix a crash in PDF
  Import filter when importing large image PDF or specifying high
  resolution (bgo#593576).</changelog>
  <changelog author="alarrosa@suse.com" date="1491220800">- Add use-lcms2.diff to prefer lcms2 over lcms1 if both are available
  (lcms1 is pulled by libmng-devel) (bsc#1025717)</changelog>
  <changelog author="federico@suse.com" date="1498219200">- Don't build with webkit1, as it is no longer maintained and has
  plenty of security bugs.  This disables the GIMP's built-in help
  browser; it will use an external browser when configured this way.
  This works around a number of security vulnerabilities in Webkit1:
  https://bugzilla.suse.com/show_bug.cgi?id=923223
  https://bugzilla.suse.com/show_bug.cgi?id=906375
  https://bugzilla.suse.com/show_bug.cgi?id=906374
  https://bugzilla.suse.com/show_bug.cgi?id=906373
  https://bugzilla.suse.com/show_bug.cgi?id=1034856
  https://bugzilla.suse.com/show_bug.cgi?id=871792
  https://bugzilla.suse.com/show_bug.cgi?id=879607
  https://bugzilla.suse.com/show_bug.cgi?id=892084</changelog>
</package>
<package pkgid="1238fa535b463df15d639f75ae491fd469e3027ab2bd81e741bd18e252fcd1d1" name="git" arch="src">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="39b5e9cf432f06486432aebf7bb9bb71f973ee2a419a1348175fb957faaa9a3a" name="git" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="41d72a33af8753ad7bb87a7e535223913d0a117e71e58d8e91f3ddf615f98d4c" name="git" arch="src">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="9e694b957a0a7a0347f41a8e8059d0a80327fea74d7ebb15b21b97954681a1ed" name="git" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="d674cf5ec9e54107bd920af9a3c8d9cb6d01c064e08253ea57ebbad9946f0d27" name="git" arch="src">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="e474fca9d04a27f9e2fd2e57bc3a40d3b316d0e1c21fb8991f5eb85f16f1e7b7" name="git" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="6e2a61a2906e2ee652843db599828c712dc6b7ad1c137f07639f7c5f90e9a5df" name="git" arch="src">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="263e7320f51c3d3e9d72cf9ba42c7fc2a628e08060a4dfbe257db04601c15d3a" name="git" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="8895ad49792925e6b25cd1c7e172e8ac8df83fb26e65825446169c353b425602" name="git" arch="src">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="869a639afb937281516e6f13cf926e37ca2eeccc56212e6b658346170205c6b8" name="git" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="b48a4ae76b2cb541af08a198df858a9b8012ec510d65aeda4c83f393b6140c56" name="git-annex" arch="src">
  <version epoch="0" ver="6.20170818" rel="3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
  <changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
</package>
<package pkgid="066e41374acedcd8de8003080d5ac282710cd831d1eaed039260f877d1a0bc3e" name="git-annex" arch="x86_64">
  <version epoch="0" ver="6.20170818" rel="3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
  <changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
</package>
<package pkgid="0c6e79ebbef2f19c05e45df5b56c5d3bfbb5467c28df26f3513849f9070b9f9b" name="git-annex" arch="src">
  <version epoch="0" ver="6.20180626" rel="8.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="a35e31c1904208b42658a5fa73467b7fd6739f3f09107cf1879edd01df3f007e" name="git-annex" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="8.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="96b8cc650b5010d35126633571be6a38a949378bde0fb4e8d892d8f7760afc25" name="git-annex-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.20170818" rel="3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
  <changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
</package>
<package pkgid="1a300b9ec5077539f1a91fd69375b00291736839797c14b5e5f2052f3b3b48d7" name="git-annex-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="8.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="5d75593add9047d5eba60db9d4b2103209c93d117ae517b942c9b8a328b6e5bf" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="af06769fa44b92b17135238bac8a2bddb6d30f7e37e037f9ddb0038955319fcf" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="9f6e171e66699d31dd3efc2802d126986b59aa0b2df5fde78c26b35c692495fa" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="03f5f0d7e129f4e29d88a74cb55190a71ee473c304a3ac5cf0c1b79372da06dd" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="c3a23acf15c08359272338e3dfa21f8f81d722abdb4686a6129e83c66b96873e" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="25285390f7f322d517ede219f1627ee21e1cd01d52a7477d9009a4691c6bfc84" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="4adef9323e8a7667614ca419bbadfbf5b9701ea8fc4f670ac5a82f44d0c9a0df" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="b6b48c87b75e7d6bf55eb397aa37611a9ea0f77766d7608ccb15ba77ae8f4d8c" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="0bb621444814bbd4392026a022b132ece63c5327d427aaf4042959aa4c5e11f2" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="758a597691692632e87f0db462dc81192fe53f61afcbbf6dfa8b7dc07709b458" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="92ec454fcf64a91a827fec0890b1470bf1f3cd28992149ba52746c7d8a7cd6ec" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="fd584add6072be00310c1dbe281280ab492c5e85cbfa85998e88b143064d9e8f" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="6bfcd9a28516597d8b25335e05066344617fac6d9348f117d43298cd4d46aaa5" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="21f9c5f026fd4fbb7e6a96355a4993988b3796564294a73fe54cc0fa4d10d74c" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="26383651a18ff8cbc1c66d69f18a5af06d4351107cb21747ec71c4c0c38606e1" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="57e1c7bea23269a7f5a1a49ced246a97c1f3eab6d79528a9746925a05cec32d9" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="477eafa887ce925df9725b3a6a900a6579f96b3aeebb3b4ebe16278a428cc309" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="1d84b6bd268ef2a122fcc9cc58e2e5bd911f4f0f03c6d3b23c07c16b3250b706" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="0ee4144aec2aff2791cbe09265d11b0d19458be71ad8c6ac4e2130f734ef0fd1" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="b48defec7df750bcc8fa31c1b2d4c73a48e374a086b9e9135acf9b52502bf00f" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="bb268b962af8f2cd43beb3045f7b0e9e8bb07b570faefc49fa8a5b7afcc54b42" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="de65cd891483b68e2284d4c23e0d8d226f5f05b0b7ca5a018c9e28c7450c0593" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="ef62188d3e87ad04c79ed7f5284c08daaa577aa8e71b14b6ebefe34730e013b8" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="0fe09cfee70c942ddbe1880e31d9ce9656662f2a0ca4362e25ae5f2fb925b55f" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="1c9999176472e2de3c2d207caf4d6740e62addbc085adf0e70fc0664297a29a9" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="7462b4c8727a673ba3a0511391a6b6ffc056d46b0861f97678aab58f6edaff39" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="a01e46b529c094e7bfae1eb897adb7493ec527adc9e5e85db4cfb318d2816f96" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="0b620889d88166963f4c2ebc4b913183398a0eeea5b4010470d51658bd01b995" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="b6814830e5d3496f3184b206ad4ad342f53b810462779e0957ae6618ddd583c9" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="d5993a5f8925938ddd256d8d42d3210ee15e44a09e584e0557265e5c37f2bad1" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="775d74cf20c00c561ca4b0a4d223e65c82e9e4b67be769c3ddc98a587cb997c9" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="8507ba57f82d21206300b2b8847735f97ee9078efd5bccd409337f01c3f76bcb" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="8d99c126993a8a2b10834a8379aba64e68864a250900aec0f0284bf79bcc9d57" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="4c8c9308734b08c0a725ff9a2db9a0442faa1c90e24249c8672ff5b0c05c077b" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7b09cd23ed0a349cda60b1c75c3808a39f8f6340684cd05ba9aaafa1c3f0b99e" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="1209c7f67dafb73545cb64bc75cdf8eabf2935c1341e9c7a577e6712c8813d05" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="929374b86fcb3c9dc9035a1b315afe2374ab8a93a730f1c184a973f12dcb7b12" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="15dfd77525dce88d52852afe62ee1f8922ac2b7bc08fe0ae419ebcd590659f63" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="7d966a8d4b90936ce63b03515101bb8cb30ab140d4b02a744abcb398a691b418" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="201457b15c8bf519e3c8c4a0b649fefc22206e2a792f28f3c0f9ac532d93dc45" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="0c5c0f5ce32a2e7f2a04f7902e7f1601ac7a804634719371448b52cd04c41545" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="e4ea66d6917d9589215642e61e1d99a88ba6ca8b192c5cfa493c3b69d5da838d" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="2f9930e131f54b4caaee4bc571020223207c3550cbf9b1cf81e2d8df058bb6ae" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="607ef798f08e9218eb88c2c6a8d77e667d14a0ff90060c6ec144075dcdaf34c5" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="8cb79cff222f906f523a5355c7988a7191145757fd9abf05a78683b4e1c1a76b" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="c3dbcbd3b2c9e18b06637c2fcb9bb9231b5f89fb0478d001db90146e773bf3a2" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="44d5190a95b17de247877c9fadc1e7e34244e08824f1e2fc51d76acc55799e8a" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="849a87dbfe8f4d4c5762def1a40ccd272f2e3c5d88e24f94466d749164d6d16d" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="4b39b1476b027fea8b666fcc462697414e34f9d9e917829b03add04fa7a390d9" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="ec91056da8b157056297acb42198c490a8e80794b82c21f9d90956a11f196445" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="6638d7adbefe3c9761f0827d4ee6c270c56e85b021af1dd99ed2de7b3eadd976" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.13.5" rel="3.1"/>
  <changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
</package>
<package pkgid="1ce9f6fa6bb077918ca26d41036a140105812ad627d54443a1e47bab2b59bde4" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="10.1"/>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
</package>
<package pkgid="7373d1aa76a0134ca67a2268d2362e68fe1c6318a39d610b9ee3f432ff231a88" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="7.1"/>
  <changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
  <changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
</package>
<package pkgid="11ce1a8557740d2a4f0a73d9299d95349e8bded528a8459e4d1ad107fe2bae1a" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="13.1"/>
  <changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="e468a6235840d3f8c44d937c60fe7ce2553c97ff3fb26f936eff42e4e1d82497" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.13.7" rel="16.1"/>
  <changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
  <changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
  <changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1488024000">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
  <changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
  <changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
  <changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
  <changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
  <changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
  <changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
  <changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="tiwai@suse.de" date="1523016000">- Fix mishandling layers of tree objects, which allows remote
  attackers to cause DoS a crafted repository, aka a Git bomb
  (CVE-2017-15298, bsc#1063412):
  git-CVE-2017-15298.patch</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.13.7: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="a17f2cafa077c95a3cf5f72615f1ea1a0d8d9b93f2c24b83fa431bc3bf426cfb" name="gitolite" arch="noarch">
  <version epoch="0" ver="3.6.11" rel="4.6.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
  <changelog author="chris@computersalat.de" date="1547467200">- update to 3.6.11
  - fix for boo#1121570 (CVE-2018-20683)
    security issue in 'rsync' (bundle helper); see commit 5df2b81 for more
- update to 3.6.10
  - fix up boo-boo caused by previous release; see mails on list for details</changelog>
</package>
<package pkgid="45bc6576f62cefae7264acc415b044f94ca41600c581eef0be83190771d568da" name="gitolite" arch="src">
  <version epoch="0" ver="3.6.11" rel="4.6.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
  <changelog author="chris@computersalat.de" date="1547467200">- update to 3.6.11
  - fix for boo#1121570 (CVE-2018-20683)
    security issue in 'rsync' (bundle helper); see commit 5df2b81 for more
- update to 3.6.10
  - fix up boo-boo caused by previous release; see mails on list for details</changelog>
</package>
<package pkgid="cf4586bf25c20a06866463d3b2a134bc87a7d08fbbbef71c4499bd70c090e2fc" name="gitolite" arch="noarch">
  <version epoch="0" ver="3.6.9" rel="4.3.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
</package>
<package pkgid="c0d767f43078d68a0717f92dc9aed2b614b555171a740101e01cc410e273f9aa" name="gitolite" arch="src">
  <version epoch="0" ver="3.6.9" rel="4.3.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
</package>
<package pkgid="bc132a6ec36c412da198ef2cf56bbcccd101dc5703bcb860acc824b99b83bc91" name="gjs" arch="src">
  <version epoch="0" ver="1.45.4" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.37.6:
  + stack: Add BeginRequest / EndRequest.
  + context: Turn on type inference.
  + configure: Remove HAVE_JS_CLASS_TRACE gunk.
  + Bugs fixed: bgo#704343, bgo#704406, bgo#704902, bgo#703826.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.38.0:
  + Console: don't have a NULL program name.
  + Build fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Update to version 1.38.1:
  + Build: Also dist another input file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1384948800">- Update to version 1.39.0:
  + Bugs fixed: bgo#691409, bgo#703440, bgo#707297, bgo#708749,
    bgo#708831, bgo#708915, bgo#708920, bgo#709907, bgo#710697,
    bgo#710875, bgo#710878, bgo#711046, bgo#712242.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390824000">- Update to version 1.39.3:
  + Bugs fixed: bgo#722286, bgo#722285, bgo#705465, bgo#705465,
    bgo#721246, bgo#721246, bgo#721246, bgo#721246, bgo#721246,
    bgo#721246, bgo#721246, bgo#721838, bgo#721355, bgo#721352,
    bgo#720157, bgo#711046, bgo#711046, bgo#711046, bgo#711046,
    bgo#711046, bgo#711046, bgo#711046, bgo#711046, bgo#711046,
    bgo#711046.
- Replace pkgconfig(mozjs-17.0) BuildRequires with
  pkgconfig(mozjs-24), following upstream's switch to MozJS 24.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392811200">- Update to version 1.39.90:
  + Enable coverage reports.
  + Minor bug fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 1.39.91:
  + Implemented fundamental object support (bgo#621716,
    bgo#725061).
  + Fixed GIRepositoryGType prototype (bgo#724925).
  + Moved GObject.prototype.disconnect() to a JS implementation
    (bgo#698283).
  + Added support for enumeration methods (bgo#725143).
  + Added pseudo-classes for fundamental types (bgo#722554).
  + Build fixes (bgo#724853).</changelog>
  <changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 1.40.0:
  + No changes from version 1.39.91.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 1.40.1:
  + Fixed build-time detection of GTK enablement (bgo#727394).
  + Fixed a crash caused by reentrancy in GObject finalizers
    (bgo#725024).
  + Fixed the GIMarshallingTests suite (bgo#728004).
  + Fixed marshalling of GObjects when known by an interface type
    from C to JS (bgo#727824).
  + Some typos and JS style cleanups (bgo#727781, bgo#727786).</changelog>
  <changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 1.41.3:
  + Fixed GObject and Gtk overrides (bgo#727781, bgo#727394).
  + Fixed crashes caused by reentrancy during finalization
    (bgo#725024).
  + Added a wrapper type for cairo regions (bgo#682303).
  + Several cleanups to GC (bgo#725024).
  + Thread-safe structures are now finalized in the background, for
    greater responsiveness (bgo#725024, bgo#730030).
  + A full GC is now scheduled if after executing a piece of JS we
    see that the RSS has grown by over 150% (bgo#725099,
    bgo#728048).
  + ParamSpecs now support methods and static methods implemented
    by glib and exposed by gobject-introspection, in addition to
    the manually bound fields (bgo#725282).
  + Protototypes no longer include static properties or
    constructors (bgo#725282).
  + Misc cleanups and bugfixes: bgo#727786, bgo#725282, bgo#728004,
    bgo#727824.
- Add pkgconfig(cairo-xlib) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1406030400">- Update to version 1.41.4:
  + Fixed memory management of GObject methods that unref their
    instance (bgo#729545).
  + Added a package module implementing the
    https://wiki.gnome.org/Projects/Gjs/Package application
    conventions (bgo#690136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1409572800">- Update to version 1.41.91:
  + Added the ability to disable JS language warnings (bgo#734569).
  + Fixed crashes in PPC (and probably other arches) due to invalid
    callback signatures (bgo#729554).
  + Fixed regressions with dbus 1.8.6 (bgo#735358).
  + Readded file system paths to the default module search, to
    allow custom GI overrides for third party libraries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1411992000">- Update to version 1.42.0:
  + Fix a regression caused by PPC fixes in 1.41.91.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419163200">- Update to version 1.43.3:
  + GTypeClass and GTypeInterface methods, such as
    g_object_class_list_properties(), are now available
    (bgo#700347).
  + Added full automatic support for GTK widget templates
    (bgo#700347, bgo#737661, bgo##739739).
  + Added control of JS Date caches to system module (bgo#739790).
  + Misc bug fixes and memory leak fixes (bgo#738122, bgo#740696,
    bgo#737701).</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Require gjs by the devel package: a user installing the -devel
  package expects the interpreter to also be present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.44.0:
  + Add Lang.Interface and GObject.Interface (bgo#751343,
    bgo#752984).
  + Support callbacks with (transfer full) return types
    (bgo#750286).
  + Add binding for setlocale() (bgo#753072).
  + Improve support to generate code coverage reports (bgo#743009,
    bgo#743007, bgo#742362, bgo#742535, bgo#742797, bgo#742466,
    bgo#751732).
  + Report errors from JS property getters/setters (bgo#730101).
  + Fix crash when garbage collection triggers while inside an init
    function (bgo#742517).
  + Port to CallReceiver/CallArgs (bgo#742249).
  + Misc bug fixes (bgo#736979, bgo#753072, bgo#750688).</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 1.45.3:
  + Support external construction of gjs-defined GObjects
    (bgo#681254).
  + Add new format.printf() API (bgo#689664).
  + Add new API to get the name of a repository (bgo#685413).
  + Add C to JS support for arrays of flat structures (bgo#704842).
  + Add API to specify CSS node name (bgo#758349).
  + Return value of default signal handler for "on_signal_name"
    (bgo#729288).
  + Fix multiple emissions of onOverwrite in Tweener (bgo#597927).
  + Misc bug fixes: bgo#727370, bgo#623330, bgo#667908,
    bgo#757763.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 1.45.4:
  + Release out args before freeing caller-allocated structs
    (bgo#768413).
  + Marshal variable array-typed signal arguments (bgo#761659).
  + Marshal all structs in out arrays correctly (bgo#761658).
  + Call setlocale() before processing arguments (bgo#760424).
  + Build fixes and improvements: bgo#737702, bgo#761072,
    bgo#761366, bgo#765905, bgo#767368.</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="6e8ebe18ceaecff86fcc892d65322272b8441fe17e78ee7dd3a0fa7fd999ac68" name="gjs" arch="x86_64">
  <version epoch="0" ver="1.45.4" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.37.6:
  + stack: Add BeginRequest / EndRequest.
  + context: Turn on type inference.
  + configure: Remove HAVE_JS_CLASS_TRACE gunk.
  + Bugs fixed: bgo#704343, bgo#704406, bgo#704902, bgo#703826.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.38.0:
  + Console: don't have a NULL program name.
  + Build fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Update to version 1.38.1:
  + Build: Also dist another input file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1384948800">- Update to version 1.39.0:
  + Bugs fixed: bgo#691409, bgo#703440, bgo#707297, bgo#708749,
    bgo#708831, bgo#708915, bgo#708920, bgo#709907, bgo#710697,
    bgo#710875, bgo#710878, bgo#711046, bgo#712242.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390824000">- Update to version 1.39.3:
  + Bugs fixed: bgo#722286, bgo#722285, bgo#705465, bgo#705465,
    bgo#721246, bgo#721246, bgo#721246, bgo#721246, bgo#721246,
    bgo#721246, bgo#721246, bgo#721838, bgo#721355, bgo#721352,
    bgo#720157, bgo#711046, bgo#711046, bgo#711046, bgo#711046,
    bgo#711046, bgo#711046, bgo#711046, bgo#711046, bgo#711046,
    bgo#711046.
- Replace pkgconfig(mozjs-17.0) BuildRequires with
  pkgconfig(mozjs-24), following upstream's switch to MozJS 24.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392811200">- Update to version 1.39.90:
  + Enable coverage reports.
  + Minor bug fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 1.39.91:
  + Implemented fundamental object support (bgo#621716,
    bgo#725061).
  + Fixed GIRepositoryGType prototype (bgo#724925).
  + Moved GObject.prototype.disconnect() to a JS implementation
    (bgo#698283).
  + Added support for enumeration methods (bgo#725143).
  + Added pseudo-classes for fundamental types (bgo#722554).
  + Build fixes (bgo#724853).</changelog>
  <changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 1.40.0:
  + No changes from version 1.39.91.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 1.40.1:
  + Fixed build-time detection of GTK enablement (bgo#727394).
  + Fixed a crash caused by reentrancy in GObject finalizers
    (bgo#725024).
  + Fixed the GIMarshallingTests suite (bgo#728004).
  + Fixed marshalling of GObjects when known by an interface type
    from C to JS (bgo#727824).
  + Some typos and JS style cleanups (bgo#727781, bgo#727786).</changelog>
  <changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 1.41.3:
  + Fixed GObject and Gtk overrides (bgo#727781, bgo#727394).
  + Fixed crashes caused by reentrancy during finalization
    (bgo#725024).
  + Added a wrapper type for cairo regions (bgo#682303).
  + Several cleanups to GC (bgo#725024).
  + Thread-safe structures are now finalized in the background, for
    greater responsiveness (bgo#725024, bgo#730030).
  + A full GC is now scheduled if after executing a piece of JS we
    see that the RSS has grown by over 150% (bgo#725099,
    bgo#728048).
  + ParamSpecs now support methods and static methods implemented
    by glib and exposed by gobject-introspection, in addition to
    the manually bound fields (bgo#725282).
  + Protototypes no longer include static properties or
    constructors (bgo#725282).
  + Misc cleanups and bugfixes: bgo#727786, bgo#725282, bgo#728004,
    bgo#727824.
- Add pkgconfig(cairo-xlib) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1406030400">- Update to version 1.41.4:
  + Fixed memory management of GObject methods that unref their
    instance (bgo#729545).
  + Added a package module implementing the
    https://wiki.gnome.org/Projects/Gjs/Package application
    conventions (bgo#690136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1409572800">- Update to version 1.41.91:
  + Added the ability to disable JS language warnings (bgo#734569).
  + Fixed crashes in PPC (and probably other arches) due to invalid
    callback signatures (bgo#729554).
  + Fixed regressions with dbus 1.8.6 (bgo#735358).
  + Readded file system paths to the default module search, to
    allow custom GI overrides for third party libraries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1411992000">- Update to version 1.42.0:
  + Fix a regression caused by PPC fixes in 1.41.91.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419163200">- Update to version 1.43.3:
  + GTypeClass and GTypeInterface methods, such as
    g_object_class_list_properties(), are now available
    (bgo#700347).
  + Added full automatic support for GTK widget templates
    (bgo#700347, bgo#737661, bgo##739739).
  + Added control of JS Date caches to system module (bgo#739790).
  + Misc bug fixes and memory leak fixes (bgo#738122, bgo#740696,
    bgo#737701).</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Require gjs by the devel package: a user installing the -devel
  package expects the interpreter to also be present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.44.0:
  + Add Lang.Interface and GObject.Interface (bgo#751343,
    bgo#752984).
  + Support callbacks with (transfer full) return types
    (bgo#750286).
  + Add binding for setlocale() (bgo#753072).
  + Improve support to generate code coverage reports (bgo#743009,
    bgo#743007, bgo#742362, bgo#742535, bgo#742797, bgo#742466,
    bgo#751732).
  + Report errors from JS property getters/setters (bgo#730101).
  + Fix crash when garbage collection triggers while inside an init
    function (bgo#742517).
  + Port to CallReceiver/CallArgs (bgo#742249).
  + Misc bug fixes (bgo#736979, bgo#753072, bgo#750688).</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 1.45.3:
  + Support external construction of gjs-defined GObjects
    (bgo#681254).
  + Add new format.printf() API (bgo#689664).
  + Add new API to get the name of a repository (bgo#685413).
  + Add C to JS support for arrays of flat structures (bgo#704842).
  + Add API to specify CSS node name (bgo#758349).
  + Return value of default signal handler for "on_signal_name"
    (bgo#729288).
  + Fix multiple emissions of onOverwrite in Tweener (bgo#597927).
  + Misc bug fixes: bgo#727370, bgo#623330, bgo#667908,
    bgo#757763.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 1.45.4:
  + Release out args before freeing caller-allocated structs
    (bgo#768413).
  + Marshal variable array-typed signal arguments (bgo#761659).
  + Marshal all structs in out arrays correctly (bgo#761658).
  + Call setlocale() before processing arguments (bgo#760424).
  + Build fixes and improvements: bgo#737702, bgo#761072,
    bgo#761366, bgo#765905, bgo#767368.</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="66951312201431c1b723f62a6a87cfcb0605fdea90545c22f3d2d3932f3dfe6d" name="gkrellm-cpufreq" arch="src">
  <version epoch="0" ver="0.6.4.1" rel="8.1"/>
  <changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
  <changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
  <changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
  <changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
  <changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- this package was discontinued, please use gkrellm-cpupower
  instead [bsc#1062808]</changelog>
</package>
<package pkgid="40554071ed98aae17b9810c6f409147f73eb1b8a3eabcbbf8ec5f506164bb193" name="gkrellm-cpufreq" arch="x86_64">
  <version epoch="0" ver="0.6.4.1" rel="8.1"/>
  <changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
  <changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
  <changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
  <changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
  <changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
  <changelog author="pgajdos@suse.com" date="1508760000">- this package was discontinued, please use gkrellm-cpupower
  instead [bsc#1062808]</changelog>
</package>
<package pkgid="f5fce1bdbefff4f9bb850475009a962f1f8879a5de15e1a8a89e688f0e2ca96d" name="gkrellm-cpupower" arch="src">
  <version epoch="0" ver="0.2" rel="2.1"/>
  <changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
  <changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
  <changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
  <changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
  <changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- use sources from github:gkrellm2-cpupower/releases [bsc#1062808]
- package renamed to gkrellm-cpupower
- version 0.2</changelog>
</package>
<package pkgid="40e8b04f40dd7f4ede8db119ad4f2d830457d2cbbb317d512d4162e0b278cce9" name="gkrellm-cpupower" arch="x86_64">
  <version epoch="0" ver="0.2" rel="2.1"/>
  <changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
  <changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
  <changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
  <changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
  <changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- use sources from github:gkrellm2-cpupower/releases [bsc#1062808]
- package renamed to gkrellm-cpupower
- version 0.2</changelog>
</package>
<package pkgid="442af118ff0cbb202ace96727945190981541b3a6b75cf01a36c1268e4fd70eb" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.4:
  + EHTMLEditorView:
  - Cannot append text to links if non-breaking space is
    presented.
  - Extra new line added after pressing the Backspace in a list
    item with one character.
  - History can be overwritten when redoing the Return key press
    in an empty list item.
  - Redoing the Return key press in the list can fail.
  - Pressing the Return key in the bulleted list does not end it.
  - Cannot remove an empty bulleted list item with Backspace key.
  - Only change a smiley to plain text when the node is smiley.
  + Enhance workaround for bgo#737949.
  + Add metainfo.xml files for pst-import plugin.
  + Add "Message-&gt;Mailing List-&gt;Copy Message Archive URL" for
    Archived-At header.
  + Bugs fixed: bgo#755743, bgo#759536, bgo#759564, bgo#759584,
    bgo#759665, bgo#760365.
  + Updated translations.
- Split out new package evolution-plugin-pst-import, containing
  the Outlook PST Import plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
</package>
<package pkgid="624630d8cc7ee317aeb3060ac1da30c058948fba75f93803d443b3b0f0263b87" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.22.6" rel="5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + EHTMLEditorView:
  - It's not possible to change formatting from Blockquote to
    list.
  - Some of the Evolution's composer attributes are sent in HTML
    messages.
  - Avoid possible critical warnings when sending HTML messages.
  - Avoid critical warnings when deleting a text smiley.
  - Fragment can be used uninitialized when saving history while
    deleting.
  - Undoing the citation split does not re-wrap and re-quote the
    block.
  - Pressing the Return key in the beginning of list item will
    delete the item.
  - Don't send the empty signature placeholder in the HTML
    messages.
  + EHTMLEditorUtils - prev_parent variable can be used
    uninitialized.
  + EMinicard: Release grab when started drag of the contact.
  + Do not let itip-formatter plugin disable.
  + Use icaltzutil_set_exact_vtimezones_support(), if available.
  + Update the AppData to spec version 0.7+.
  + Add a missing tag to the AppData file.
  + Do not require gnome-common to run autogen.sh.
  + Show composer when processing mailto: only after From account
    is set.
  + Address some compiler warnings.
  + Avoid delay when going online with --force-online command-line
    option.
  + Cancel editing when change notification comes in the Day View.
  + Use UTF-8 default composer-charset, if not set.
  + Bugs fixed: bgo#725320, bgo#758977, bgo#759201, bgo#759474,
    bgo#759618, bgo#759873, bgo#760520, bgo#760563, bgo#760638,
    bgo#760971, bgo#761166, bgo#761346, bgo#761394, bgo#761453,
    bgo#761483, bgo#761496, bgo#761506, bgo#761883.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456747200">- Update to version 3.19.91:
  + Correct typo in the fix for bgo#761883.
  + Pressing the Return key in the image wrapper will duplicate
    the image wrapper structure.
  + EHTMLEditorSelection - Turning off the bold formatting can
    leave unnecessary nodes in the DOM.
  + EHTMLEditorView:
  - List item is deleted when enter is pressed on the end of it.
  - Avoid extra selection save/restore in list manipulation.
  + Bugs fixed: bgo#203026, bgo#579675, bgo#614557, bgo#759101,
    bgo#761159, bgo#761301, bgo#761497, bgo#761596, bgo#761993,
    bgo#762022, bgo#762075, bgo#762205, bgo#762376, bgo#762396.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Update README file.
  + Plain text signature is opened as an HTML one.
  + Some HTML signatures lost line breaks when inserted to the
    composer.
  + EHTMLEditorView - Signature in a message can lost its line
    breaks after sending it.
  + bgo#762759: Crash on start when ~/.cache is not accessible.
  + bgo#762477: Add .desktop file actions to open respective parts.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + bgo#763631: Folder-&gt;Subscriptions opened empty with
    gtk+3.19.11.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1459425600">- Do not pass the option "-N Evolution" to
  %suse_update_desktop_file for evolution.desktop: this has the
  ugly side-effect of changing every Name entry in the .desktop
  file, including those (new to v3.20.0) for desktop actions,
  to Evolution which messes up the desktop item.
- Do not pass the option "-D evolution" to
  %suse_update_desktop_file for evolution.desktop: the specified
  docpath no longer exists; this prevents the following warning
  "suse_update_desktop_file: DocPath target evolution for does not
  exist" during the %install stage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460376000">- Update to version 3.20.1:
  + [EAttachmentTree/IconView]: Setup widgets in 'constructed'
    handler.
  + Remove unneeded runtime warning from
    e-day-view.c::cancel_editing().
  + Vertically center table header text.
  + Make some settings changes in mail composer permanent.
  + Add missing closing double quote, thus webview-print.css is
    actually used.
  + Reposition ECalendar children on timeout, not inside
    size-allocate handler.
  + Cannot change order list to unordered for the first time.
  + Inline images in drafts are not displayed in GMail.
  + EHTMLEditorView:
  - Remove signature from Thunderbird if presented.
  - Correct the new lines handling in quoted content.
  - Avoid variables with the same name in one scope.
  - Don't replace various whitespaces with non-breaking spaces
    when inserting into PRE element.
  - Busy loop after pasting two links after each other in the
    quoted content.
  + EHTMLEditorSelection:
  - Selection could be saved wrong in quoted content.
  - Anchors could be wrongly wrapped in quoted content.
  - Ask for a parent node of the right node.
  + Bugs fixed: bgo#736808, bgo#763796, bgo#764062, bgo#764234,
    bgo#764172, bgo#763723, bgo#764426, bgo#764428, bgo#240130,
    bgo#764542, bgo#762785, bgo#758878.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460548800">- Drop evolution-migrate-kmail-kcontact.patch: merged upstream
  (bgo#731502).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop evolution-bsc930240-a11y-3-12-fixes.patch,
  evolution-bsc930240-a11y-3-16-fixes.patch,
  0001-GalA11yETableColumnHeader-implement-AtkComponent.patch,
  and evolution-drag-text-to-composer.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1461585600">- Drop pkgconfig(geoclue) BuildRequires: evolution stopped
  depending on it in version 3.12.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + Optimize some of the DOM functions related to selection.
  + EMsgComposer: Move the DOM manipulation to EHTMLEditorView.
  + EHTMLEditorActions: 'Select All' action is always disabled.
  + EHTMLEditorView:
  - Deleting a content in a PRE element could wrap the content in
    SPAN element.
  - Moving a Preformatted block one level up in the quoted
    content will change it to Normal.
  - Restore the selection end mark correctly when processing HTML
    to plain text.
  - Redoing a citation split removes an extra text.
  - Simplify and improve how the undo/redo of delete operation in
    quoted content is performed.
  + Recognize special folders for a global mail view also based on
    flags.
  + Rather hide, than disable, items in Taskpad/Memopad context
    menus.
  + Correct placement of emoticon and color chooser in composer
    under Wayland.
  + Bugs fixed: bgo#765090, bgo#765102, bgo#765202, bgo#765446,
    bgo#765665, bgo#765636, bgo#435219, bgo#765950, bgo#766017.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="badshah400@gmail.com" date="1465300800">- Update to version 3.20.3:
  + Fix some issues found by Coverity Scan, cppcheck and clang.
  + Explicitly center attachment bar expander vertically.
  + Avoid NULL dereference in mail-send-recv.c:free_send_data()
    function.
  + EHTMLEditorActions: Paste Quotation action is always active.
  + EHTMLEditorImageDialog: Border and alignment are not set
    properly.
  + EHTMLEditorView: Background image from page is removed when
    saving draft.
  + Bugs fixed: bgo#766540, bgo#766713.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1468238400">- Update to version 3.20.4:
  + Crash under e_mail_folder_find_duplicate_messages_sync().
  + Create new events in the selected calendar in the left tree of
    calendars.
  + When pressing the Return key to end a list a new empty list is
    created.
  + Don't create unnecessary wrappers when quoting a text.
  + Busy-loop when printing specifically formatted HTML message.
  + GalA11yETableItem can have stored incorrect row count
    sometimes.
  + EHTMLEditorActions: Disable HTML actions in plain text mode.
  + EHTMLEditorSelection:
  - List alignment not detected properly.
  - Indented block style could not be set properly.
  - Use a faster way of quoting an element in the plain text
    mode.
  + EHTMLEditorView:
  - Opening a draft that was not created in composer should
    respect the wrap/don't wrap preference.
  - Critical warning could be seen in console after pasting the
    content.
  - Don't leak a WebKitDOMNodeList instance.
  - Pasting content into the indented block will not preserve
    formatting.
  - Don't add a new line for the empty list when generating a
    plain text version of the content.
  - Don't leak a WebKitODMNodeList instance.
  - Always try to process the CID images when loading a content.
  - Correct the situations when the 'Lose formatting' dialog is
    showed.
  - When the content is converted set the editor as changed.
  - Plain text version of draft could lose formatting.
  - Improve how the content is processed to plain text.
  - Correctly remove images and its wrappers.
  - Indented elements should be preserved when switching between
    composer modes.
  - Fix the build after doing a mistake in commits.
  - Redoing a delete operation in a PRE element could wrap the
    content in SPAN element.
  - Some empty new lines in a quoted content could be lost.
  - Don't modify a variable from arguments.
  - Simplify how an element is quoted.
  + Bugs fixed: bgo#767283, bgo#767236, bgo#767334, bgo#767542,
    bgo#767364, bgo#767335, bgo#767780, bgo#767681, bgo#768013,
    bgo#768369.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1470225600">- Add evolution-bgo769062-mouseover-crash.patch: fix crash on
  mouse over task when tasks are grouped (bgo#769062).
- Add evolution-bgo768683-cannot-mark-as-spam.patch: allow marking
  a non-spam message as spam in a junk folder (bgo#768683).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470657600">- Update to version 3.20.5:
  + EComposerPrivate: Changing a top signature to another one will
    place it on different position.
  + EComposerPrivate: Unneeded spacer left when setting a top
    signature from an existing one to None.
  + EHTMLEditorView: Redoing unquoting does not work.
  + Correct order of "assign value" and "call function" when saving
    to drafts.
  + Bugs fixed: bgo#768449, bgo#767283, bgo#769338, bgo#769354,
    bgo#769062, bgo#768683, bgo#769072, bgo#769523, bgo#769288.
- Drop evolution-bgo769062-mouseover-crash.patch and
  evolution-bgo768683-cannot-mark-as-spam.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1482148800">- Add evolution-EPortEntry-too-large.patch
  Fix evolution sending email EPortEntry too large(bgo#764802,
  bsc#1015898).</changelog>
  <changelog author="mgorse@suse.com" date="1486728000">- Add evolution-contact-list-performance.patch: improve
  performance with very large contact lists (bsc#990206
  bgo#774494).</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 3.22.5:
  + Previous signatures with images not sent properly.
  + Fix few memory leaks.
  + e-editor-dom-functions: Do not override variable name from
    parent block.
  + Bugs fixed: bgo#777373, bgo#776391, bgo#775656, bgo#773038,
    bgo#777766, bgo#777818, bgo#778036, bgo#778062, bgo#778347.
  + Updated translations.</changelog>
  <changelog author="federico@suse.com" date="1508241600">- Update to version 3.22.6:
  + [EWeekdayChooser] Selected days drawn with incorrect color.
  + Fix various editor's unit tests.
  + Don't preserve 'Preformatted' format if moving an empty block out
    of the quoted content.
  + Possible crash while refreshing spellcheck.
  + Print the history stack after removing item from it.
  + History could be saved twice if inserting HTML content.
  + Print current EEditorWebExtension method if CAMEL_DEBUG is active.
  + Bugs fixed: bgo#778642, bgo#778541, bgo#779688, bgo#779738
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1520251200">- Add evolution-bsc1049387.patch: fix autoconfig hang for
  @localhost email addresses (bsc#1049387).</changelog>
</package>
<package pkgid="e67dcd89a31becfbe3aa4ce239f6f3099d6926e51f4bb8d72f1bde131e6f7f3f" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="8cd2f0cf3c0cea637f49bf61bae674dff2c7a0db36e53b6c0ae77479a8d4b181" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="c120915c17e76ccf487327c82c16455a700da5b78aa719d41360577f027bbb60" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="bc5f5e94f9a2d0b06d9959637d5b3526114567bd3aaef949129cfa76e26ff831" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="4dd5018863a92436e814fda0e14c089715a39b9e38085ed9a676505f290e783f" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="f989fb7c99c784e942239dd00308a3a16e62360b530baf0efd5299aec29994a8" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="261c67bde3f7b93f78014ddb7e6e369e9f588657a4f8204df5b03e8f1471ec45" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="ab94c628f8f6e4207d2ef430b23947a792901111d9c3045b0911448ff9b47212" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="279e6b0d87566d03dc093673fdf37f9025ca6f85973f1fda6dd572dd204d7c74" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="94a7e5a17d6ed9faa9b10f63c5ef0b9a5da48133b920d06ce3eb5cce209eaef1" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="efd2d52c39509e476cf538f9aba601109341157e1f8f6542dd9b5a783b1a20ee" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="c0427537d51b77611af4dcceaca44c122bf4f5232cc3b0cb7dfb5f8842a3b8fb" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="6a16a1164c180ae3d2067fbed1f8636036e1495261bf83f5f4211c4224d35fca" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="8392eff395a74fa58ff9a67d19334b564b1b824059445dec8f5e855fb33d2286" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="9ed4f94411d23927d2b4547a3155f5bd859b61ed7a1a40b8113e3131754f7d1a" name="glibc" arch="src">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="b9a98226ac94d55b2c65da49541d97e17c5cbc6eb11f041ed30b24d70dbf863d" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="247a7d9b2d4055d3523b3f325821794292979cec8d9ebb55438fc8b1e6a55bc1" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="00fe371b23b06a17ae46f02810d35fad3e50d33cad51faf688e1a988d671459b" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="578232fa7af3ad1ad39510be1f331c7be3bf29ab01320fa45b232cbd84545623" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="b555323e08c47096151eea3a81f0ac6d856852efa6777c352241cafb47823d96" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="1fa5b41bb090f02a4447f36483340d8962cbcb680a4073ae5225a59541e43790" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="fd86bc6266abd2c7d2275a67d8d27a28682974296d19ad4313c8000e3bb496b1" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="564adaf85a58f94c0ae8dc041aa5f02626fabea2d3bca2da64776c96c3406928" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="dbc69a05494b70f5cd072104d895594f038dfa6b40120fe54894dddc4f643cef" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="ef2a3e2c5d89ac6d9e2ea2ece6bbfe1975b300b7f8edbca3fe6e1f37bc3346e1" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="520d39e1231ce07ad1017eb17ab52edec087eed923e8d0c4cb96ac0a0bbb5b0a" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="dc4904aa66b48ffc36bcb80e027df58c13e8f074d054a81f51cc868180d45a87" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="002451b430bc90fae97bf10727319ab2e0d95e7d29ad04f636950d6ac1f74004" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="295a7676656a28e5ede8e602eed0452edb6e672a9f361b62c31fa1fc86d9ee88" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="b4b2c7a99945eaf6c47d4612c264c54e17a19ce2ff0ba9f3e830e3d8d8a12253" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="912e7e2ede6b0fccbbafefc80a5d4e37eb0afcdc351da215aeae904edd03bc4d" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="34478d33ea58d4eb5b115cbfc44a5543a71bc3f43f9674e482d806a0795db150" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="06cdd10bfd9628987bbbaf9ead4aafe9cc3ccefa9e6cbe3b6e407ed72f8c2948" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="dc90f38e42514160f5a2f181a2fca82f0ebfcd0b254fac7c8907c3ff8db57b7e" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="e53f1709f7a8ea58368504168b647bc5d33539e6482f01de85b2ccc423b668ef" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="d20788f7f0f935e51583395b54141905704b14b4e1bdea29cc302a7d279c9b47" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="7abba4947c0fa926ca0f04da45a32d3fd48c3ed9c5a277cc9ea6aed3cfc2f8e7" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="962892efbbd309f758e6971aa54d1160ef2ca628d7f900fa63673947159a55f0" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="4aeb68453c40dddd2c26f2af240326ca63743cb285926d43a3f5e19f7851b5c9" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="8120aa5691c29cd09c512f1da7f5a3689b5be6441d84e759127fbd0b43038054" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="7fc5c01d0ddce25551011c95ab07771a98c1355f698efb01fb6cbc3bcd81635d" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="ca6d85060456d7ef7deac0662c04da006c9a9f22c2401064783d4b0edde2e8d5" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="f9b29c02ae9c1fb2e9907994b8a307fd3446a25acded0d7ec7299717c6101976" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="41609da814335faf41b0384c81f6a9a7da49c8acc0a07080f0e3e40a76302656" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="a6913cd6d36c7b86e2d666b8fe5543f9a29ae7f78649f564dad48f622c62c916" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="ba8d50216567eaeaed85b264234dc727aa067620d9a5151426fda8cae40cdcd7" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="6ec43412c41f273b045b96ccede49cf53cee507c5be9819742a46ca70971ee9d" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="60455688f39efb66f2b5e7aca4492e39a45f83a7c4706db95f94aae015405f47" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="8b953bb2ad89af0a85a0478acf348f36ce4bb099a486c6af885c23efd9b40be3" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="ce04a9292c451c25864159c7172fe77f79afd27510950abc531d6ac37071fe28" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="ddf94aa392523188e8c26e94d8b11a5e811f90ac121cf6cf8e9f943ad7a6ce7c" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="a473a9fb8f579203aa9002bcb945b83590d1b137cdeddf86d7dc9c9bad448d6a" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="cccd70a592fab0f04759b75868334175e2a6896cdd30c59fb872edaa072adb7c" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="ccdc3536a68404b942891542b5cb9332cd5f636f24da91bf3665297b8fe42689" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="cb4f918372a74c7625ddc7fd66522a680ce9660e02285dbcedec1d9beded3934" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="e3df0efe318c737205d5dd777af9b5c033e98b07fdbfec9b6e67cc0070be0cec" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="3bcef95b88847071ab456969a2c5156be154406caf8bef94ceba9d8cd84d5938" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="aa058ec0d4ddff064b607e79cc5b03c338aec5ee6c2036e56a003f45da27c331" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="044fe3e5384fa76105f07e0eae28bf38b4d3cdeb778adf57673e5618da2b06d5" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="3021acf56dca8029f8d45134c145838bc8d1eb44291322f23bb289574fcdbdfb" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="ed2fe3cc8c2e83e5a3c2913ba6e4c2381923171b3ea93cbfccb9e3521e50abb7" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="276c76c9ddb59b50d41939baff571823175a22395715865fd01c83ab6e3bc0c7" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="0b3d991052c15bc234dda03a6f524c23ecd9f6e26987df3cca180bc9f021b227" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="4f6b4d2875b041110e57e8e2e2e39247ca7f4edd1ec61908bfcf851917cb2175" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="d914049a7fca303b031156ca8e897a0580b6e984ee3ce2333708f9d03d2d57ee" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="8f15732f0c0861a67747b4c2b9496b723095e6f6319159ad5f62805eaf0f2cb1" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="5e7c29f6f415ad6323fded7a08aded941e0b6c2bae0aee819e9f6bb6ebf599d2" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="0c889d6da0cbd9981ac1f70c7330b8521bbfc3a38e822bf5193efee5fc1f4328" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="a35e10304dd7af01059eae53dada90b552bac2fd3108e277c5fad9ef16ba61d4" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="e217fc3ff7db12ef263cf454268c1737e5e16354022767690e438b6bbb32b08d" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="7b5578997dd160b9c04f5e955409d2fc9455e8628aa09f7362144bfa65a8f09d" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="64e4ebf6b37ce898d9c0eaa655cc5950f763afa5294a688c4405c7363052dd00" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="b634aeca650e83d25ddfb521d7b1e65b15ff7c6580b3fed7c2505561404443dc" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="b9fb24b5b830fda294bb608a2ec3c063bb5b100c2de661681a4444685d0a887b" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="41e41d113f2fdd57d290a9e1a4806f06738d7747f6d5be28724adfa02010e0b7" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="05469dffb45811fa581c672c0e2b2e2ea49805315a1fdd85a91a28d9c10a0ccb" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="16c008e56981ff5d26ca8884d92d0079cf0f0818638082391e26aaf8550e54b4" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="84e0370d4cbba1eb6df6c6ca466150b7d9db3d296a7c725de772fc29a4651efe" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="f74def72b84d5d3355b7e35e069c9213ebbb702267d275138e53c25216c56a14" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="0371a9f58b154af2f78d252b786e9dcf3d5c3699fcfa935ceed7e59a0492389e" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="e84fbfc95665640848b9067a0f768fd565451ef16353ecf17a4361e225799d3e" name="glibc-testsuite" arch="src">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="2496fa0b458e46cc042aa60c2c7da96ba552f56b990de7b4cf99edf3695193a0" name="glibc-testsuite" arch="src">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="7075d5659f9079e3fbdbccbbf064feec34c643f58349694187e1ddfc08e27cfa" name="glibc-testsuite" arch="src">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="2a4d4de3da92362c628ce9145dbc8e45f64c0df36310d503287c84df448d0366" name="glibc-testsuite" arch="src">
  <version epoch="0" ver="2.22" rel="19.2"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="c8ad978f744bc08ec2ff79b0750e10aa3a48c5e3f4e902f374d8a2207ca99fc2" name="glibc-testsuite" arch="src">
  <version epoch="0" ver="2.22" rel="22.2"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="202f2e754d969040abc479314eb0d50cc433224ce51b16d0f8c6ee5fa89b12e9" name="glibc-utils" arch="src">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="2c36b90e287fedb064f7cb27deac507ce9f30ae7617e638cf042ba312829f928" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="065f79f95f9184595b661e93169c2ffd2333b5dc5ddec7029a74190a4d8c1b2d" name="glibc-utils" arch="src">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="c61783052a7a353a65610f370514bf0a727a274cd8e1e48fd870d2ad23bc7411" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="ce14b8fcfd951ebf987ea1a6704f6afbaa6c2fdcba0198f901c7513a44bd8d5e" name="glibc-utils" arch="src">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="eefde3535221ef5b3f6d033250069d682bf39a3203f9832169de9293aa6d6c98" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="38f4b8b43739d81beea5f828fcbfc2bf2217d01eeec69d3f9b52b679ce5966d0" name="glibc-utils" arch="src">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="63a24347f0b5b23bf6f9834d0a4d03ec51781e93b1a69000820f431041868cb6" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="a567cb245906601dbcec65ade18b3e06e58f6f16278fd7efb4acbfc9ab78187a" name="glibc-utils" arch="src">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="66ab8e6473586defa955231978770563048ec170a3fde65af2a2bb6ae6f611ea" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="6cce215c11f706a72b2d0d9fd104a9a55d1368a62285bf5bef755d90a9424ec6" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1460030400">- s390-runtime-resolve.patch: save and restore fprs/vrs while
  resolving symbols (bsc#974284, BZ #19916)</changelog>
  <changelog author="schwab@suse.de" date="1460376000">- Add compatibility symlinks for LSB 3.0 (fate#318933)</changelog>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area (bsc#1074293)</changelog>
</package>
<package pkgid="b788492fdbf27c24c861cc01a5f24d636f78fe899ea1eba896495b2fa609e75e" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="13.2"/>
  <changelog author="schwab@suse.de" date="1462363200">- glob-altdirfunc.patch: Do not copy d_name field of struct dirent
  (CVE-2016-1234, bsc#969727, BZ #19779)</changelog>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
</package>
<package pkgid="66d5f27c8e797e35ad6e4e22aec4116a62f416f984c585a35baeb953f59cfeab" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="16.3"/>
  <changelog author="schwab@suse.de" date="1463054400">- Fix malloc performance regression from SLE 11 (bsc#975930)
  malloc-Consistently-apply-trim_threshold-to-all-heap.patch
  malloc-Prevent-arena-free_list-from-turning-cyclic-B.patch
  malloc-Fix-attached-thread-reference-count-handling-.patch
  malloc-Fix-list_lock-arena-lock-deadlock-BZ-19182.patch</changelog>
  <changelog author="schwab@suse.de" date="1463572800">- getaddrinfo-hostent-conv-stack-overflow.patch: getaddrinfo stack
  overflow in hostent conversion (CVE-2016-3706, bsc#980483, BZ #20010)</changelog>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
</package>
<package pkgid="733b88e3a66652f5fc5cbb3d26a2d97c308d8edddc4e37c0a0fb681176e34e81" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="19.1"/>
  <changelog author="schwab@suse.de" date="1464091200">- clntudp-call-alloca.patch: do not use alloca in clntudp_call
  (CVE-2016-4429, bsc#980854, BZ #20112)</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- vector-math-gcc-6.patch: Utilize x86_64 vector math functions w/o
  - fopenmp (fate#320851)</changelog>
  <changelog author="schwab@suse.de" date="1465387200">- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ
  [#19755])</changelog>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
</package>
<package pkgid="1d65448991688864cd307f4bc5e1dfea7ba72f9de99383d372053a4d0ca8267f" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.22" rel="22.1"/>
  <changelog author="schwab@suse.de" date="1466424000">- nis-initgroups-status.patch: Return proper status from
  _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
- robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
  check for timeout (bsc#985170, BZ #20263)</changelog>
  <changelog author="schwab@suse.de" date="1472472000">- resolv-assertion-failure.patch: resolv: Always set *resplen2 out
  parameter in send_dg (bsc#994576, BZ #19791)</changelog>
  <changelog author="schwab@suse.de" date="1478088000">- pt-fork.patch: fork in libpthread cannot use IFUNC resolver
  (bsc#1007851, BZ #19861)</changelog>
  <changelog author="schwab@suse.de" date="1490097600">- power9-support.patch,
  power9-strcmp.patch,
  power9-strncmp.patch: POWER9 enablement (bsc#1026224, fate#321607)</changelog>
  <changelog author="schwab@suse.de" date="1493726400">- dlclose-assert-init-called.patch: remove improper assert in dlclose
  (bsc#1035445, BZ #11941)</changelog>
  <changelog author="schwab@suse.de" date="1495454400">- malloc-fork-deadlock.patch: Fix deadlock between malloc and fork
  (bsc#1040043, BZ #19431)</changelog>
  <changelog author="schwab@suse.de" date="1495540800">- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
  programs (BZ #21209)
- ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
  AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357)</changelog>
  <changelog author="schwab@suse.de" date="1496750400">- ld-library-path-suid.patch: process only a single occurrence of LD_AUDIT</changelog>
  <changelog author="schwab@suse.de" date="1502971200">- baselibs.conf: add iconvconfig (bsc#1051042)</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- nptl-setxid-error.patch: Preserve error in setxid thread broadcast in
  coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="schwab@suse.de" date="1508932800">- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- pthread-create-use-after-free.patch: Fix use after free in
  pthread_create (bsc#1053188, BZ #20116)
- libmvec-nonshared-pic.patch: Use PIC relocations in libmvec_nonshared.a
  (bsc#1070905, BZ #19590)
- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)
- power6-memset.patch: Fix cmpli usage in power6 memset
- aarch64-dl-argv.patch: Use hidden __GI__dl_argv in rtld startup code
- realpath-underflow.patch: Avoid underflow of malloced area
  (CVE-2018-1000001, bsc#1074293)</changelog>
  <changelog author="schwab@suse.de" date="1515412800">- netgroupcache-locking.patch: Release read lock after resetting timeout
  (bsc#1073990, BZ #22161)</changelog>
  <changelog author="schwab@suse.de" date="1517918400">- sunrpc-xdr-memory.patch: Fix memory leak after deserialization failure
  in xdr_bytes, xdr_string (CVE-2017-8804, bsc#1037930, BZ #21461)
- reduce-edns-payload.patch: Reduce EDNS payload size to 1200 bytes
  (CVE-2017-12132, bsc#1051791, BZ #21361)
- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="schwab@suse.de" date="1519041600">- clntudp-call-use-after-free.patch: Avoid use-after-free read access in
  clntudp_call (CVE-2017-12133, bsc#1081556, BZ #21115)</changelog>
  <changelog author="schwab@suse.de" date="1526558400">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bnc#1094154, BZ #23196)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)</changelog>
  <changelog author="schwab@suse.de" date="1536062400">- powerpc-ipc64.patch: Always use __IPC_64 on powerpc as required by the
  kernel (bsc#1105236)</changelog>
  <changelog author="schwab@suse.de" date="1540296000">- aarch64-elf-machine-load-address.patch: Rewrite elf_machine_load_address
  using _DYNAMIC symbol (bsc#1112858)</changelog>
  <changelog author="schwab@suse.de" date="1540900800">- ld-so-cache-validation.patch: Add more checks for valid ld.so.cache file
  (bsc#1110661, BZ #18093)</changelog>
</package>
<package pkgid="1f0d0b47b0c93bdf85acdaf4e4f6ff793397b775fb75b48879a212b70b48e9a7" name="glipper" arch="noarch">
  <version epoch="0" ver="2.4" rel="12.3.1"/>
  <changelog author="zdenekzapp@gmail.com" date="1211284800">- Initial package.</changelog>
  <changelog author="vuntz@novell.com" date="1244980800">- Clean up package for Contrib.</changelog>
  <changelog author="puzel@novell.com" date="1251460800">- use new python macros</changelog>
  <changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="vuntz@opensuse.org" date="1333713600">- Update to version 2.3. Changes since version 1.0 include:
  + Remove GNOME applet and use app indicator or status icon.
  + Get rid of many dependencies.
  + Various fixes.
- Complete change BuildRequires following move from autotools to
  python-distutils:
  + Removed: gnome-doc-utils-devel, gnome-python-desktop,
    gtk2-devel, python-crypto, python-devel, python-gtk-devel,
    python-gnome-devel.
  + Added: python-base, python-distutils-extra.
- Add hicolor-icon-theme BuildRequires for directory ownership and
  definition of %icon_theme_cache_* macros.
- Add update-desktop-files BuildRequires for
  %suse_update_desktop_file.
- Remove now unneeded devel subpackage and add Obsoletes for it to
  main package.
- Remove now unneeded gnome-python-desktop and python-gnome
  Requires.
- Add new Requires and Recommends, following upstream
  recommendations:
  + Requires: python-gobject2, python-keybinder, python-xdg.
  + Recommends: python-appindicator, python-crypto, python-prctl.
- Change %build and %install to use python-distutils commands, and
  fix debian-ism in installation of gconf schemas.
- Update summary and description.
- Make package noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1347796800">- Update to version 2.4:
  + lp#904367: high priority crash.
  + Bugs fixed: lp#936650</changelog>
  <changelog author="zaitor@opensuse.org" date="1378900800">- Add conditional for filelist due to different helpfiles structure
  in openSUSE 13.1 and newer.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521460800">- Add python-gconf Requires: the app fails to start without it
  (boo#1059382).</changelog>
</package>
<package pkgid="ee3ca369377b566771a0bc40fce346ece500a89539f805d67183cd1091bbc619" name="glipper" arch="src">
  <version epoch="0" ver="2.4" rel="12.3.1"/>
  <changelog author="zdenekzapp@gmail.com" date="1211284800">- Initial package.</changelog>
  <changelog author="vuntz@novell.com" date="1244980800">- Clean up package for Contrib.</changelog>
  <changelog author="puzel@novell.com" date="1251460800">- use new python macros</changelog>
  <changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="vuntz@opensuse.org" date="1333713600">- Update to version 2.3. Changes since version 1.0 include:
  + Remove GNOME applet and use app indicator or status icon.
  + Get rid of many dependencies.
  + Various fixes.
- Complete change BuildRequires following move from autotools to
  python-distutils:
  + Removed: gnome-doc-utils-devel, gnome-python-desktop,
    gtk2-devel, python-crypto, python-devel, python-gtk-devel,
    python-gnome-devel.
  + Added: python-base, python-distutils-extra.
- Add hicolor-icon-theme BuildRequires for directory ownership and
  definition of %icon_theme_cache_* macros.
- Add update-desktop-files BuildRequires for
  %suse_update_desktop_file.
- Remove now unneeded devel subpackage and add Obsoletes for it to
  main package.
- Remove now unneeded gnome-python-desktop and python-gnome
  Requires.
- Add new Requires and Recommends, following upstream
  recommendations:
  + Requires: python-gobject2, python-keybinder, python-xdg.
  + Recommends: python-appindicator, python-crypto, python-prctl.
- Change %build and %install to use python-distutils commands, and
  fix debian-ism in installation of gconf schemas.
- Update summary and description.
- Make package noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1347796800">- Update to version 2.4:
  + lp#904367: high priority crash.
  + Bugs fixed: lp#936650</changelog>
  <changelog author="zaitor@opensuse.org" date="1378900800">- Add conditional for filelist due to different helpfiles structure
  in openSUSE 13.1 and newer.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521460800">- Add python-gconf Requires: the app fails to start without it
  (boo#1059382).</changelog>
</package>
<package pkgid="b5f90d0da125e07b2ab2f58913a438eced664bffa4b4d8a34bfec91b9b1b7fae" name="glipper-lang" arch="noarch">
  <version epoch="0" ver="2.4" rel="12.3.1"/>
  <changelog author="zdenekzapp@gmail.com" date="1211284800">- Initial package.</changelog>
  <changelog author="vuntz@novell.com" date="1244980800">- Clean up package for Contrib.</changelog>
  <changelog author="puzel@novell.com" date="1251460800">- use new python macros</changelog>
  <changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="vuntz@opensuse.org" date="1333713600">- Update to version 2.3. Changes since version 1.0 include:
  + Remove GNOME applet and use app indicator or status icon.
  + Get rid of many dependencies.
  + Various fixes.
- Complete change BuildRequires following move from autotools to
  python-distutils:
  + Removed: gnome-doc-utils-devel, gnome-python-desktop,
    gtk2-devel, python-crypto, python-devel, python-gtk-devel,
    python-gnome-devel.
  + Added: python-base, python-distutils-extra.
- Add hicolor-icon-theme BuildRequires for directory ownership and
  definition of %icon_theme_cache_* macros.
- Add update-desktop-files BuildRequires for
  %suse_update_desktop_file.
- Remove now unneeded devel subpackage and add Obsoletes for it to
  main package.
- Remove now unneeded gnome-python-desktop and python-gnome
  Requires.
- Add new Requires and Recommends, following upstream
  recommendations:
  + Requires: python-gobject2, python-keybinder, python-xdg.
  + Recommends: python-appindicator, python-crypto, python-prctl.
- Change %build and %install to use python-distutils commands, and
  fix debian-ism in installation of gconf schemas.
- Update summary and description.
- Make package noarch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1347796800">- Update to version 2.4:
  + lp#904367: high priority crash.
  + Bugs fixed: lp#936650</changelog>
  <changelog author="zaitor@opensuse.org" date="1378900800">- Add conditional for filelist due to different helpfiles structure
  in openSUSE 13.1 and newer.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521460800">- Add python-gconf Requires: the app fails to start without it
  (boo#1059382).</changelog>
</package>
<package pkgid="2e027faa8a7466c13bce0a0c82abec6a405f16f09cab7e7fee2954a29fff64f1" name="global" arch="src">
  <version epoch="0" ver="6.5.1" rel="6.1"/>
  <changelog author="puzel@novell.com" date="1284724800">- update to global-5.9.2
  o gtags.vim: Added -m(--vim) option to the show command.
  o Renamed the -S(--secure-cgi) option to --system-cgi. This is
    because the parameter of the --secure-cgi was changed in
    GLOBAL-5.9.1.
  o The site key directory for the --system-cgi option was moved
    from datadir(/usr/local/share) to localstatedir(/usr/local/var)
    because datadir should be used for read-only data.  By default,
    you must execute "cd HTML; sh bless.sh" as a root user, since the
    site key directory can not be written except for root user.
- added global-5.9.2-fix-htags-makefile.patch (fixes build)</changelog>
  <changelog author="coolo@novell.com" date="1299758400">- switch to autoreconf for better libtool support</changelog>
  <changelog author="puzel@novell.com" date="1300190400">- update to global-5.9.4
  [FIXED BUGS]
  * htags: A certain kind of files which does not end with newline
    bring segmentation fault.
  * global: --from-here option didn't locate definitions in the
    GTAGSLIBPATH.
  * htags: Htags with the -g and -d option didn't work correctly.
  [CHANGES]
  * gtags.el: New custom variables:
    'gtags-disable-pushy-mouse-mapping' and
    'gtags-suggested-key-mapping'.
  * gtags.el: Command gtags-parse-file was rewritten.
  * gtags.vim: New custom variable Gtags_Use_Tags_Format.
  * global: New optional files arguments for the -g command.
  * global: New -V(--invert-match) option for the -g command.
  * global: New --print0 option.
  * global: New --file-list=file option.
  * htags: New --html-header option.
  * gtags.vim: Activate input completion also on the prompt 'Gtags
    for pattern:'.
  [INCOMPATIBLE CHANGES]
  * htags: Ceases making ID database arbitrarily when the -g option
    is specified.
  * htags: The --no-map-file option was removed. Instead, new
  - -map-file option was added. Htags doesn't make the mapping
    files (FILEMAP, MAP) any longer.
  * htags: The -c (--compact) option was deleted from the option list of the
  - -suggest2 option.
  * GLOBAL's commands locates gtags.conf also in the sysconfdir.
- drop global-5.9.2-fix-htags-makefile.patch (in upstream)</changelog>
  <changelog author="puzel@novell.com" date="1305720000">- update to global-5.9.5
  [FIXED BUGS]
  * The processing of the --ncol option was missing.
  [CHANGES]
  * gtags-cscope: re-implemented using cscope's code.
    Now, it is almost compatible with cscope itself.
  * Config variable 'suffixes' was completely removed.
    Instead, config variable 'langmap' was actualized.
  [INCOMPATIBLE CHANGES]
  * Removed GPATH,GTAGS,GRTAGS,GSYMS and html/ from the skip
    variable in gtags.conf file. From now on, gtags unconditionally
    ignore the tag files. Though 'html/' was added for Windows, it
    brought troubles for UNIX.</changelog>
  <changelog author="puzel@novell.com" date="1307448000">- update to global-5.9.6
  [CHANGES]
  * global: New option --literal
  * htags: New --fixed-guide option
  [FIXED BUGS]
  * htags: didn't make FILEMAP file which is referred by Doxgen
  * gtags-cscope: 'Find this text string:' didn't work correctly in
    some cases
  * gtags-cscope/Makefile: setting of gtags_cscope_DEPENDENCIES was
    wrong
- use spec-cleaner</changelog>
  <changelog author="puzel@novell.com" date="1309521600">- update to global-5.9.7
  [CHANGES]
  * global: the -c command accepts new -P and -r option.
  * gozilla: Now support firefox.
  * globash: Added two commands: d and rs.
  [INCOMPATIBLE CHANGES]
  * globash: The -l option in each search command was removed.
  * gtags.el: Removed the default mouse key mapping in gtags-mode
    and gtags-select-mode.</changelog>
  <changelog author="puzel@suse.com" date="1315483200">- update to global-6.0
  [CHANGES]
  - Now GLOBAL allows path names which include blanks.
  - Now GLOBAL refuses looping symbolic links.
  - global: the -c command accepts -T option.
  - global: the -c command locates symbols in the directories in
    GTAGSLIBPATH.
  - global: New --match-part option.
  - global: New environment variable GTAGSTHROUGH. If this variable
    is set, the -T option is specified.
  - global: New output format 'ctags-mod'. It is used in gtags.vim.
  - global: New environment variable GTAGSBLANKENCODE.
  - htags: Changed the cflow loader to accept "_' and HTML special
    chars (&amp;XXXX;).
  - gtags.vim: Now allows the use of the -s and -r option at the
    same time.
  - gtags.vim: Now custom variables: 'Gtags_Auto_Map' (default 0).
  - gtags.el: New custom variable 'gtags-grep-all-text-files'.
  - gtags-cscope: New -a option.
  - gtags-cscope.vim: New custom variables:
    'GtagsCscope_Use_Old_Key_Map', 'GtagsCscope_Ignore_Case',
    'GtagsCscope_Absolute_Path'.
  [BUG FIXED]
  - gtags.el: gtags-mode-hook and gtags-select-mode-hook were not
    the last thing run when entering the mode. It has been fixed.
- do not install INSTALL file</changelog>
  <changelog author="puzel@suse.com" date="1318593600">- update to global-6.1
  [CHANGES]
  - Now GLOBAL allows path names which include blanks.
  - Now GLOBAL refuses looping symbolic links.
  - global: the -c command accepts -T option.
  - global: the -c command locates symbols in the directories in
    GTAGSLIBPATH.
  - global: New --match-part option.
  - global: New environment variable GTAGSTHROUGH. If this variable
    is set, the -T option is specified.
  - global: New output format 'ctags-mod'. It is used in gtags.vim.
  - global: New environment variable GTAGSBLANKENCODE.
  - htags: Changed the cflow loader to accept "_' and HTML special
    chars (&amp;XXXX;).
  - gtags.vim: Now allows the use of the -s and -r option at the
    same time.
  - gtags.vim: Now custom variables: 'Gtags_Auto_Map' (default 0).
  - gtags.el: New custom variable 'gtags-grep-all-text-files'.
  - gtags-cscope: New -a option.
  - gtags-cscope.vim: New custom variables:
    'GtagsCscope_Use_Old_Key_Map', 'GtagsCscope_Ignore_Case',
    'GtagsCscope_Absolute_Path'.
  [BUG FIXED]
  - gtags.el: gtags-mode-hook and gtags-select-mode-hook were not
    the last thing run when entering the mode. It has been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="puzel@suse.com" date="1327320000">- update to global-6.2
  [CHANGES]
  - gtags.el: Added support for TRAMP. Now gtags.el works almost
    transparently with TRAMP.
  - gtags-cscope: Enables an environment variable EDITOR allow
    options.
  - gtags-cscope: New -i option.
  - gtags-cscope.vim: New custom variable GtagsCscope_Kepp_Alive.
  - globash: Added long name options
  - gtags: Add keywords introduced in ISO/IEC 9899:2011.
  [INCOMPATIBLE CHANGES]
  - less-global: Quoting is required for the pattern which should be
    interpreted by the shell.
  [BUG FIXED]
  - The icase_path config variable didn't affect the -c command with
    the -P option of global. Now it works.</changelog>
  <changelog author="puzel@suse.com" date="1330084800">- update to global-6.2.1
  [CHANGES]
  - gtags: New --accept-dotfiles option.
  - gtags.el: Key mapping was changed to follow "Key binding
    conventions" of Emacs Lisp.
  [BUG FIXED]
  - global: The -L option with '-' didn't work. Now it works.
  - Pick up symbols in expression in enumerator-list as "reference
    or other symbol".
  - C/C++ parser couldn't handle typedef of the form of 'typedef
    enum tag_name TYPEDEF_NAME;' correctly. Now, it works.</changelog>
  <changelog author="puzel@suse.com" date="1338206400">- update to global-6.2.2
  [BUG FIXED]
  - configure: The --disable-gtagscscope option didn't avoid
    building gtags-cscope completely. So, ./configure failed when
    there is no curses library.  Now it avoids building
    gtags-cscope completely.
  - htags: Imported a patch to fix htags on Windows Vista+ (tmpfile
    wants to create its file in the root directory, which is not
    writable by normal users).</changelog>
  <changelog author="puzel@suse.com" date="1338465600">- update to global-6.2.4
  [BUG FIXED]
  - Built-in parser: When attribute specifier appeared immediately
    after the `struct', `union' or `enum' keyword, GLOBAL could not
    pick up tag name.  Now it works correctly.
  [CHANGES]
  - New facilities:
  - gtags: --single-update option support addition of a file.
  - global: New --single-update option.
  - gtags.el: New custom variables:
  - gtags-ignore-case
  - gtags-auto-update.
  - gtags.vim: New custom variables 'Gtags_Auto_Update' (default 0).</changelog>
  <changelog author="puzel@suse.com" date="1410177600">- update to globa-6.3.2
- see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.2.4</changelog>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1513771200">- CVE-2017-17531: Argument-injection vulnerability allowed the
  execution of arbitrary code via crafted URLs (boo#1073197)
  Add CVE-2017-17531.patch</changelog>
</package>
<package pkgid="1c306de1995d400790c16e18104272f9e2f7e14f600f3aec5e07c60fdcfed90a" name="global" arch="x86_64">
  <version epoch="0" ver="6.5.1" rel="6.1"/>
  <changelog author="puzel@novell.com" date="1284724800">- update to global-5.9.2
  o gtags.vim: Added -m(--vim) option to the show command.
  o Renamed the -S(--secure-cgi) option to --system-cgi. This is
    because the parameter of the --secure-cgi was changed in
    GLOBAL-5.9.1.
  o The site key directory for the --system-cgi option was moved
    from datadir(/usr/local/share) to localstatedir(/usr/local/var)
    because datadir should be used for read-only data.  By default,
    you must execute "cd HTML; sh bless.sh" as a root user, since the
    site key directory can not be written except for root user.
- added global-5.9.2-fix-htags-makefile.patch (fixes build)</changelog>
  <changelog author="coolo@novell.com" date="1299758400">- switch to autoreconf for better libtool support</changelog>
  <changelog author="puzel@novell.com" date="1300190400">- update to global-5.9.4
  [FIXED BUGS]
  * htags: A certain kind of files which does not end with newline
    bring segmentation fault.
  * global: --from-here option didn't locate definitions in the
    GTAGSLIBPATH.
  * htags: Htags with the -g and -d option didn't work correctly.
  [CHANGES]
  * gtags.el: New custom variables:
    'gtags-disable-pushy-mouse-mapping' and
    'gtags-suggested-key-mapping'.
  * gtags.el: Command gtags-parse-file was rewritten.
  * gtags.vim: New custom variable Gtags_Use_Tags_Format.
  * global: New optional files arguments for the -g command.
  * global: New -V(--invert-match) option for the -g command.
  * global: New --print0 option.
  * global: New --file-list=file option.
  * htags: New --html-header option.
  * gtags.vim: Activate input completion also on the prompt 'Gtags
    for pattern:'.
  [INCOMPATIBLE CHANGES]
  * htags: Ceases making ID database arbitrarily when the -g option
    is specified.
  * htags: The --no-map-file option was removed. Instead, new
  - -map-file option was added. Htags doesn't make the mapping
    files (FILEMAP, MAP) any longer.
  * htags: The -c (--compact) option was deleted from the option list of the
  - -suggest2 option.
  * GLOBAL's commands locates gtags.conf also in the sysconfdir.
- drop global-5.9.2-fix-htags-makefile.patch (in upstream)</changelog>
  <changelog author="puzel@novell.com" date="1305720000">- update to global-5.9.5
  [FIXED BUGS]
  * The processing of the --ncol option was missing.
  [CHANGES]
  * gtags-cscope: re-implemented using cscope's code.
    Now, it is almost compatible with cscope itself.
  * Config variable 'suffixes' was completely removed.
    Instead, config variable 'langmap' was actualized.
  [INCOMPATIBLE CHANGES]
  * Removed GPATH,GTAGS,GRTAGS,GSYMS and html/ from the skip
    variable in gtags.conf file. From now on, gtags unconditionally
    ignore the tag files. Though 'html/' was added for Windows, it
    brought troubles for UNIX.</changelog>
  <changelog author="puzel@novell.com" date="1307448000">- update to global-5.9.6
  [CHANGES]
  * global: New option --literal
  * htags: New --fixed-guide option
  [FIXED BUGS]
  * htags: didn't make FILEMAP file which is referred by Doxgen
  * gtags-cscope: 'Find this text string:' didn't work correctly in
    some cases
  * gtags-cscope/Makefile: setting of gtags_cscope_DEPENDENCIES was
    wrong
- use spec-cleaner</changelog>
  <changelog author="puzel@novell.com" date="1309521600">- update to global-5.9.7
  [CHANGES]
  * global: the -c command accepts new -P and -r option.
  * gozilla: Now support firefox.
  * globash: Added two commands: d and rs.
  [INCOMPATIBLE CHANGES]
  * globash: The -l option in each search command was removed.
  * gtags.el: Removed the default mouse key mapping in gtags-mode
    and gtags-select-mode.</changelog>
  <changelog author="puzel@suse.com" date="1315483200">- update to global-6.0
  [CHANGES]
  - Now GLOBAL allows path names which include blanks.
  - Now GLOBAL refuses looping symbolic links.
  - global: the -c command accepts -T option.
  - global: the -c command locates symbols in the directories in
    GTAGSLIBPATH.
  - global: New --match-part option.
  - global: New environment variable GTAGSTHROUGH. If this variable
    is set, the -T option is specified.
  - global: New output format 'ctags-mod'. It is used in gtags.vim.
  - global: New environment variable GTAGSBLANKENCODE.
  - htags: Changed the cflow loader to accept "_' and HTML special
    chars (&amp;XXXX;).
  - gtags.vim: Now allows the use of the -s and -r option at the
    same time.
  - gtags.vim: Now custom variables: 'Gtags_Auto_Map' (default 0).
  - gtags.el: New custom variable 'gtags-grep-all-text-files'.
  - gtags-cscope: New -a option.
  - gtags-cscope.vim: New custom variables:
    'GtagsCscope_Use_Old_Key_Map', 'GtagsCscope_Ignore_Case',
    'GtagsCscope_Absolute_Path'.
  [BUG FIXED]
  - gtags.el: gtags-mode-hook and gtags-select-mode-hook were not
    the last thing run when entering the mode. It has been fixed.
- do not install INSTALL file</changelog>
  <changelog author="puzel@suse.com" date="1318593600">- update to global-6.1
  [CHANGES]
  - Now GLOBAL allows path names which include blanks.
  - Now GLOBAL refuses looping symbolic links.
  - global: the -c command accepts -T option.
  - global: the -c command locates symbols in the directories in
    GTAGSLIBPATH.
  - global: New --match-part option.
  - global: New environment variable GTAGSTHROUGH. If this variable
    is set, the -T option is specified.
  - global: New output format 'ctags-mod'. It is used in gtags.vim.
  - global: New environment variable GTAGSBLANKENCODE.
  - htags: Changed the cflow loader to accept "_' and HTML special
    chars (&amp;XXXX;).
  - gtags.vim: Now allows the use of the -s and -r option at the
    same time.
  - gtags.vim: Now custom variables: 'Gtags_Auto_Map' (default 0).
  - gtags.el: New custom variable 'gtags-grep-all-text-files'.
  - gtags-cscope: New -a option.
  - gtags-cscope.vim: New custom variables:
    'GtagsCscope_Use_Old_Key_Map', 'GtagsCscope_Ignore_Case',
    'GtagsCscope_Absolute_Path'.
  [BUG FIXED]
  - gtags.el: gtags-mode-hook and gtags-select-mode-hook were not
    the last thing run when entering the mode. It has been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="puzel@suse.com" date="1327320000">- update to global-6.2
  [CHANGES]
  - gtags.el: Added support for TRAMP. Now gtags.el works almost
    transparently with TRAMP.
  - gtags-cscope: Enables an environment variable EDITOR allow
    options.
  - gtags-cscope: New -i option.
  - gtags-cscope.vim: New custom variable GtagsCscope_Kepp_Alive.
  - globash: Added long name options
  - gtags: Add keywords introduced in ISO/IEC 9899:2011.
  [INCOMPATIBLE CHANGES]
  - less-global: Quoting is required for the pattern which should be
    interpreted by the shell.
  [BUG FIXED]
  - The icase_path config variable didn't affect the -c command with
    the -P option of global. Now it works.</changelog>
  <changelog author="puzel@suse.com" date="1330084800">- update to global-6.2.1
  [CHANGES]
  - gtags: New --accept-dotfiles option.
  - gtags.el: Key mapping was changed to follow "Key binding
    conventions" of Emacs Lisp.
  [BUG FIXED]
  - global: The -L option with '-' didn't work. Now it works.
  - Pick up symbols in expression in enumerator-list as "reference
    or other symbol".
  - C/C++ parser couldn't handle typedef of the form of 'typedef
    enum tag_name TYPEDEF_NAME;' correctly. Now, it works.</changelog>
  <changelog author="puzel@suse.com" date="1338206400">- update to global-6.2.2
  [BUG FIXED]
  - configure: The --disable-gtagscscope option didn't avoid
    building gtags-cscope completely. So, ./configure failed when
    there is no curses library.  Now it avoids building
    gtags-cscope completely.
  - htags: Imported a patch to fix htags on Windows Vista+ (tmpfile
    wants to create its file in the root directory, which is not
    writable by normal users).</changelog>
  <changelog author="puzel@suse.com" date="1338465600">- update to global-6.2.4
  [BUG FIXED]
  - Built-in parser: When attribute specifier appeared immediately
    after the `struct', `union' or `enum' keyword, GLOBAL could not
    pick up tag name.  Now it works correctly.
  [CHANGES]
  - New facilities:
  - gtags: --single-update option support addition of a file.
  - global: New --single-update option.
  - gtags.el: New custom variables:
  - gtags-ignore-case
  - gtags-auto-update.
  - gtags.vim: New custom variables 'Gtags_Auto_Update' (default 0).</changelog>
  <changelog author="puzel@suse.com" date="1410177600">- update to globa-6.3.2
- see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.2.4</changelog>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1513771200">- CVE-2017-17531: Argument-injection vulnerability allowed the
  execution of arbitrary code via crafted URLs (boo#1073197)
  Add CVE-2017-17531.patch</changelog>
</package>
<package pkgid="81d4d5047c9ad77da4b9be8b82a1a64ea9c65b84eb5ffff410040d6c185e69f7" name="glslang" arch="src">
  <version epoch="0" ver="2.3.g537" rel="4.3.1"/>
  <changelog author="jengelh@inai.de" date="1455710400">- Initial package (version 2.3.g244) for build.opensuse.org
- Add badcode.diff</changelog>
  <changelog author="jengelh@inai.de" date="1461672000">- Update to 2.3.g401
  * Fix compile error involving std::isinf
- Drop badcode.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1465732800">- Update to 2.3g537
  * HLSL: Implement proper nesting of symbol-table scopes and
  identifier searching.
  * HLSL: Add all int/float/bool/uint matrix types, void for
  functions, and a few others.
  * Types: Add an isOpaque() helper
  * remapper: do not eliminate interface variables in dce by default
  * Initial implementation of direct-mapped subset of HLSL intrinsics
  with type subset.
  * SPV: Don't shadow sampler parameters when performing function calls
  * Check for linking multiple ES shaders to the same stage
  * Vulkan: Finish semantics for what creates spec-const-semantics.
  * HLSL: Add more matrix types to the grammar.
  * Full stack: distinguish between a scalar and a vector of size 1.
  * SPV: Don't emit memory barrier for ESSL barrier(), but still do
  for GLSL barrier().
  * Add support for querying vertex attributes in reflection API
  * SPV: Don't add clip/cull distance capabilities unless used.
  * Tests: Add a set of gtest-file-based HLSL tests.
  * SPV: Handle matrix's OpFConvert vector by vector.
  * HLSL: Add function call syntax and AST building.
  * SPV: Add capability ImageGatherExtended if necessary.
  * SPIR-V do not decorate: members of plain structs with location;
  non-top level members with interp.</changelog>
</package>
<package pkgid="d1a13fd7b801c157607a31114c9b882487d0e12ebe1051c9a91070a839af2951" name="glslang-devel" arch="x86_64">
  <version epoch="0" ver="2.3.g537" rel="4.3.1"/>
  <changelog author="jengelh@inai.de" date="1455710400">- Initial package (version 2.3.g244) for build.opensuse.org
- Add badcode.diff</changelog>
  <changelog author="jengelh@inai.de" date="1461672000">- Update to 2.3.g401
  * Fix compile error involving std::isinf
- Drop badcode.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1465732800">- Update to 2.3g537
  * HLSL: Implement proper nesting of symbol-table scopes and
  identifier searching.
  * HLSL: Add all int/float/bool/uint matrix types, void for
  functions, and a few others.
  * Types: Add an isOpaque() helper
  * remapper: do not eliminate interface variables in dce by default
  * Initial implementation of direct-mapped subset of HLSL intrinsics
  with type subset.
  * SPV: Don't shadow sampler parameters when performing function calls
  * Check for linking multiple ES shaders to the same stage
  * Vulkan: Finish semantics for what creates spec-const-semantics.
  * HLSL: Add more matrix types to the grammar.
  * Full stack: distinguish between a scalar and a vector of size 1.
  * SPV: Don't emit memory barrier for ESSL barrier(), but still do
  for GLSL barrier().
  * Add support for querying vertex attributes in reflection API
  * SPV: Don't add clip/cull distance capabilities unless used.
  * Tests: Add a set of gtest-file-based HLSL tests.
  * SPV: Handle matrix's OpFConvert vector by vector.
  * HLSL: Add function call syntax and AST building.
  * SPV: Add capability ImageGatherExtended if necessary.
  * SPIR-V do not decorate: members of plain structs with location;
  non-top level members with interp.</changelog>
</package>
<package pkgid="2297f3b74a0702c4370e3cf355998eb8ecce5146289e549a460efe649414d633" name="gn" arch="src">
  <version epoch="0" ver="0.1463" rel="2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="009202e716c8f97382fff4d64cbfff062ae19816c3f603bf588230439c2841fd" name="gn" arch="x86_64">
  <version epoch="0" ver="0.1463" rel="2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="5d5995f0fdcbb14818fd4b9f61611262621b2ba0764cefa2f5ec599f8f99d1f4" name="gnome-autoar" arch="src">
  <version epoch="0" ver="0.2.2" rel="2.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="federico@suse.com" date="1497355200">- Add gnome-autoar-disable-encrypted-archives.patch.  This patch is
  just for SLE; it disables detection of encrypted archives, as the
  version of libarchive in SLE does not have the necessary API yet.
- Require libarchive 0.1.2, which is already in SLE; don't require
  3.2.0.</changelog>
</package>
<package pkgid="03351f6d68873470c167e4d5338cea77112fd3185f87572a84a8c9fcd4b1aa91" name="gnome-autoar-devel" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="2.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="federico@suse.com" date="1497355200">- Add gnome-autoar-disable-encrypted-archives.patch.  This patch is
  just for SLE; it disables detection of encrypted archives, as the
  version of libarchive in SLE does not have the necessary API yet.
- Require libarchive 0.1.2, which is already in SLE; don't require
  3.2.0.</changelog>
</package>
<package pkgid="5a48bf48713dac6c05c5a174f364adda66e2c32a2e35a42a8cfa0618c310024b" name="gnome-books" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="01f7d650659bde34d4b0c92915bc7b844932a0f0d4fcafea74ec3696164b12f3" name="gnome-books" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="48cca75ad5728c0418174051f669615a591c162628198f850fbd2d20eb5cb46e" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="687cc3b467d43fc2f2e114d7b12d5e015a6afe2ad1aab3c9342f3af502ee5f3e" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="cee5c48d98dc415b62d9a80d0109be2ab2bec359d6739caefaa6cade4ce327fc" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="b98fdd47dfcdcfb2c784da652aedab789121e4422163afbd10f36b6a5a5a196f" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="965d5d85b11fec9b828c2089f619d37dff25f468053d3cf90d26abb68553fa4b" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="2ef090591777ab8f3c824680cac66ab9a4340d13ef345228106ff8bf205d654d" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="7cc8625c65f921c3617c0c3eea455c2ffc7c65dd98546b3f98820d715c43bdc7" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="18.3.1"/>
  <changelog author="sckang@suse.com" date="1459339200">- Add 0001-network-Fix-empty-Wifi-list.patch: Fix Wifi list not
  showing APs correctly (bsc#870322, bgo#709641).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Set define with_cacert_patch to 0, needed now since we have
  non-rebased patches in NetworkManager.</changelog>
  <changelog author="fezhang@suse.com" date="1460462401">- Update to GNOME 3.20  Fate#318572
- Drop commit-0f5e433: fixed upstream
- Drop commit-23c4ea2: fixed upstream
- Drop commit-a53065d: fixed upstream
- Drop commit-b242a00: fixed upstream
- Drop commit-ccebd62: fixed upstream
- Drop commit-d2074fa: fixed upstream
- Drop commit-eed8f71: fixed upstream
- Drop gnome-control-center-bnc862415-timezone.patch:
  Fixed upstream (bnc#862415).
- Drop gnome-control-center-bnc865632-disable-popup-for-NM.patch:
  Fixed upstream (bnc#865632).
- Drop
  gnome-control-center-bnc894394-hide-firewall-zone-entry.patch:
  Fixed upstream (bnc#894394).
- Drop gnome-control-center-bnc947761-fix-color-dialog-translations.patch:
  Fixed upstream (bnc#947761).
- Drop gnome-control-center-change-password-i18n.patch:
  Fixed upstream (bnc#880303).
- Drop gnome-control-center-datetime-i18n.patch:
  Fixed upstream (bnc#884425 bgo#732585).
- Drop gnome-control-center-display-login-region.patch:
  Fixed upstream (bsc#955322).
- Drop gnome-control-center-fix-wifi-list.patch:
  Replaced by 0001-network-Fix-empty-Wifi-list.patch (bsc#870322).
- Rebase gcc-private-connection.patch (bnc#751211).
- Rebase gnome-control-center-allow-extra-tools-in-shell.patch
  (bnc#866235).
- Rebase gnome-control-center-probe-radius-server-cert.patch:
  Toggle with_cacert_patch to 1 to enable it (bnc#574266).</changelog>
  <changelog author="zaitor@opensuse.org" date="1460635200">- Update to version 3.20.1:
  + Translate the "When the Power Button is pressed" drop-down.
  + Fix a number of build warnings.
  + Fix crash opening Wacom panel under Wayland.
  + Fix Wi-Fi list being empty when enabled within the Network
    panel.
  + Throw an error when using the Synaptics touchpad driver.
  + Add support for older versions of CUPS.
  + Hide firewall zone combo when firewalld isn't running.
  + Fix the visual bell test not working in some cases.
  + Updated translations.
- Drop 0001-network-Fix-empty-Wifi-list.patch: Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1460980800">- Adjust BuildRequired versions according to configure:
  + gsettings-desktop-schemas &gt;= 3.19.3.
  + gnome-settings-daemon &gt;= 3.19.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460980801">- Don't require NetworkManager for SLE. It isn't used on SLES.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463745600">- Add gnome-control-center-touchpad-wayland-cap.patch: mouse: Make
  touchpad capability checking on wayland work as intended
  (bgo#765879).</changelog>
  <changelog author="fcrozat@suse.com" date="1464609600">- Move online accounts panel to a separate subpackage and ensure
  gnome-online-accounts is required by this subpackage (icons are
  provided by it). Add Supplements to ensure it will be pulled when
  gnome-online-accounts is installed. (FATE#318572)</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Drop pkgconfig(libsystemd-login) BuildRequires: this dependency
  has ot been in use since version 3.7.4.</changelog>
  <changelog author="sckang@suse.com" date="1469534400">- Add gnome-control-center-disable-error-message-for-NM.patch:
  Improve the check whether NM or wicked is running, so it won't
  show an error about NM on systems where wicked instead of NM is
  being used (bsc#989801).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Drop Mesa-demo-x Requires: No longer needed. Fixes boo#996633.</changelog>
  <changelog author="fezhang@suse.com" date="1472817600">- Update gnome-control-center-allow-extra-tools-in-shell.patch:
  + Fix leak of strings.
  + Add tools with category X-GNOME-DesktopSettings into the
    personal g-c-c category to enable itweb-settings.
  + Disable logspam in absence of optional components (bnc#866235
    bsc#952008).</changelog>
  <changelog author="fezhang@suse.com" date="1472904000">- Update gnome-control-center-add-alacarte-for-sle.patch:
  Rebase on top of rebased
  gnome-control-center-allow-extra-tools-in-shell.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1474027200">- Add gnome-control-center-info-never-use-gnome-software.patch:
  On SLE12-SP2 and Leap42.2, never search for gnome-software as an
  option when checking for updates in info panel, because we use
  gpk-update-viewer (bsc#999336).</changelog>
  <changelog author="sckang@suse.com" date="1476878400">- Add gnome-control-center-fix-mobile-network-list.patch: Fix
  created mobile networks not showing in the network list
  (bsc#870795).</changelog>
  <changelog author="hpj@suse.com" date="1478260800">- Rebased gcc-private-connection.patch (bsc#751211, bgo#646187).
- Added gnome-control-center-bsc1003069-default-to-private-credentials.patch
  (bsc#1003069).</changelog>
  <changelog author="sckang@suse.com" date="1479729600">- Add gnome-control-center-fix-mobile-switch-button.patch: Fix
  broken switch button in mobile broadband page of the network
  panel (bgo#690361, bsc#997832).</changelog>
  <changelog author="fezhang@suse.com" date="1492084800">- Add gnome-control-center-more-power-button-actions.patch:
  Bring back the "shutdown" and "interactive" power key actions in
  "Power" panel (bsc#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1493812800">- Add gnome-control-center-info-disc-size-for-btrfs.patch:
  Fix total disc size for btrfs subvolumes displayed in info panel,
  backported upstream commit b619f7c (bsc#890385, bsc#1037234,
  bgo#708786).</changelog>
  <changelog author="qkzhu@suse.com" date="1541764800">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="a5c118dd160b37fa1b0d28c01a0e6b650395a02adec7dceca3b7fb6f66ea019e" name="gnome-desktop" arch="src">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
  <changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
</package>
<package pkgid="5e144e70ba66056d423cdb4f3f2e641a09e72cf4ba6f036de657d39b6238327f" name="gnome-desktop-lang" arch="noarch">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
  <changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
</package>
<package pkgid="2d7d479f983a648f05f4a039f31bc2ae037b1c0c0a921b93a6ad29c9b199d760" name="gnome-documents" arch="src">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="b837bf48a11b8c5773ed171dc1c6b626480f7ca79edd5760a1cb32d3bf5d0f21" name="gnome-documents" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="17b1e734dee4b5c35b0a8c5b6f9ff710c2710ac9fc383b80e6f4754e380e629d" name="gnome-documents" arch="src">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="0b61fd9ac03574b39745500c08357aa250a5285ad1436570a5275ff356225597" name="gnome-documents" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="872157418999d1c628e0a01a2f2b2fd287ff75a1de0fb1d7b2be0cb841b99404" name="gnome-documents-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="94d79534a634495c681ffcf372e6a319eeff6fda952889c4a5ad0e886e5a72e4" name="gnome-documents-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="93576353b44ad9910e9c4a29337ed7905f1b4110a2389a76c25627cee0f836f6" name="gnome-documents_books-common" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="f1dae0cc6319637bc2108a99146e96e31c9be355f68171c406295c898c7fb34a" name="gnome-documents_books-common" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="276c0a3ab924ce9e7b6414ff4ed23274d799506cc43aec2a163a1c61ca5c1157" name="gnome-initial-setup" arch="src">
  <version epoch="0" ver="3.20.1" rel="6.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1432296000">- Update to version 3.16.3:
  + Avoid keyring problems with preexisting passwordless accounts.
  + Improve password page.
  + Look for the right key in os-release for privacy policy.
  + Make policy dialog resize properly.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + Create keyring initially unencrypted.
  + Password page refinements (bgo#735578).
  + Make policy dialog resize properly (bgo#749426).
  + Use correct key for privacy policy (bgo#749545).
  + Handle disabled network better.
  + Avoid a crash on language change (bgo#752134).
  + Make gnome-shell launch first.
  + AVoid a race in launching welcome tour.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 3.17.90:
  + Detect enterprise accounts without heuristic (bgo#752980).
  + Don't change keyring password explicitly (bgo#752980).
  + Fix problem with restarting geoclue client.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441195200">- Update to version 3.17.91:
  + Go back to enforcing password policy (bgo#754213).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448280000">- Update to version 3.19.1:
  + Ensure locale region matches the selected language.
  + Sort languages case-insensitively.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455537600">- Create user 'gnome-initial-setup', which is mandatory to make
  this work.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.2:
  + Fix timezone lookup after locale change.
  + Handle screen resolution changes.
  + Design updates to the timezone page.
  + Don't create a keyring for existing users.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456142400">- Add gnome-getting-started-docs Requires: once the g-i-s assistant
  is completed, it auto-launches the getting started documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 3.19.91:
  + Visual refinements on online accounts page.
  + Minor tweaks on the privacy and accounts pages.
  + Ensure keyring gets created for new users.
  + Updated translations.
- Changes from version 3.19.90:
  + Visual refresh for the 'ready to go' page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Add a translator comment for 'Welcome!'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030400">- Drop pkgconfig(clutter-gst-2.0) and pkgconfig(clutter-x11-1.0)
  BuildRequires: Not hard dependencies anymore.
- Add pkgconfig(json-glib-1.0) BuildRequires: Configure looks for
  it, so add it to make sure it's pulled in.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1488974400">- Import gnome-initial-setup to SLE12:SP3(FATE#321126, bsc#988350).</changelog>
  <changelog author="qzhao@suse.com" date="1489147200">- Add gnome-initial-setup-only-launch-CJK.patch: In SLED, it will
  active if user's language is Chinese/Japanese/Korean, and
  deactive in other language (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1489665600">- Add gnome-initial-setup-only-setup-keyboard.patch: Only setup the
  keyboard and IM as required (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1490270400">- Add gnome-initial-setup-disable-dep-on-started-docs.patch:
  Dismiss the yelp help page after the initial setup
  (FATE#321126).</changelog>
  <changelog author="qzhao@suse.com" date="1510228800">- Add gnome-initial-setup-mozc-engine-prioritized.patch: Make the
  Mozc input engine as the 1st choice for Japanese environment
  (boo#1067288,bnc#1029083).</changelog>
  <changelog author="yfjiang@suse.com" date="1522238400">- Update spec to enable the following patches on Leap 42.3, Leap 15
  and later, being consistent with SLE (boo#1086056):
  + gnome-initial-setup-only-launch-CJK.patch
  + gnome-initial-setup-only-setup-keyboard.patch
  + gnome-initial-setup-disable-dep-on-started-docs.patch</changelog>
</package>
<package pkgid="33696579e0544d23e1014172ea99b04b7837fffc27247434715465ea2abf3546" name="gnome-initial-setup" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="6.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1432296000">- Update to version 3.16.3:
  + Avoid keyring problems with preexisting passwordless accounts.
  + Improve password page.
  + Look for the right key in os-release for privacy policy.
  + Make policy dialog resize properly.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + Create keyring initially unencrypted.
  + Password page refinements (bgo#735578).
  + Make policy dialog resize properly (bgo#749426).
  + Use correct key for privacy policy (bgo#749545).
  + Handle disabled network better.
  + Avoid a crash on language change (bgo#752134).
  + Make gnome-shell launch first.
  + AVoid a race in launching welcome tour.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 3.17.90:
  + Detect enterprise accounts without heuristic (bgo#752980).
  + Don't change keyring password explicitly (bgo#752980).
  + Fix problem with restarting geoclue client.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441195200">- Update to version 3.17.91:
  + Go back to enforcing password policy (bgo#754213).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448280000">- Update to version 3.19.1:
  + Ensure locale region matches the selected language.
  + Sort languages case-insensitively.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455537600">- Create user 'gnome-initial-setup', which is mandatory to make
  this work.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.2:
  + Fix timezone lookup after locale change.
  + Handle screen resolution changes.
  + Design updates to the timezone page.
  + Don't create a keyring for existing users.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456142400">- Add gnome-getting-started-docs Requires: once the g-i-s assistant
  is completed, it auto-launches the getting started documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 3.19.91:
  + Visual refinements on online accounts page.
  + Minor tweaks on the privacy and accounts pages.
  + Ensure keyring gets created for new users.
  + Updated translations.
- Changes from version 3.19.90:
  + Visual refresh for the 'ready to go' page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Add a translator comment for 'Welcome!'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030400">- Drop pkgconfig(clutter-gst-2.0) and pkgconfig(clutter-x11-1.0)
  BuildRequires: Not hard dependencies anymore.
- Add pkgconfig(json-glib-1.0) BuildRequires: Configure looks for
  it, so add it to make sure it's pulled in.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1488974400">- Import gnome-initial-setup to SLE12:SP3(FATE#321126, bsc#988350).</changelog>
  <changelog author="qzhao@suse.com" date="1489147200">- Add gnome-initial-setup-only-launch-CJK.patch: In SLED, it will
  active if user's language is Chinese/Japanese/Korean, and
  deactive in other language (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1489665600">- Add gnome-initial-setup-only-setup-keyboard.patch: Only setup the
  keyboard and IM as required (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1490270400">- Add gnome-initial-setup-disable-dep-on-started-docs.patch:
  Dismiss the yelp help page after the initial setup
  (FATE#321126).</changelog>
  <changelog author="qzhao@suse.com" date="1510228800">- Add gnome-initial-setup-mozc-engine-prioritized.patch: Make the
  Mozc input engine as the 1st choice for Japanese environment
  (boo#1067288,bnc#1029083).</changelog>
  <changelog author="yfjiang@suse.com" date="1522238400">- Update spec to enable the following patches on Leap 42.3, Leap 15
  and later, being consistent with SLE (boo#1086056):
  + gnome-initial-setup-only-launch-CJK.patch
  + gnome-initial-setup-only-setup-keyboard.patch
  + gnome-initial-setup-disable-dep-on-started-docs.patch</changelog>
</package>
<package pkgid="77660a48041ec2d4dbf5bcec37db37654c5b44363a6241d18140b879285ec131" name="gnome-initial-setup-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="6.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1432296000">- Update to version 3.16.3:
  + Avoid keyring problems with preexisting passwordless accounts.
  + Improve password page.
  + Look for the right key in os-release for privacy policy.
  + Make policy dialog resize properly.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + Create keyring initially unencrypted.
  + Password page refinements (bgo#735578).
  + Make policy dialog resize properly (bgo#749426).
  + Use correct key for privacy policy (bgo#749545).
  + Handle disabled network better.
  + Avoid a crash on language change (bgo#752134).
  + Make gnome-shell launch first.
  + AVoid a race in launching welcome tour.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 3.17.90:
  + Detect enterprise accounts without heuristic (bgo#752980).
  + Don't change keyring password explicitly (bgo#752980).
  + Fix problem with restarting geoclue client.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441195200">- Update to version 3.17.91:
  + Go back to enforcing password policy (bgo#754213).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448280000">- Update to version 3.19.1:
  + Ensure locale region matches the selected language.
  + Sort languages case-insensitively.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455537600">- Create user 'gnome-initial-setup', which is mandatory to make
  this work.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.2:
  + Fix timezone lookup after locale change.
  + Handle screen resolution changes.
  + Design updates to the timezone page.
  + Don't create a keyring for existing users.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1456142400">- Add gnome-getting-started-docs Requires: once the g-i-s assistant
  is completed, it auto-launches the getting started documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 3.19.91:
  + Visual refinements on online accounts page.
  + Minor tweaks on the privacy and accounts pages.
  + Ensure keyring gets created for new users.
  + Updated translations.
- Changes from version 3.19.90:
  + Visual refresh for the 'ready to go' page.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.19.92:
  + Add a translator comment for 'Welcome!'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030400">- Drop pkgconfig(clutter-gst-2.0) and pkgconfig(clutter-x11-1.0)
  BuildRequires: Not hard dependencies anymore.
- Add pkgconfig(json-glib-1.0) BuildRequires: Configure looks for
  it, so add it to make sure it's pulled in.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1488974400">- Import gnome-initial-setup to SLE12:SP3(FATE#321126, bsc#988350).</changelog>
  <changelog author="qzhao@suse.com" date="1489147200">- Add gnome-initial-setup-only-launch-CJK.patch: In SLED, it will
  active if user's language is Chinese/Japanese/Korean, and
  deactive in other language (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1489665600">- Add gnome-initial-setup-only-setup-keyboard.patch: Only setup the
  keyboard and IM as required (FATE#321126).</changelog>
  <changelog author="yfjiang@suse.com" date="1490270400">- Add gnome-initial-setup-disable-dep-on-started-docs.patch:
  Dismiss the yelp help page after the initial setup
  (FATE#321126).</changelog>
  <changelog author="qzhao@suse.com" date="1510228800">- Add gnome-initial-setup-mozc-engine-prioritized.patch: Make the
  Mozc input engine as the 1st choice for Japanese environment
  (boo#1067288,bnc#1029083).</changelog>
  <changelog author="yfjiang@suse.com" date="1522238400">- Update spec to enable the following patches on Leap 42.3, Leap 15
  and later, being consistent with SLE (boo#1086056):
  + gnome-initial-setup-only-launch-CJK.patch
  + gnome-initial-setup-only-setup-keyboard.patch
  + gnome-initial-setup-disable-dep-on-started-docs.patch</changelog>
</package>
<package pkgid="5a326ffab0920da45452cdf79eb334bdd6dbdeb036dc2b7fd27b17b7abb4c5e7" name="gnome-keyring" arch="src">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="6b686503fcc61356511cb9b64575a73bd64a7664c753e39311be0fde8a79af96" name="gnome-keyring" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="b75a46edac993e91c0d328d4a15f07e1dbd80a769afc3699131d78e165e5bf8b" name="gnome-keyring-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="7a37476201f87b50684629e5775b97b5e321b891dfd9989ee577946294fd677e" name="gnome-keyring-lang" arch="noarch">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="f7f7a7b3ad6efcc3b35dbd4f2ae3152a79404813dbabe6f15e566b80b9f9f121" name="gnome-keyring-pam" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="bca2d948700a85a931ad126fba2600e4fc181e39a8173698ac0a4f7349b72093" name="gnome-keyring-pam-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="7.1"/>
  <changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
  <changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
  <changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
  <changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>
</package>
<package pkgid="b3d7ed15d33e8c57a26783c77b7d3521ca8964d9660282b6b594988899bf9655" name="gnome-online-accounts" arch="src">
  <version epoch="0" ver="3.20.8" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + provider, telepathy: Small leak fixes (bgo#756759).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243201">- Update to version 3.18.2.1:
  + Fix org.gnome.Identity.service.in is missing from tarball
    (bgo#757952).</changelog>
  <changelog author="dimstar@opensuse.org" date="1448366400">- Pass --enable-media-server to configure: enable DLNA provider.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450353600">- Update to version 3.18.3:
  + Network changes cause authentication token timeouts
    (bgo#751524).
  + imap-smtp: Fix typo in error message (bgo#755316).
  + Crash in mail_client_check_auth_run_cb when goa_mail_auth_run
    fails (bgo#758361).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.18.4:
  + kerberos: Fail early on ticket request when ticketing disabled
    (bgo#756498).
  + Examples fail if backend is disabled (bgo#758475).
  + Use primary@REALM as the presentation identity for temporary
    accounts (bgo#761188).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.2:
  + Bugs fixed: bgo#755316, bgo#757952, bgo#758361.
  + Updated translations.
- Changes from version 3.19.1:
  + Bugs fixed: bgo#752736, bgo#754142, bgo#755168, bgo#755315,
    bgo#756394, bgo#756494, bgo#756759.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1455710401">- Update to version 3.19.3:
  + Bugs fixed: bgo#751524, bgo#758361.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710402">- Update to version 3.19.4:
  + Bugs fixed: bgo#758475, bgo#759571, bgo#759828, bgo#760189.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710403">- Update to version 3.19.90:
  + Bugs fixed: bgo#755316, bgo#756498, bgo#760991, bgo#761188,
    bgo#761510.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 3.19.92:
  + bgo#756495: identity: don't ignore almost all renewal requests.
  + bgo#761262: alarm, daemon: Avoid using %m for errors.
  + bgo#761510: Factorize common code in
    GoaBackend::build_object().
  + bgo#762097: httpclient: Don't hard-code "Connection: close" in
    the request headers.
  + bgo#762155: kerberos: Do not use goa_object_peek_* in threaded
    code.
  + bgo#762548: Fix the dialogs' dimensions with newer GTK+.
  + bgo#763078: build: Update autogen.sh from GNOME recommendation.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129601">- Update to version 3.19.92.1:
  + bgo#763078: Documentation missing from tarball.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + identity: fix renewal requests for kernel keyring based tickets
    (bgo#756495).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Update to version 3.20.2:
  + lastfm: Don't forget to update the ret variable (bgo#760991).
  + Misc usability improvements to the imap-smtp provider
    (bgo#764283).
  + org.gnome.OnlineAccounts.Account:IsTemporary is not being set
    (bgo#765994).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469707200">- Update to version 3.20.3:
  + Bugs fixed: bgo#756431, bgo#762155, bgo#766733, bgo#768808,
    bgo#768845.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.20.4:
  + Fix a few leaks in goa-identity-service (bgo#756431).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.5 (boo#1016000):
  + New API key for Google.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485345600">- Update to version 3.20.6:
  + bgo#765121: Memory leak in goa-daemon.
  + bgo#776871: Broken error handling in
    on_got_identity_for_sign_out.
  + bgo#776897: The invocation is leaked when handling
    ExchangeSecretKeys and SignOut.</changelog>
  <changelog author="mgorse@suse.com" date="1511265600">- Update to version 3.20.8 (bsc#1069269):
  + bgo#785726 facebook: Make it work with Graph API &gt; 2.3
  + Changes in 3.20.7:
  + bgo#779548 Don't leak the name_owner and result in
    dbus_proxy_reload_properties_sync</changelog>
</package>
<package pkgid="313630e174effa898793e46fd0e42cd05ff224e62e31518f8c7af838e74c6689" name="gnome-online-accounts" arch="x86_64">
  <version epoch="0" ver="3.20.8" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + provider, telepathy: Small leak fixes (bgo#756759).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243201">- Update to version 3.18.2.1:
  + Fix org.gnome.Identity.service.in is missing from tarball
    (bgo#757952).</changelog>
  <changelog author="dimstar@opensuse.org" date="1448366400">- Pass --enable-media-server to configure: enable DLNA provider.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450353600">- Update to version 3.18.3:
  + Network changes cause authentication token timeouts
    (bgo#751524).
  + imap-smtp: Fix typo in error message (bgo#755316).
  + Crash in mail_client_check_auth_run_cb when goa_mail_auth_run
    fails (bgo#758361).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.18.4:
  + kerberos: Fail early on ticket request when ticketing disabled
    (bgo#756498).
  + Examples fail if backend is disabled (bgo#758475).
  + Use primary@REALM as the presentation identity for temporary
    accounts (bgo#761188).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.2:
  + Bugs fixed: bgo#755316, bgo#757952, bgo#758361.
  + Updated translations.
- Changes from version 3.19.1:
  + Bugs fixed: bgo#752736, bgo#754142, bgo#755168, bgo#755315,
    bgo#756394, bgo#756494, bgo#756759.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1455710401">- Update to version 3.19.3:
  + Bugs fixed: bgo#751524, bgo#758361.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710402">- Update to version 3.19.4:
  + Bugs fixed: bgo#758475, bgo#759571, bgo#759828, bgo#760189.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710403">- Update to version 3.19.90:
  + Bugs fixed: bgo#755316, bgo#756498, bgo#760991, bgo#761188,
    bgo#761510.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 3.19.92:
  + bgo#756495: identity: don't ignore almost all renewal requests.
  + bgo#761262: alarm, daemon: Avoid using %m for errors.
  + bgo#761510: Factorize common code in
    GoaBackend::build_object().
  + bgo#762097: httpclient: Don't hard-code "Connection: close" in
    the request headers.
  + bgo#762155: kerberos: Do not use goa_object_peek_* in threaded
    code.
  + bgo#762548: Fix the dialogs' dimensions with newer GTK+.
  + bgo#763078: build: Update autogen.sh from GNOME recommendation.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129601">- Update to version 3.19.92.1:
  + bgo#763078: Documentation missing from tarball.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + identity: fix renewal requests for kernel keyring based tickets
    (bgo#756495).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Update to version 3.20.2:
  + lastfm: Don't forget to update the ret variable (bgo#760991).
  + Misc usability improvements to the imap-smtp provider
    (bgo#764283).
  + org.gnome.OnlineAccounts.Account:IsTemporary is not being set
    (bgo#765994).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469707200">- Update to version 3.20.3:
  + Bugs fixed: bgo#756431, bgo#762155, bgo#766733, bgo#768808,
    bgo#768845.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.20.4:
  + Fix a few leaks in goa-identity-service (bgo#756431).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.5 (boo#1016000):
  + New API key for Google.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485345600">- Update to version 3.20.6:
  + bgo#765121: Memory leak in goa-daemon.
  + bgo#776871: Broken error handling in
    on_got_identity_for_sign_out.
  + bgo#776897: The invocation is leaked when handling
    ExchangeSecretKeys and SignOut.</changelog>
  <changelog author="mgorse@suse.com" date="1511265600">- Update to version 3.20.8 (bsc#1069269):
  + bgo#785726 facebook: Make it work with Graph API &gt; 2.3
  + Changes in 3.20.7:
  + bgo#779548 Don't leak the name_owner and result in
    dbus_proxy_reload_properties_sync</changelog>
</package>
<package pkgid="dcc19e31174ece39d7ac5d4c1a27fa8ea3451d46977f042bfbe160e31c6e3983" name="gnome-online-accounts-devel" arch="x86_64">
  <version epoch="0" ver="3.20.8" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + provider, telepathy: Small leak fixes (bgo#756759).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243201">- Update to version 3.18.2.1:
  + Fix org.gnome.Identity.service.in is missing from tarball
    (bgo#757952).</changelog>
  <changelog author="dimstar@opensuse.org" date="1448366400">- Pass --enable-media-server to configure: enable DLNA provider.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450353600">- Update to version 3.18.3:
  + Network changes cause authentication token timeouts
    (bgo#751524).
  + imap-smtp: Fix typo in error message (bgo#755316).
  + Crash in mail_client_check_auth_run_cb when goa_mail_auth_run
    fails (bgo#758361).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.18.4:
  + kerberos: Fail early on ticket request when ticketing disabled
    (bgo#756498).
  + Examples fail if backend is disabled (bgo#758475).
  + Use primary@REALM as the presentation identity for temporary
    accounts (bgo#761188).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.2:
  + Bugs fixed: bgo#755316, bgo#757952, bgo#758361.
  + Updated translations.
- Changes from version 3.19.1:
  + Bugs fixed: bgo#752736, bgo#754142, bgo#755168, bgo#755315,
    bgo#756394, bgo#756494, bgo#756759.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1455710401">- Update to version 3.19.3:
  + Bugs fixed: bgo#751524, bgo#758361.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710402">- Update to version 3.19.4:
  + Bugs fixed: bgo#758475, bgo#759571, bgo#759828, bgo#760189.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710403">- Update to version 3.19.90:
  + Bugs fixed: bgo#755316, bgo#756498, bgo#760991, bgo#761188,
    bgo#761510.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 3.19.92:
  + bgo#756495: identity: don't ignore almost all renewal requests.
  + bgo#761262: alarm, daemon: Avoid using %m for errors.
  + bgo#761510: Factorize common code in
    GoaBackend::build_object().
  + bgo#762097: httpclient: Don't hard-code "Connection: close" in
    the request headers.
  + bgo#762155: kerberos: Do not use goa_object_peek_* in threaded
    code.
  + bgo#762548: Fix the dialogs' dimensions with newer GTK+.
  + bgo#763078: build: Update autogen.sh from GNOME recommendation.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129601">- Update to version 3.19.92.1:
  + bgo#763078: Documentation missing from tarball.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + identity: fix renewal requests for kernel keyring based tickets
    (bgo#756495).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Update to version 3.20.2:
  + lastfm: Don't forget to update the ret variable (bgo#760991).
  + Misc usability improvements to the imap-smtp provider
    (bgo#764283).
  + org.gnome.OnlineAccounts.Account:IsTemporary is not being set
    (bgo#765994).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469707200">- Update to version 3.20.3:
  + Bugs fixed: bgo#756431, bgo#762155, bgo#766733, bgo#768808,
    bgo#768845.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.20.4:
  + Fix a few leaks in goa-identity-service (bgo#756431).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.5 (boo#1016000):
  + New API key for Google.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485345600">- Update to version 3.20.6:
  + bgo#765121: Memory leak in goa-daemon.
  + bgo#776871: Broken error handling in
    on_got_identity_for_sign_out.
  + bgo#776897: The invocation is leaked when handling
    ExchangeSecretKeys and SignOut.</changelog>
  <changelog author="mgorse@suse.com" date="1511265600">- Update to version 3.20.8 (bsc#1069269):
  + bgo#785726 facebook: Make it work with Graph API &gt; 2.3
  + Changes in 3.20.7:
  + bgo#779548 Don't leak the name_owner and result in
    dbus_proxy_reload_properties_sync</changelog>
</package>
<package pkgid="e35a1ee9b108fae99a4fc02c8b5b41b0f1486774660ae2db8cee42c8f8f021cd" name="gnome-online-accounts-lang" arch="noarch">
  <version epoch="0" ver="3.20.8" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + provider, telepathy: Small leak fixes (bgo#756759).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243201">- Update to version 3.18.2.1:
  + Fix org.gnome.Identity.service.in is missing from tarball
    (bgo#757952).</changelog>
  <changelog author="dimstar@opensuse.org" date="1448366400">- Pass --enable-media-server to configure: enable DLNA provider.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450353600">- Update to version 3.18.3:
  + Network changes cause authentication token timeouts
    (bgo#751524).
  + imap-smtp: Fix typo in error message (bgo#755316).
  + Crash in mail_client_check_auth_run_cb when goa_mail_auth_run
    fails (bgo#758361).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.18.4:
  + kerberos: Fail early on ticket request when ticketing disabled
    (bgo#756498).
  + Examples fail if backend is disabled (bgo#758475).
  + Use primary@REALM as the presentation identity for temporary
    accounts (bgo#761188).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.2:
  + Bugs fixed: bgo#755316, bgo#757952, bgo#758361.
  + Updated translations.
- Changes from version 3.19.1:
  + Bugs fixed: bgo#752736, bgo#754142, bgo#755168, bgo#755315,
    bgo#756394, bgo#756494, bgo#756759.
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1455710401">- Update to version 3.19.3:
  + Bugs fixed: bgo#751524, bgo#758361.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710402">- Update to version 3.19.4:
  + Bugs fixed: bgo#758475, bgo#759571, bgo#759828, bgo#760189.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455710403">- Update to version 3.19.90:
  + Bugs fixed: bgo#755316, bgo#756498, bgo#760991, bgo#761188,
    bgo#761510.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 3.19.92:
  + bgo#756495: identity: don't ignore almost all renewal requests.
  + bgo#761262: alarm, daemon: Avoid using %m for errors.
  + bgo#761510: Factorize common code in
    GoaBackend::build_object().
  + bgo#762097: httpclient: Don't hard-code "Connection: close" in
    the request headers.
  + bgo#762155: kerberos: Do not use goa_object_peek_* in threaded
    code.
  + bgo#762548: Fix the dialogs' dimensions with newer GTK+.
  + bgo#763078: build: Update autogen.sh from GNOME recommendation.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129601">- Update to version 3.19.92.1:
  + bgo#763078: Documentation missing from tarball.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + identity: fix renewal requests for kernel keyring based tickets
    (bgo#756495).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Update to version 3.20.2:
  + lastfm: Don't forget to update the ret variable (bgo#760991).
  + Misc usability improvements to the imap-smtp provider
    (bgo#764283).
  + org.gnome.OnlineAccounts.Account:IsTemporary is not being set
    (bgo#765994).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469707200">- Update to version 3.20.3:
  + Bugs fixed: bgo#756431, bgo#762155, bgo#766733, bgo#768808,
    bgo#768845.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.20.4:
  + Fix a few leaks in goa-identity-service (bgo#756431).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1481889600">- Update to version 3.20.5 (boo#1016000):
  + New API key for Google.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485345600">- Update to version 3.20.6:
  + bgo#765121: Memory leak in goa-daemon.
  + bgo#776871: Broken error handling in
    on_got_identity_for_sign_out.
  + bgo#776897: The invocation is leaked when handling
    ExchangeSecretKeys and SignOut.</changelog>
  <changelog author="mgorse@suse.com" date="1511265600">- Update to version 3.20.8 (bsc#1069269):
  + bgo#785726 facebook: Make it work with Graph API &gt; 2.3
  + Changes in 3.20.7:
  + bgo#779548 Don't leak the name_owner and result in
    dbus_proxy_reload_properties_sync</changelog>
</package>
<package pkgid="199fd5de107b9db59028b732e328f4914777a4b55c26e6c9db69b7214c4bc3e4" name="gnome-packagekit" arch="src">
  <version epoch="0" ver="3.20.0" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
  <changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
  <changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
  <changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
  <changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
</package>
<package pkgid="607caa9308183b2a6bf724d258fd09aeb7fba4a97e68a7c9ac08f6a6213a6565" name="gnome-packagekit" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
  <changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
  <changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
  <changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
  <changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
</package>
<package pkgid="e91c0eaf23ae680334356ff869336d69e12b3135cf6edea63b8f00b45ceeb70e" name="gnome-packagekit-extras" arch="x86_64">
  <version epoch="0" ver="3.20.0" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
  <changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
  <changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
  <changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
  <changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
</package>
<package pkgid="4bff354c8c42d48eb28518866daca995c91ddc373e234d2ce24b0d98b0f4406a" name="gnome-packagekit-lang" arch="noarch">
  <version epoch="0" ver="3.20.0" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
  <changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
  <changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
  <changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
  <changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
  <changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
</package>
<package pkgid="ef3b0b0f2ae286aa7cc80801b1b16310e48ede7af2386b544dbdf8201a0a1a95" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.20.1" rel="15.1"/>
  <changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
  <changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
  <changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
  <changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
  <changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
  <changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
  <changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
  <changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
  <changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
  <changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
  <changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
  <changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
  <changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
  <changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
  <changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
  <changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
  <changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>
</package>
<package pkgid="d0515ea9f79e33d1b144bfd64616f5ce94ff0bbb419d503ad755e16fb626ed7c" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="15.1"/>
  <changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
  <changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
  <changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
  <changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
  <changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
  <changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
  <changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
  <changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
  <changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
  <changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
  <changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
  <changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
  <changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
  <changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
  <changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
  <changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
  <changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>
</package>
<package pkgid="773ce67932c58396d8f8fb729e57aa0a5c11f42dc9b9eb2d857c3dc3320c0442" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="15.1"/>
  <changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
  <changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
  <changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
  <changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
  <changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
  <changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
  <changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
  <changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
  <changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
  <changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
  <changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
  <changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
  <changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
  <changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
  <changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
  <changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
  <changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>
</package>
<package pkgid="729cca172b556ceed1c244f29d6dd790c965fa7d29f6f1c6b954ac942108b812" name="gnome-settings-daemon-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="15.1"/>
  <changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
  <changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
  <changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
  <changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
  <changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
  <changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
  <changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
  <changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
  <changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
  <changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
  <changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
  <changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
  <changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
  <changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
  <changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
  <changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
  <changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
  <changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>
</package>
<package pkgid="f4293f1c999191c88ed0c638a94f3422022d69479024712680617c0e69b61738" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="02da7adbc63f406e701c139545c7ebc6d86ec44430852186a06d39d93c6eb364" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="c12845a271dc80151f8dedc5662f3fa5d43f2a4adc027e5c7139572e59f0bd71" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="434aec3fb918b3ca7028a8c862fbaf6d47feb43298314debb18fa1c1edc7aacf" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="1b55553d19e1747aa43240bca3a62875effe590b4313f38bf553280b12775596" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="6b1329f308e7c0b4b1b8ebeace8fd9ae559b3455c496273a85ef89098ce3b284" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="139b233e408882e8b736fecf19c1bd4fcb9362dd21653f5c6c11c7c001c52837" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="96fdc2aa7c1d6e757ffb440069803702f2f6a470304b47e2630c1ce018bf5a26" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="b0fbfbd1a406f242eaea7a15e3ca84b02735a8cb49e5f54f03ce45b4ba12ab7d" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="4e1d0c79191db0d2106c76fb09047a830d2f795702579bd81cce7a0797cbdeed" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="e21b0ec7caae1ffcb74012b2b285008d5f3d6e4c1ea9d84cc2d6e7ea15323e55" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="4536e08c1198fbcd482db8774329fcf58107aa8fc134b5f393e5bd184d2d12b8" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="f18ce5df1feab296df8708ab7ae8291cde6da0d177769344dfe3dd7f3bcdc513" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="10.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1452427200">- Update to version 3.19.1:
  + Fix some theme issues.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452427201">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452427202">- Update to version 3.19.3:
  + native-window-placement: Don't let border overlap title.
  + apps-menu: Fix handling of .desktop files in subdirectories.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453464000">- Update to version 3.19.4:
  + screenshot-window-sizer: HiDPI support.
  + Fix gnome-shell component in classic session.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + Version bump only, no changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + version bump, nothing to see here.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + version bump, nothing to see here.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Temporarily disable SLE patches and theming. It will be
  re-enabled in a later update.</changelog>
  <changelog author="cxiong@suse.com" date="1461153600">- Patches(none-SLE-classic) reviewing for SP2 GNOME 3.20
- REBASED:
  + gnome-shell-add-app-to-desktop.patch
- DROPPED: Upstreamed
  + gnome-shell-use-env-var-for-mode.patch
  + place-menu-handle-special-user-dirs-update.patch
  + 0001-window-list-import-gettext-for-the-right-domain.patch
  + gnome-shell-extensions-bnc872820-wm-button-layout.patch
  + bnc947381-Application-menu-selections-stop-working.patch
- DROPPED: Invalid
  + gnome-classic-move-notification-widget-above.patch</changelog>
  <changelog author="cxiong@suse.com" date="1462449600">- Rebasing SLE Classic (basic) (Fate#318572)
- Add source sle-classic.desktop: xsession file
- Add patch gse-sle-classic-ext.patch: add sle classic support
- DROPPED: Invalid
  + gnome-classic-exts-arrow-fix.patch
  + gnome-sle-classic-ext-build.patch
  + sle-classic.tar.bz2</changelog>
  <changelog author="cxiong@suse.com" date="1462795200">- SLE Classic (REBASING DONE)
  + DROPPED places-menu-use-nautilus-for-links.patch (Invalid)
  + Add workspace-indicator to the build
  + Fix the gap between bottom menu and its button.
  + Fix windows auto-grouping.
  + Hide window list in Overview
  + Clean up spec file.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462968000">- Update to version 3.20.1:
  + Update classic style.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1464004800">- Update to GNOME 3.20.2 fate#318572
  + gse-sle-classic-ext.patch updated.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="yfjiang@suse.com" date="1476187200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + add workspace indicator back for LEAP 42.2</changelog>
  <changelog author="xwang@suse.com" date="1478001600">- Add SUSE logo on lock screen when auth is requested bsc#1007468
  + sle-classic-lock-screen-background.patch
  + SLE-theme.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update patch gse-sle-classic-ext.patch. Fix only half panel shown
  on bottom of desktop when scaling-factor equals 2(Require patched
  gnome-shell)(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
</package>
<package pkgid="eaedc39061a4fd561a5326043d2a00929731f130f87725a9bc5d5081e4e4287e" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="3efc8c7ceff8ec2a242fee9f46cf8288a30aa84b75c15fb4d0335270fb882245" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="a3142e57a60e80b057fd866694073836fde91afd28f7749f2442acd3d87a7f79" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="67e09e7c66090182f767a5df83ff814fce263cbad73e2137ad0270a89427773d" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.20.1" rel="10.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1452427200">- Update to version 3.19.1:
  + Fix some theme issues.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452427201">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452427202">- Update to version 3.19.3:
  + native-window-placement: Don't let border overlap title.
  + apps-menu: Fix handling of .desktop files in subdirectories.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453464000">- Update to version 3.19.4:
  + screenshot-window-sizer: HiDPI support.
  + Fix gnome-shell component in classic session.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + Version bump only, no changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + version bump, nothing to see here.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + version bump, nothing to see here.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Temporarily disable SLE patches and theming. It will be
  re-enabled in a later update.</changelog>
  <changelog author="cxiong@suse.com" date="1461153600">- Patches(none-SLE-classic) reviewing for SP2 GNOME 3.20
- REBASED:
  + gnome-shell-add-app-to-desktop.patch
- DROPPED: Upstreamed
  + gnome-shell-use-env-var-for-mode.patch
  + place-menu-handle-special-user-dirs-update.patch
  + 0001-window-list-import-gettext-for-the-right-domain.patch
  + gnome-shell-extensions-bnc872820-wm-button-layout.patch
  + bnc947381-Application-menu-selections-stop-working.patch
- DROPPED: Invalid
  + gnome-classic-move-notification-widget-above.patch</changelog>
  <changelog author="cxiong@suse.com" date="1462449600">- Rebasing SLE Classic (basic) (Fate#318572)
- Add source sle-classic.desktop: xsession file
- Add patch gse-sle-classic-ext.patch: add sle classic support
- DROPPED: Invalid
  + gnome-classic-exts-arrow-fix.patch
  + gnome-sle-classic-ext-build.patch
  + sle-classic.tar.bz2</changelog>
  <changelog author="cxiong@suse.com" date="1462795200">- SLE Classic (REBASING DONE)
  + DROPPED places-menu-use-nautilus-for-links.patch (Invalid)
  + Add workspace-indicator to the build
  + Fix the gap between bottom menu and its button.
  + Fix windows auto-grouping.
  + Hide window list in Overview
  + Clean up spec file.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462968000">- Update to version 3.20.1:
  + Update classic style.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1464004800">- Update to GNOME 3.20.2 fate#318572
  + gse-sle-classic-ext.patch updated.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="yfjiang@suse.com" date="1476187200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + add workspace indicator back for LEAP 42.2</changelog>
  <changelog author="xwang@suse.com" date="1478001600">- Add SUSE logo on lock screen when auth is requested bsc#1007468
  + sle-classic-lock-screen-background.patch
  + SLE-theme.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update patch gse-sle-classic-ext.patch. Fix only half panel shown
  on bottom of desktop when scaling-factor equals 2(Require patched
  gnome-shell)(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
</package>
<package pkgid="1d554192c839b115623eac80183a06a96ee4b81147717838cb6f95ad98782c5a" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="10.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1452427200">- Update to version 3.19.1:
  + Fix some theme issues.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452427201">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452427202">- Update to version 3.19.3:
  + native-window-placement: Don't let border overlap title.
  + apps-menu: Fix handling of .desktop files in subdirectories.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453464000">- Update to version 3.19.4:
  + screenshot-window-sizer: HiDPI support.
  + Fix gnome-shell component in classic session.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + Version bump only, no changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + version bump, nothing to see here.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + version bump, nothing to see here.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Temporarily disable SLE patches and theming. It will be
  re-enabled in a later update.</changelog>
  <changelog author="cxiong@suse.com" date="1461153600">- Patches(none-SLE-classic) reviewing for SP2 GNOME 3.20
- REBASED:
  + gnome-shell-add-app-to-desktop.patch
- DROPPED: Upstreamed
  + gnome-shell-use-env-var-for-mode.patch
  + place-menu-handle-special-user-dirs-update.patch
  + 0001-window-list-import-gettext-for-the-right-domain.patch
  + gnome-shell-extensions-bnc872820-wm-button-layout.patch
  + bnc947381-Application-menu-selections-stop-working.patch
- DROPPED: Invalid
  + gnome-classic-move-notification-widget-above.patch</changelog>
  <changelog author="cxiong@suse.com" date="1462449600">- Rebasing SLE Classic (basic) (Fate#318572)
- Add source sle-classic.desktop: xsession file
- Add patch gse-sle-classic-ext.patch: add sle classic support
- DROPPED: Invalid
  + gnome-classic-exts-arrow-fix.patch
  + gnome-sle-classic-ext-build.patch
  + sle-classic.tar.bz2</changelog>
  <changelog author="cxiong@suse.com" date="1462795200">- SLE Classic (REBASING DONE)
  + DROPPED places-menu-use-nautilus-for-links.patch (Invalid)
  + Add workspace-indicator to the build
  + Fix the gap between bottom menu and its button.
  + Fix windows auto-grouping.
  + Hide window list in Overview
  + Clean up spec file.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462968000">- Update to version 3.20.1:
  + Update classic style.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1464004800">- Update to GNOME 3.20.2 fate#318572
  + gse-sle-classic-ext.patch updated.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="yfjiang@suse.com" date="1476187200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + add workspace indicator back for LEAP 42.2</changelog>
  <changelog author="xwang@suse.com" date="1478001600">- Add SUSE logo on lock screen when auth is requested bsc#1007468
  + sle-classic-lock-screen-background.patch
  + SLE-theme.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update patch gse-sle-classic-ext.patch. Fix only half panel shown
  on bottom of desktop when scaling-factor equals 2(Require patched
  gnome-shell)(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
</package>
<package pkgid="a50d8199292acdeb63cd621f3707a891316791bca0ff1ad3a1aa68ed1194915d" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.20.1" rel="10.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1452427200">- Update to version 3.19.1:
  + Fix some theme issues.</changelog>
  <changelog author="zaitor@opensuse.org" date="1452427201">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452427202">- Update to version 3.19.3:
  + native-window-placement: Don't let border overlap title.
  + apps-menu: Fix handling of .desktop files in subdirectories.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453464000">- Update to version 3.19.4:
  + screenshot-window-sizer: HiDPI support.
  + Fix gnome-shell component in classic session.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 3.19.90:
  + Version bump only, no changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + version bump, nothing to see here.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + version bump, nothing to see here.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Temporarily disable SLE patches and theming. It will be
  re-enabled in a later update.</changelog>
  <changelog author="cxiong@suse.com" date="1461153600">- Patches(none-SLE-classic) reviewing for SP2 GNOME 3.20
- REBASED:
  + gnome-shell-add-app-to-desktop.patch
- DROPPED: Upstreamed
  + gnome-shell-use-env-var-for-mode.patch
  + place-menu-handle-special-user-dirs-update.patch
  + 0001-window-list-import-gettext-for-the-right-domain.patch
  + gnome-shell-extensions-bnc872820-wm-button-layout.patch
  + bnc947381-Application-menu-selections-stop-working.patch
- DROPPED: Invalid
  + gnome-classic-move-notification-widget-above.patch</changelog>
  <changelog author="cxiong@suse.com" date="1462449600">- Rebasing SLE Classic (basic) (Fate#318572)
- Add source sle-classic.desktop: xsession file
- Add patch gse-sle-classic-ext.patch: add sle classic support
- DROPPED: Invalid
  + gnome-classic-exts-arrow-fix.patch
  + gnome-sle-classic-ext-build.patch
  + sle-classic.tar.bz2</changelog>
  <changelog author="cxiong@suse.com" date="1462795200">- SLE Classic (REBASING DONE)
  + DROPPED places-menu-use-nautilus-for-links.patch (Invalid)
  + Add workspace-indicator to the build
  + Fix the gap between bottom menu and its button.
  + Fix windows auto-grouping.
  + Hide window list in Overview
  + Clean up spec file.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462968000">- Update to version 3.20.1:
  + Update classic style.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1464004800">- Update to GNOME 3.20.2 fate#318572
  + gse-sle-classic-ext.patch updated.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="yfjiang@suse.com" date="1476187200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + add workspace indicator back for LEAP 42.2</changelog>
  <changelog author="xwang@suse.com" date="1478001600">- Add SUSE logo on lock screen when auth is requested bsc#1007468
  + sle-classic-lock-screen-background.patch
  + SLE-theme.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update patch gse-sle-classic-ext.patch. Fix only half panel shown
  on bottom of desktop when scaling-factor equals 2(Require patched
  gnome-shell)(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
</package>
<package pkgid="e9fbb56224390e3680c26560550887532157f5f7b259005269fb60171a7a54d3" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.20.4" rel="13.1"/>
  <changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
  <changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
  <changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
</package>
<package pkgid="e10ffd5c22618052721c5789355c32972be13abda926e1ec4bb0a4636b962bb6" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.20.4" rel="16.1"/>
  <changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
</package>
<package pkgid="7a4d42da678c682f7bbb2810da53afc501a13c0b40cd29d8bafb8bfd739a9573" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.20.4" rel="19.1"/>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
  <changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
  <changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
  <changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
  <changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
  <changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
  <changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
  <changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
  <changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
  <changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
  <changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
  <changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
  <changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>
  <changelog author="xwang@suse.com" date="1503489600">- Update SLEClassicExt.js. Fix only half panel shown on bottom of
  desktop when scaling-factor equals 2(Require patched
  gnome-shell-extensions)(bsc#1046570).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1508155200">- Add gnome-shell-st-texture-cache-Plug-some-pixbuf-refcount-leaks-on-.patch:
  st-texture-cache: Plug some pixbuf refcount leaks on async
  operations (bsc#1017412, bgo#642652)</changelog>
  <changelog author="xwang@suse.com" date="1533038400">- Add gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide authentication dialogs while screen is locked, backport
  commit cb4252e8 (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="xwang@suse.com" date="1534248000">- Update gnome-shell-hide-authentication-dialogs-while-locked.patch:
  Hide SAMBA authentication dialog when screen is locked
  (bsc#1102648 glgo#GNOME/gnome-shell#166).</changelog>
  <changelog author="hpj@suse.com" date="1544529600">- Add gnome-shell-fix-menutrackeritem-leak.patch (bsc#1093541).</changelog>
</package>
<package pkgid="395199e46b4c4944b204eb4473fe19c04f819b2e753ea60eacf41cabc2843977" name="gnome-shell-search-provider-documents" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="5.1"/>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
</package>
<package pkgid="b8c18a1bab4e4f1699cbf931560e89ba5c64388f7d2c3126f0a7e705a79265d1" name="gnome-shell-search-provider-documents" arch="x86_64">
  <version epoch="0" ver="3.20.1" rel="8.1"/>
  <changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
  <changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
  <changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>
  <changelog author="meissner@suse.com" date="1523448000">- remove dep on libreofficekit. (bsc#1089124)</changelog>
</package>
<package pkgid="ea5369fa87484730017194c965b1e463291cb00aba591a7a3876aa7ef1994c65" name="gnome-shell-search-provider-nautilus" arch="x86_64">
  <version epoch="0" ver="3.20.3" rel="8.3.1"/>
  <changelog author="damjanovic.ivo@gmail.com" date="1453896000">- Update to version 3.19.2:
  + Show free space in Other Places.
  + Add shortcuts window.
  + Fix new window Gnome Shell dash item.
  + Add kudos data for Gnome Software.
  + Check availability of PackageKit for installing extra apps.</changelog>
  <changelog author="mgorse@suse.com" date="1454068800">- Add
  0001-NautilusPropertyDialog-Fix-user-list-for-owner-chang.patch:
  fix handling of the user list (bsc#963724).</changelog>
  <changelog author="zaitor@opensuse.org" date="1456401600">- Update to version 3.19.90:
  + Reorganize shortcuts.
  + Remove bookmark manager.
  + More robust search.
  + Add preference for menu item "Delete Permanently".
  + Add preference for menu item "Create Link".
  + Fix jp2 images crashing nautilus.
  + Change icon of operations cancelation when operation is
    finished.
  + Allow Nautilus windows to be styled differently than other
    applications.
  + Add new search popover and search filtering.
  + Allow different search preferences for remote and local
    separately.
  + Remove sorting preference, since the view menu is the
    preference itself.
  + Allow different view type setting for search and normal.
  + Rework preferences window.
  + Add another zoom level and improve icons padding.
  + Allow to open the "Other Locations" in new tabs or windows.
  + Make operations popover keyboard navigable.
  + Limit search to maximum 5 years.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457697600">- Update to version 3.19.91:
  + Use GTask instead of the old gioscheduler.
  + Improve wording of the conflict dialog.
  + Make dialogs transients and modals for parent windows.
  + Reveal folder on creation.
  + Fix dark theme background.
  + Hide hidden files when renamed from normal files.
  + Select first file while searching even if search didn't
    finished.
  + Multiple localization fixes.
  + Fix the shell search provider.
  + Style fixes with latest gtk+.
  + Hide undo delete notification if the user undo.
  + Don't show thumbnails for small zoom level.
  + Fix the info bar when navigating a DVD or a loopback mounted
    device.
  + Allow copying from the trash.
  + Remove notifications when the application closes, fixing the
    "notifications appear after reboot".
  + Add Open With Other Application for all items, allowing i.e.
    desktop files to be opened with a text editor.
  + Add &lt;alt&gt;+&lt;return&gt; shortcut for properties, matching other
    GNOME applications.
  + Remove the "Untitled" when creating templates.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 3.19.93:
  + Use better arrows for the path bar.
- Changes from version 3.19.92:
  + Use better thread handling in undo operations.
  + Disable zoom and sort menus when the folder is empty.
  + Always show the sliders in the pathbar to avoid pathbar
    clipping.
  + Disable Alt+Home for desktop window, avoiding to change the
    desktop location.
  + Avoid drag and drop visual hint in list view.
  + Make sure we select the previous folder when going upwards in
    the hierarchy.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + Improve path bar sliders sizing, making them less prominent.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop patches:
  + 0001-application-add-force-desktop-action.patch
  + 0001-dnd-fix-dnd-issues-with-Type-Link-desktop-files.patch
  + 0001-NautilusPropertyDialog-Fix-user-list-for-owner-chang.patch
  + 0001-window-sync-initial-state-for-start-with-sidebar-act.patch
  + nautilus-bgo711115-format-item-for-volumes-disappeared.patch
  + nautilus-bgo711583-crash-modify-link-hash-table.patch
  + nautilus-bgo722616-check-for-valid-location-entry-widget.patch
  + nautilus-bnc872820-gtkheaderbar.patch
  + nautilus-desktop-icon-name.patch
  + nautilus-rename-background.patch
  + nautilus-drives-and-volumes-on-desktop.diff</changelog>
  <changelog author="zaitor@opensuse.org" date="1461844800">- Update to version 3.20.1:
  + Fix crash if using scripts.
  + Fix shortcuts to change views mode.
  + Do not switch focus to created tabs.
  + Fix margins on sidebar context popover.
  + Fix the empty states icons blocking clicks for activating
    context menus.
  + Show same name in the path bar as in other locations when using
    mounts.
  + Make more dialogs modal.
  + Allow "move to" action in network locations.
  + Fix crash when searching and closing with multiple windows.
  + Fix path bar not updating to the new location when finalizing
    search.
  + Show an error dialog on falied connection to servers in the
    other locations view.
  + Fix odd empty operations popover.
  + Fix hamburguer menu action not being available when closing a
    tab.
  + Select first item in the views only when searching.
  + Fix crash when creating a new window of nautilus from the shell
    when the application was not running.
  + Allow more applications to be set as default in network
    locations.
  + Make renamed or created files scroll the view to the position
    of the files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2 Fate#318572</changelog>
  <changelog author="qzhao@suse.com" date="1464955200">- Add nautilus-adjust-style-priority.patch: Fix white desktop after
  changing themes: The behavior of two style providers with the
  same priority is undefined and gtk happens to prefer the provider
  that got added last. Use a higher priority here to avoid this
  problem (bsc#982633, bgo#765687).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465905600">- Rebase nautilus-adjust-style-priority.patch to what upstream
  committed (boo#982134).</changelog>
  <changelog author="mgorse@suse.com" date="1466424000">- Add nautilus-bsc979947.patch: only write zoom level to user
  config if the user has adjusted it (bsc#979947).</changelog>
  <changelog author="tyang@suse.com" date="1468584000">- Add nautilus-enable-eject-option-on-selection-menu.patch
  Enable eject option on selection menu (bsc#981950, bgo#768355).</changelog>
  <changelog author="zaitor@opensuse.org" date="1469793600">- Update to version 3.20.2:
  + Fix white desktop background after changing themes.
  + Improve double click detection.
  + Fix path bar menu on wayland appearing on random places.
  + Only save zoom level if the level has changed.
  + Fix date difference calculation for attributes like Modified
    Date.
  + Hide floating bar on hover.
  + Fix detection of remote systems for not thumbnailing.
  + Fix sorting on Japanese locale.
  + Fix gnome shell search provider not being recursive.
  + Fix copy operation lags.
  + Avoid unresponsiveness when file chooser is opened.
  + Fix renaming duplicated logic on search and recent.
  + Fix trash handling to delete files if disk is full.
- Drop nautilus-adjust-style-priority.patch and
  nautilus-bsc979947.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1470139200">- Add nautilus-fix-desktop-icon-smash.patch: Fix desktop icons
  smashed together at the fist start time (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470139201">- Add nautilus-desktop-canvas-view-scale-desktop-workarea.patch:
  The problem is that in the function canvas_container_set_workarea
  the screen width and height are in "application pixels" while the
  workarea ones are in "device pixels" so when the scaling is &gt; 1,
  the margins are not properly setted (bgo#769302).</changelog>
  <changelog author="dimstar@opensuse.org" date="1472558400">- Update to version 3.20.3:
  + Support HDPI in desktop margins.
  + Fix opaque desktop background after changing themes.
  + Fix gnome-shell search not providing results or making the CPU
    at 100% even if closed.
- Drop nautilus-desktop-canvas-view-scale-desktop-workarea.patch:
  fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1475668800">- Add fix-crash-when-missing-desktop-icon-size-bsc1001692.diff:
  Fix a crash in nautilus when the desktop-metadata file doesn't
  contain a nautilus-desktop-icon-size entry
  (bsc#1001692, bgo#747662)</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="qzheng@suse.com" date="1525262400">- Add use-file-metadata-for-trusting-desktop-files.patch:
  Make backport from upstream. This patch add a metadata::trusted
  metadata to the file once the user acknowledges the file as
  trusted, and also remove the "trusted" content in the desktop
  file ( bsc#1060031, CVE-2017-14604 ).</changelog>
</package>
<package pkgid="cb3d772246b92043ba83f0e5a8162d652aacb8c929cb650749b99bc3f78e5eea" name="gnome-shell-search-provider-nautilus" arch="x86_64">
  <version epoch="0" ver="3.20.3" rel="8.7.1"/>
  <changelog author="zaitor@opensuse.org" date="1456401600">- Update to version 3.19.90:
  + Reorganize shortcuts.
  + Remove bookmark manager.
  + More robust search.
  + Add preference for menu item "Delete Permanently".
  + Add preference for menu item "Create Link".
  + Fix jp2 images crashing nautilus.
  + Change icon of operations cancelation when operation is
    finished.
  + Allow Nautilus windows to be styled differently than other
    applications.
  + Add new search popover and search filtering.
  + Allow different search preferences for remote and local
    separately.
  + Remove sorting preference, since the view menu is the
    preference itself.
  + Allow different view type setting for search and normal.
  + Rework preferences window.
  + Add another zoom level and improve icons padding.
  + Allow to open the "Other Locations" in new tabs or windows.
  + Make operations popover keyboard navigable.
  + Limit search to maximum 5 years.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457697600">- Update to version 3.19.91:
  + Use GTask instead of the old gioscheduler.
  + Improve wording of the conflict dialog.
  + Make dialogs transients and modals for parent windows.
  + Reveal folder on creation.
  + Fix dark theme background.
  + Hide hidden files when renamed from normal files.
  + Select first file while searching even if search didn't
    finished.
  + Multiple localization fixes.
  + Fix the shell search provider.
  + Style fixes with latest gtk+.
  + Hide undo delete notification if the user undo.
  + Don't show thumbnails for small zoom level.
  + Fix the info bar when navigating a DVD or a loopback mounted
    device.
  + Allow copying from the trash.
  + Remove notifications when the application closes, fixing the
    "notifications appear after reboot".
  + Add Open With Other Application for all items, allowing i.e.
    desktop files to be opened with a text editor.
  + Add &lt;alt&gt;+&lt;return&gt; shortcut for properties, matching other
    GNOME applications.
  + Remove the "Untitled" when creating templates.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 3.19.93:
  + Use better arrows for the path bar.
- Changes from version 3.19.92:
  + Use better thread handling in undo operations.
  + Disable zoom and sort menus when the folder is empty.
  + Always show the sliders in the pathbar to avoid pathbar
    clipping.
  + Disable Alt+Home for desktop window, avoiding to change the
    desktop location.
  + Avoid drag and drop visual hint in list view.
  + Make sure we select the previous folder when going upwards in
    the hierarchy.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 3.20.0:
  + Improve path bar sliders sizing, making them less prominent.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop patches:
  + 0001-application-add-force-desktop-action.patch
  + 0001-dnd-fix-dnd-issues-with-Type-Link-desktop-files.patch
  + 0001-NautilusPropertyDialog-Fix-user-list-for-owner-chang.patch
  + 0001-window-sync-initial-state-for-start-with-sidebar-act.patch
  + nautilus-bgo711115-format-item-for-volumes-disappeared.patch
  + nautilus-bgo711583-crash-modify-link-hash-table.patch
  + nautilus-bgo722616-check-for-valid-location-entry-widget.patch
  + nautilus-bnc872820-gtkheaderbar.patch
  + nautilus-desktop-icon-name.patch
  + nautilus-rename-background.patch
  + nautilus-drives-and-volumes-on-desktop.diff</changelog>
  <changelog author="zaitor@opensuse.org" date="1461844800">- Update to version 3.20.1:
  + Fix crash if using scripts.
  + Fix shortcuts to change views mode.
  + Do not switch focus to created tabs.
  + Fix margins on sidebar context popover.
  + Fix the empty states icons blocking clicks for activating
    context menus.
  + Show same name in the path bar as in other locations when using
    mounts.
  + Make more dialogs modal.
  + Allow "move to" action in network locations.
  + Fix crash when searching and closing with multiple windows.
  + Fix path bar not updating to the new location when finalizing
    search.
  + Show an error dialog on falied connection to servers in the
    other locations view.
  + Fix odd empty operations popover.
  + Fix hamburguer menu action not being available when closing a
    tab.
  + Select first item in the views only when searching.
  + Fix crash when creating a new window of nautilus from the shell
    when the application was not running.
  + Allow more applications to be set as default in network
    locations.
  + Make renamed or created files scroll the view to the position
    of the files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2 Fate#318572</changelog>
  <changelog author="qzhao@suse.com" date="1464955200">- Add nautilus-adjust-style-priority.patch: Fix white desktop after
  changing themes: The behavior of two style providers with the
  same priority is undefined and gtk happens to prefer the provider
  that got added last. Use a higher priority here to avoid this
  problem (bsc#982633, bgo#765687).</changelog>
  <changelog author="zaitor@opensuse.org" date="1465905600">- Rebase nautilus-adjust-style-priority.patch to what upstream
  committed (boo#982134).</changelog>
  <changelog author="mgorse@suse.com" date="1466424000">- Add nautilus-bsc979947.patch: only write zoom level to user
  config if the user has adjusted it (bsc#979947).</changelog>
  <changelog author="tyang@suse.com" date="1468584000">- Add nautilus-enable-eject-option-on-selection-menu.patch
  Enable eject option on selection menu (bsc#981950, bgo#768355).</changelog>
  <changelog author="zaitor@opensuse.org" date="1469793600">- Update to version 3.20.2:
  + Fix white desktop background after changing themes.
  + Improve double click detection.
  + Fix path bar menu on wayland appearing on random places.
  + Only save zoom level if the level has changed.
  + Fix date difference calculation for attributes like Modified
    Date.
  + Hide floating bar on hover.
  + Fix detection of remote systems for not thumbnailing.
  + Fix sorting on Japanese locale.
  + Fix gnome shell search provider not being recursive.
  + Fix copy operation lags.
  + Avoid unresponsiveness when file chooser is opened.
  + Fix renaming duplicated logic on search and recent.
  + Fix trash handling to delete files if disk is full.
- Drop nautilus-adjust-style-priority.patch and
  nautilus-bsc979947.patch: Fixed upstream.</changelog>
  <changelog author="qzhao@suse.com" date="1470139200">- Add nautilus-fix-desktop-icon-smash.patch: Fix desktop icons
  smashed together at the fist start time (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1470139201">- Add nautilus-desktop-canvas-view-scale-desktop-workarea.patch:
  The problem is that in the function canvas_container_set_workarea
  the screen width and height are in "application pixels" while the
  workarea ones are in "device pixels" so when the scaling is &gt; 1,
  the margins are not properly setted (bgo#769302).</changelog>
  <changelog author="dimstar@opensuse.org" date="1472558400">- Update to version 3.20.3:
  + Support HDPI in desktop margins.
  + Fix opaque desktop background after changing themes.
  + Fix gnome-shell search not providing results or making the CPU
    at 100% even if closed.
- Drop nautilus-desktop-canvas-view-scale-desktop-workarea.patch:
  fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1475668800">- Add fix-crash-when-missing-desktop-icon-size-bsc1001692.diff:
  Fix a crash in nautilus when the desktop-metadata file doesn't
  contain a nautilus-desktop-icon-size entry
  (bsc#1001692, bgo#747662)</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="qzheng@suse.com" date="1525262400">- Add use-file-metadata-for-trusting-desktop-files.patch:
  Make backport from upstream. This patch add a metadata::trusted
  metadata to the file once the user acknowledges the file as
  trusted, and also remove the "trusted" content in the desktop
  file ( bsc#1060031, CVE-2017-14604 ).</changelog>
  <changelog author="xwang@suse.com" date="1535457600">- Add set_trusted.desktop and set_trusted.sh: If using /etc/skel
  function, the script can set files in $HOME/Desktop as trusted
  automatically when user login (bsc#1103523).</changelog>
  <changelog author="xwang@suse.com" date="1539000000">- Update set_trusted.desktop and set_trusted.sh: Move
  set_trusted.desktop file to /etc/skel/.config/autostart
  (bsc#1103523 bsc#1107854).</changelog>
</package>
<package pkgid="7e57fbbef33cb4ebf19a8690adcb3d63e9aee35f54286ff5117425ff54e4ded9" name="gnome-version" arch="x86_64">
  <version epoch="0" ver="3.20.2" rel="6.1"/>
  <changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
  <changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
  <changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
  <changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
</package>
<package pkgid="31c7cccef032e9264d62cfd68b02ff7d9d5fb0b3dcda400fba6a08763d764e8a" name="gnu-compilers-hpc" arch="noarch">
  <version epoch="0" ver="1.3" rel="2.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
</package>
<package pkgid="192610b7dba51951ac9797d58ac217be43d90192c589853f9cc56c8acda17e13" name="gnu-compilers-hpc" arch="src">
  <version epoch="0" ver="1.3" rel="2.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
</package>
<package pkgid="74ab350db78fe34e632e8855c35b79b048d9c1b124c5d263537a1c869b433f6c" name="gnu-compilers-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.3" rel="2.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
</package>
<package pkgid="a51f7aed61e4f3c646c157443b7369b0224ef4fd2f0ae77a54bcdda3e54118d3" name="gnu-compilers-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="1.3" rel="2.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
</package>
<package pkgid="f3579fec83a44e7de6334f073e839f2562fc1299e4925c39b43f382e3c287af7" name="gnucash-docs" arch="noarch">
  <version epoch="0" ver="2.6.16" rel="8.3.1"/>
  <changelog author="andrea.turrini@gmail.com" date="1317038400">- Fix typo in description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1342785600">- Add a self created source tarball, directly exported from svn.
  The upstream provided tarball misses a bunch of file (notably in
  the german language), which are all in svn, but due them not
  being listed in Makefile.am, make dist did not add them to the
  tarball (Addresses part of bnc#771530).
- Add gnucash-docs-fixup.patch: mark the missing files to be
  installed as well.
- Add libtool BuildRequires and call autogen.sh in build section,
  as this tarball has not been preprocessed at all.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353412800">- Update to version 2.4.2:
  + New or improved documentation for "Data migration".
  + New documentation formats: epub and mobi.
  + Several small updates and fixes.
  + Updated translations.
- Drop gnucash-docs-fixup.patch: fixed upstream.
- Drop libtool BuildRequires and call to autogen.sh, as we are
  able to use the upstream tarball again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1386763200">- Replace scrollkeeper BuildRequires with xsltproc and
  rarian-scrollkeeper-compat: scrollkeeper has been replaced by
  rarian. Scrollkeeper also pulled in xsltproc, but that was not
  an entirely correct requirement.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390392000">- Update to version 2.6.0:
  + Updated documentation for new GnuCash stable version 2.6.0:
  - Update Preferences section.
  - Menu and Toolbar references.
  - Update Business Documentation: Bobby Ratliff.
  - Budget Features: Bobby Ratliff.
  + Update Copyrights, Author lists, and metadata.
  + Add facility to publish docs as e-pubs.
  + Bugs fixed: bgo#513122, bgo#604519, bgo#608932, bgo#633524,
    bgo#638955, bgo#639264, bgo#661705, bgo#670354, bgo#672668,
    bgo#684709, bgo#687476, bgo#688425, bgo#688579, bgo#688968,
    bgo#691762, bgo#692917, bgo#693493, bgo#699430, bgo#700656,
    bgo#702039, bgo#712308:, bgo#715161.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1391342400">- Update to version 2.6.1:
  + First documention updates for credit notes.
  + Adapt migration documentation to gsettings introduction.
  + Move most of the text regarding business features from guide to
    help, correct links and wording and many small improvements.
  + Add information about the Business tab in book options window.
  + Enable building Japanese PDF without requiring Debian or
    downloading fonts from anywhere.
  + Add Fedora font paths.
  + Adjust image after update.
  + Doc/guide/C: add cash account to accts-examples-organization2.
  + Docs/guide/de: minor corrections of spelling.
  + Updated translations.</changelog>
  <changelog author="ro@suse.de" date="1391515200">- Drop kdelibs3-doc BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394798400">- Update to version 2.6.2:
  + Help text for Employee section missing (bgo#547386).
  + One error and some typos in documentation (bgo#723173).
  + Dividends reinvested example text doesn't match graphic. Also
    remove a useless figure and improve text (bgo#725013).
  + Assorted typos and version number corrections.</changelog>
  <changelog author="zaitor@opensuse.org" date="1396699200">- Update to version 2.6.3:
  + There have been no documentation changes since 2.6.2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412078400">- Update to version 2.6.4:
  + Add sentence about manually editing payment information for
    customers.
  + Add warning and tip about account separator character.
  + Correct field format in python-import-fields.
  + Currency movements .. remain fully balanced if "Trading
    Accounts" is enabled; "double entry" was not sufficient.
  + Improve explanation that Credit does NOT decrease equity
    accounts.
  + Improve readability of "Credit does NOT decrease ...".
  + New chapters in the German translation: Overview, Basics, and
    Accounts.
  + Reduced proportional width of description column to increase
    overall font size for a 510 pixel width image.
  + Remove a few discrepancies between the german guide overview
    and other components.
  + Update of translators in gnucash-guide-de.omf
  + Updated documentation to explain how to tie dividends received
    in cash to the appropriate stock holding.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422446400">- Update to version 2.6.5:
  + Fix a path of freshly added XML files.
  + Add some comments about translation to the German documents
    where the translation wasn't updated to match the English
    version.
  + Apply &amp;untranslated property in German translations.
  + Fix bgo#739380: Release tarball build fails. Git builds OK.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428408000">- Update to version 2.6.6:
  + Explain sorting by TXF code within Tax Form Sections.
  + Insert Part designations and update the Basics Chapter.
  + Document latest changes to the Advanced Portfolio Report.
  + Remove obolete sections about "Cannot find default values" left
    over from gconf.</changelog>
  <changelog author="zaitor@opensuse.org" date="1436356800">- Update to version 2.6.7:
  + Fix typo.
  + Verbessere Erklärung Soll &amp; Haben.
  + Add source link and translator comment to
    Help_txf-categories.xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452600000">- Update to version 2.6.11:
  + Kep documentation in sync for latest release.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467028800">- Update to version 2.6.12:
  + Update instructions for updating quote prices by cron.
  + Add links to where common report preferences are set.
  + Setting number format details appear wrong in Help, section
    10.3.4. Counters Book Options Tab.
  + Update documentation for Invoice and Bill payments to reflect
    the new features.
  + Add missing sect Guide ch2.8: New book options in New Acct
    Hierarchy.
  + Remove Section 9.4.3 From Guide that offered simplistic advice
    about money and life that does nothing to explain GnuCash
    functionality or use.
  + Add note to Guide section 2.3.3 For Column Widths.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Update to version 2.6.14:
  + Update the list of Finance::Quote methods to 1.38.
  + Bugs fixed: bgo#115461, bgo#687290, bgo#769457, bgo#769746,
    bgo#771230, bgo#769663.
  + Updated translations.
- Changes from version 2.6.13:
  + Fix unclear statement re docbook stylesheets in README.
  + Fix the very stale Release Schedule link in the Guide.
  + Bugs fixed: bgo#637004, bgo#712764, bgo#751686, bgo#754239,
    bgo#754239, bgo#765131.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484913600">- Update to version 2.6.15:
  + Fix resolution of screenshots.
  + Bugs fixed: bgo#397135, bgo#633590, bgo#743671, bgo#755174,
    bgo#770371, bgo#775592, bgo#775919.
  + Updated translations.
- Drop rarian-scrollkeeper-compat BuildRequires: No longer strictly
  needed.
- Drop libgnome BuildRequires: Previously added just for for dir
  ownership. In stead just plainly own dirs in filelist.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487937600">- Fixup sourceurl and add proper tarball, the previous sub had the
  tarball named download.</changelog>
  <changelog author="sfalken@opensuse.org" date="1490788800">- Update to version 2.6.16:
  + Remove section "Changing the Register View" as better handled
    in Guide section 4.2.
  + Glossary: Transactions have at least 2 splits.
  + Bugs Fixed: bgo#755174, bgo#769457, bgo#774658, bgo#777318
    bgo#777287.</changelog>
  <changelog author="rpm@fthiessen.de" date="1545566400">-  Recommend gnome-help, so GnuCash is able to retrieve and open
  guide files (boo#1099804)</changelog>
</package>
<package pkgid="68109fe121f9ff861d90074617b39adf6e1aaf71dead1a68d01ab12f862515c5" name="gnucash-docs" arch="src">
  <version epoch="0" ver="2.6.16" rel="8.3.1"/>
  <changelog author="andrea.turrini@gmail.com" date="1317038400">- Fix typo in description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1342785600">- Add a self created source tarball, directly exported from svn.
  The upstream provided tarball misses a bunch of file (notably in
  the german language), which are all in svn, but due them not
  being listed in Makefile.am, make dist did not add them to the
  tarball (Addresses part of bnc#771530).
- Add gnucash-docs-fixup.patch: mark the missing files to be
  installed as well.
- Add libtool BuildRequires and call autogen.sh in build section,
  as this tarball has not been preprocessed at all.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353412800">- Update to version 2.4.2:
  + New or improved documentation for "Data migration".
  + New documentation formats: epub and mobi.
  + Several small updates and fixes.
  + Updated translations.
- Drop gnucash-docs-fixup.patch: fixed upstream.
- Drop libtool BuildRequires and call to autogen.sh, as we are
  able to use the upstream tarball again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1386763200">- Replace scrollkeeper BuildRequires with xsltproc and
  rarian-scrollkeeper-compat: scrollkeeper has been replaced by
  rarian. Scrollkeeper also pulled in xsltproc, but that was not
  an entirely correct requirement.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390392000">- Update to version 2.6.0:
  + Updated documentation for new GnuCash stable version 2.6.0:
  - Update Preferences section.
  - Menu and Toolbar references.
  - Update Business Documentation: Bobby Ratliff.
  - Budget Features: Bobby Ratliff.
  + Update Copyrights, Author lists, and metadata.
  + Add facility to publish docs as e-pubs.
  + Bugs fixed: bgo#513122, bgo#604519, bgo#608932, bgo#633524,
    bgo#638955, bgo#639264, bgo#661705, bgo#670354, bgo#672668,
    bgo#684709, bgo#687476, bgo#688425, bgo#688579, bgo#688968,
    bgo#691762, bgo#692917, bgo#693493, bgo#699430, bgo#700656,
    bgo#702039, bgo#712308:, bgo#715161.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1391342400">- Update to version 2.6.1:
  + First documention updates for credit notes.
  + Adapt migration documentation to gsettings introduction.
  + Move most of the text regarding business features from guide to
    help, correct links and wording and many small improvements.
  + Add information about the Business tab in book options window.
  + Enable building Japanese PDF without requiring Debian or
    downloading fonts from anywhere.
  + Add Fedora font paths.
  + Adjust image after update.
  + Doc/guide/C: add cash account to accts-examples-organization2.
  + Docs/guide/de: minor corrections of spelling.
  + Updated translations.</changelog>
  <changelog author="ro@suse.de" date="1391515200">- Drop kdelibs3-doc BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394798400">- Update to version 2.6.2:
  + Help text for Employee section missing (bgo#547386).
  + One error and some typos in documentation (bgo#723173).
  + Dividends reinvested example text doesn't match graphic. Also
    remove a useless figure and improve text (bgo#725013).
  + Assorted typos and version number corrections.</changelog>
  <changelog author="zaitor@opensuse.org" date="1396699200">- Update to version 2.6.3:
  + There have been no documentation changes since 2.6.2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412078400">- Update to version 2.6.4:
  + Add sentence about manually editing payment information for
    customers.
  + Add warning and tip about account separator character.
  + Correct field format in python-import-fields.
  + Currency movements .. remain fully balanced if "Trading
    Accounts" is enabled; "double entry" was not sufficient.
  + Improve explanation that Credit does NOT decrease equity
    accounts.
  + Improve readability of "Credit does NOT decrease ...".
  + New chapters in the German translation: Overview, Basics, and
    Accounts.
  + Reduced proportional width of description column to increase
    overall font size for a 510 pixel width image.
  + Remove a few discrepancies between the german guide overview
    and other components.
  + Update of translators in gnucash-guide-de.omf
  + Updated documentation to explain how to tie dividends received
    in cash to the appropriate stock holding.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422446400">- Update to version 2.6.5:
  + Fix a path of freshly added XML files.
  + Add some comments about translation to the German documents
    where the translation wasn't updated to match the English
    version.
  + Apply &amp;untranslated property in German translations.
  + Fix bgo#739380: Release tarball build fails. Git builds OK.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428408000">- Update to version 2.6.6:
  + Explain sorting by TXF code within Tax Form Sections.
  + Insert Part designations and update the Basics Chapter.
  + Document latest changes to the Advanced Portfolio Report.
  + Remove obolete sections about "Cannot find default values" left
    over from gconf.</changelog>
  <changelog author="zaitor@opensuse.org" date="1436356800">- Update to version 2.6.7:
  + Fix typo.
  + Verbessere Erklärung Soll &amp; Haben.
  + Add source link and translator comment to
    Help_txf-categories.xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452600000">- Update to version 2.6.11:
  + Kep documentation in sync for latest release.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467028800">- Update to version 2.6.12:
  + Update instructions for updating quote prices by cron.
  + Add links to where common report preferences are set.
  + Setting number format details appear wrong in Help, section
    10.3.4. Counters Book Options Tab.
  + Update documentation for Invoice and Bill payments to reflect
    the new features.
  + Add missing sect Guide ch2.8: New book options in New Acct
    Hierarchy.
  + Remove Section 9.4.3 From Guide that offered simplistic advice
    about money and life that does nothing to explain GnuCash
    functionality or use.
  + Add note to Guide section 2.3.3 For Column Widths.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Update to version 2.6.14:
  + Update the list of Finance::Quote methods to 1.38.
  + Bugs fixed: bgo#115461, bgo#687290, bgo#769457, bgo#769746,
    bgo#771230, bgo#769663.
  + Updated translations.
- Changes from version 2.6.13:
  + Fix unclear statement re docbook stylesheets in README.
  + Fix the very stale Release Schedule link in the Guide.
  + Bugs fixed: bgo#637004, bgo#712764, bgo#751686, bgo#754239,
    bgo#754239, bgo#765131.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484913600">- Update to version 2.6.15:
  + Fix resolution of screenshots.
  + Bugs fixed: bgo#397135, bgo#633590, bgo#743671, bgo#755174,
    bgo#770371, bgo#775592, bgo#775919.
  + Updated translations.
- Drop rarian-scrollkeeper-compat BuildRequires: No longer strictly
  needed.
- Drop libgnome BuildRequires: Previously added just for for dir
  ownership. In stead just plainly own dirs in filelist.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487937600">- Fixup sourceurl and add proper tarball, the previous sub had the
  tarball named download.</changelog>
  <changelog author="sfalken@opensuse.org" date="1490788800">- Update to version 2.6.16:
  + Remove section "Changing the Register View" as better handled
    in Guide section 4.2.
  + Glossary: Transactions have at least 2 splits.
  + Bugs Fixed: bgo#755174, bgo#769457, bgo#774658, bgo#777318
    bgo#777287.</changelog>
  <changelog author="rpm@fthiessen.de" date="1545566400">-  Recommend gnome-help, so GnuCash is able to retrieve and open
  guide files (boo#1099804)</changelog>
</package>
<package pkgid="3ff62903213b91132a8083c4ee623b3d2d18f60549f83b38b0b5709fae8fe620" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="15.1"/>
  <changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
</package>
<package pkgid="b0fc841fa75c160e586ec8e9c771f5a0cdec85a641195de0037bc2d3f6483812" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.1" rel="15.1"/>
  <changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
</package>
<package pkgid="3a6736e46c5844fcba266e34092a5b219fc8163b8ef9bf334fc36ce61fb46d78" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="18.1"/>
  <changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
</package>
<package pkgid="f2d91ace531a51933019dfa781d30810262b85d8746ce011c49996f858377726" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.1" rel="18.1"/>
  <changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
</package>
<package pkgid="a46e407f9abb9e4950b8b64a1d988b5380c77b62c5d63e4eb4f8c62872c88580" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="44.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="681ae4ab6d972c7a24650b630b1839b06b656d9d5a8ea2e881df52d5c4007c68" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="44.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="3828bef4cd132fdb90c4d5bd611113ad86873effe56c343acdc909e6c5bbcc18" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="47.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="0cbdcbc14a6cd3d5c6ecc97330e2479ff66e24461b0319553301e86a3f241c67" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="47.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="e6000cef90e7278c578c0f19048ef33c505c6d964af9dc1b952c519640e7970c" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="21.1"/>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
</package>
<package pkgid="4d2a4d3dc3350f77ab9b73fa46579036ea14a6d447b051d3192ac0c45c93a019" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.2" rel="21.1"/>
  <changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
</package>
<package pkgid="8d8939ba537c478b79e8e685932f2e39edc9554429a14c4cc62c90f75337d26a" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.3" rel="24.1"/>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
</package>
<package pkgid="293c2dd74962fa9ff5a6b1a30006d5c5736e28004903ff32ce2e3b05377661e9" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.3" rel="24.1"/>
  <changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
</package>
<package pkgid="e9dfb4229da6a1aaf13e92787450621515527ebe8a6d8ced67f00673f2500b7b" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.5" rel="29.1"/>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
</package>
<package pkgid="ac97534804dd0030aaec0a33c2ada4e7c58ec667fe59af246047dc7e8de3b0f2" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.5" rel="29.1"/>
  <changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
</package>
<package pkgid="a3ce30305b592234c88c7a2a9ff0544c9842d0ce52304ec46cd3f0abd854bf57" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.5" rel="32.1"/>
  <changelog author="axel.braun@gmx.de" date="1477137600">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
</package>
<package pkgid="8635d582fd601658ba2fd2c81aae2cab3c567848567ad199ff9fc2f36a86fba5" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.5" rel="32.1"/>
  <changelog author="axel.braun@gmx.de" date="1477137600">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
</package>
<package pkgid="ac6d80963e747dc2fe83ef976334a7ba71b280eb88253166d022c2ba5a2787bc" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.6" rel="35.1"/>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
</package>
<package pkgid="794f2cf01cb5cfc4ee16ebb19ce0908ae33d3198000a1a68bc01cc2d7a13da5c" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.6" rel="35.1"/>
  <changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
  <changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
</package>
<package pkgid="84193e8bf9f35d8ef0ee4192455013b7f5206dcd6aa0e8acca26e1a74864982e" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="38.1"/>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
</package>
<package pkgid="4548352004177baf97c0b271830b1d701b0cb1fda8a6ef5908bb19680810dffe" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.8" rel="38.1"/>
  <changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
</package>
<package pkgid="a84e351bddaeabe8478be121c5999ded6781031b82583ef4abc2aedd424ec420" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.9" rel="41.1"/>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
</package>
<package pkgid="fe72049e234dd207288b9d62ba30ce0197abcc76cf452616123715bdc580f24f" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.9" rel="41.1"/>
  <changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
  <changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
</package>
<package pkgid="ae4902354549e1efadad79f42c340b51bf7306808587c369dc62e62e8c101939" name="gnuhealth-client" arch="noarch">
  <version epoch="0" ver="3.2.5" rel="2.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
</package>
<package pkgid="3e974fc90dff097e27fcefad803a66ea99fa08f2606a8f5f57158769e3b4ad3e" name="gnuhealth-client" arch="src">
  <version epoch="0" ver="3.2.5" rel="2.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
</package>
<package pkgid="8ee722cb5b79a2328bda285e29c58fd20bc08298c6715ce54f310309f40e3d21" name="gnustep-base" arch="src">
  <version epoch="0" ver="1.25.0" rel="3.1"/>
  <changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
  <changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
  <changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
  <changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
  <changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
  <changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
  <changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>
</package>
<package pkgid="918f378fc2a934c0422772484b848df5e17a774780804262f6853df38e5b559f" name="gnustep-base" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="3.1"/>
  <changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
  <changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
  <changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
  <changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
  <changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
  <changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
  <changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>
</package>
<package pkgid="29d4e4008dbd8a1ca755682a85b5461a8c25497d11a634ab436d2604e5128c1e" name="gnustep-base-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="3.1"/>
  <changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
  <changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
  <changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
  <changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
  <changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
  <changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
  <changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
  <changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
  <changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>
</package>
<package pkgid="d5162d1b853aa3c3a877be5de15136af15e5a06c9e8e6da8b387a3eafc5301a6" name="gnutls" arch="src">
  <version epoch="0" ver="3.3.27" rel="2.3.1"/>
  <changelog author="meissner@suse.com" date="1401796800">- Version 3.2.15 (released 2014-05-30)
  * * libgnutls: Eliminated memory corruption issue in Server Hello parsing.
  Issue reported by Joonas Kuorilehto of Codenomicon. (CVE-2014-3466 / bnc#880730)
  * * libgnutls: Several memory leaks caused by error conditions were
  fixed. The leaks were identified using valgrind and the Codenomicon
  TLS test suite.
  * * libgnutls: Increased the maximum certificate size buffer
  in the PKCS #11 subsystem.
  * * libgnutls: Check the return code of getpwuid_r() instead of relying
  on the result value. That avoids issue in certain systems, when using
  tofu authentication and the home path cannot be determined. Issue reported
  by Viktor Dukhovni.
  * * gnutls-cli: if dane is requested but not PKIX verification, then
  only do verify the end certificate.
  * * ocsptool: Include path in ocsp request. This resolves #108582
  (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.
- Version 3.2.14 (released 2014-05-06)
  * * libgnutls: Fixed issue with the check of incoming data when two
  different recv and send pointers have been specified. Reported and
  investigated by JMRecio.
  * * libgnutls: Fixed issue in the RSA-PSK key exchange, which would
  result to illegal memory access if a server hint was provided.
  * * libgnutls: Fixed client memory leak in the PSK key exchange, if a
  server hint was provided.
  * * libgnutls: Several small bug fixes identified using valgrind and
  the Codenomicon TLS test suite.
  * * libgnutls: Several small bug fixes found by coverity.
  * * libgnutls-dane: Accept a certificate using DANE if there is at least one
  entry that matches the certificate. Patch by simon [at] arlott.org.
  * * configure: Added --with-nettle-mini option, which allows linking
  with a libnettle that contains gmp.
  * * certtool: The ECDSA keys generated by default use the SECP256R1 curve
  which is supported more widely than the previously used SECP224R1.
- CVE-2014-3466.patch: is upstream.</changelog>
  <changelog author="citypw@gmail.com" date="1407067200">- Upgrade to Version 3.2.16 (released 2014-07-23)
  * * libgnutls: Do not call the post client hello callback twice when resuming
  using session tickets.
  * * libgnutls: When the decoding of a printable DN element fails, then treat
  it as unknown and print its hex value rather than failing. That works around
  an issue in a TURKTRST root certificate which improperly encodes the
  X520countryName element.
  * * libgnutls: IP addresses are printed using inet_ntop() when available.
  * * libgnutls: gnutls_x509_crt_check_hostname will also check IP addresses
  and match documented behavior. Reported by David Woodhouse.
  * * libgnutls: Fixed PKCS #11 ECDSA key generation.
  * * p11tool: use GNUTLS_SO_PIN to read the security officer's PIN if set.
  * * p11tool: will not implicitly enable so-login for certain types of
  objects. That avoids issues with tokens that require different login
  types.
  * * API and ABI modifications:
  No changes since last version.
  delete files: gnutls-3.2.15.tar.xz, gnutls-3.2.15.tar.xz.sig,
  audit-improve.patch( already in upstream)
  Add files: gnutls-3.2.16.tar.xz, gnutls-3.2.16.tar.xz.sig</changelog>
  <changelog author="citypw@gmail.com" date="1409486400">- Upgrade to Version 3.2.17 (released 2014-08-24)
  * * libgnutls: initialize parameters variable on PKCS #8 decryption.
  * * libgnutls: Explicitly set the exponent in PKCS #11 key generation.
  That improves compatibility with certain PKCS #11 modules. Contributed by
  Wolfgang Meyer zu Bergsten.
  * * libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1
  algorithms.
  * * libgnutls: when checking the hostname of a certificate with multiple CNs
  ensure that the "most specific" CN is being used.
  * * libgnutls: In DTLS ignore only errors that relate to unexpected packets
  and decryption failures.
  Delete files: gnutls-3.2.16.tar.xz, gnutls-3.2.16.tar.xz.sig
  Add files: gnutls-3.2.17.tar.xz, gnutls-3.2.17.tar.xz.sig</changelog>
  <changelog author="dmueller@suse.com" date="1411128000">- update list of available architectures for valgrind</changelog>
  <changelog author="citypw@gmail.com" date="1411560000">* Upgrade to Version 3.2.18 (released 2014-09-18)
  * * libgnutls: Fixes in gnutls_x509_crt_set_dn() and friends to properly handle
  strings with embedded spaces and escaped commas.
  * * libgnutls: Corrected gnutls_x509_crl_verify() which would always report
  a CRL signature as invalid. Reported by Armin Burgmeier.
  * * libgnutls: Fixed issue with certificates being sanitized by gnutls prior
  to signature verification. That resulted to certain non-DER compliant modifications
  of valid certificates, being corrected by libtasn1's parser and restructured as
  the original. Issue found and reported by Antti Karjalainen and Matti Kamunen from
  Codenomicon.
  * * API and ABI modifications:
  No changes since last version.
  Delete files: gnutls-3.2.17.tar.xz, gnutls-3.2.17.tar.xz.sig
  Add files: gnutls-3.2.18.tar.xz, gnutls-3.2.18.tar.xz.sig</changelog>
  <changelog author="meissner@suse.com" date="1415793600">- gnutls-CVE-2014-8564.patch: Fixed parsing problem in elliptic
  curve blobs over TLS that could lead to remote crashes.
  (bnc#904603 CVE-2014-8564)</changelog>
  <changelog author="meissner@suse.com" date="1415793601">- Updated to 3.2.20 (released 2014-11-10)
  * * libgnutls: Removed superfluous random generator refresh on every
    call of gnutls_deinit(). That reduces load and usage of /dev/urandom.
  * * libgnutls: Corrected issue in export of ECC parameters to X9.63
    format.  Reported by Sean Burford [GNUTLS-SA-2014-5].
  (CVE-2014-8564 bnc#904603)
- Updated to 3.2.19 (released 2014-10-13)
  * * libgnutls: Fixes in the transparent import of PKCS #11 certificates.
    Reported by Joseph Peruski.
  * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the
    handshake's hash buffer, in applications using the heartbeat extension
    or DTLS. Reported by Joeri de Ruiter.
  * * libgnutls: fix issue in DTLS retransmission when session tickets were
    in use; reported by Manuel Pégourié-Gonnard.
  * * libgnutls: Prevent abort() in library if getrusage() fails. Try to
    detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work.
  * * guile: new 'set-session-server-name!' procedure; see the manual
    for details.</changelog>
  <changelog author="meissner@suse.com" date="1420027200">- Updated to 3.2.21 (released 2014-12-11)
  - libgnutls: Corrected regression introduced in 3.2.19 related to
    session renegotiation. Reported by Dan Winship.
  - libgnutls: Corrected parsing issue with OCSP responses.</changelog>
  <changelog author="meissner@suse.com" date="1420027201">- build with PIE for commandline tools</changelog>
  <changelog author="vcizek@suse.com" date="1426680000">- fix for CVE-2015-0294 (bnc#919938)
  * certificate algorithm consistency checking issue
  * added gnutls-CVE-2015-0294.patch</changelog>
  <changelog author="meissner@suse.com" date="1426939200">- added unbound-devel (for DANE) and trousers-devel (for TPM support)
- removed now upstreamed gnutls-implement-trust-store-dir-3.2.8.diff
- libgnutls-dane0 new library added
- updated to 3.3.13 (released 2015-02-25)
  * * libgnutls: Enable AESNI in GCM on x86
  * * libgnutls: Fixes in DTLS message handling
  * * libgnutls: Check certificate algorithm consistency, i.e.,
    check whether the signatureAlgorithm field matches the signature
    field inside TBSCertificate.
  * * gnutls-cli: Fixes in OCSP verification.
- Version 3.3.12 (released 2015-01-17)
  * * libgnutls: When negotiating TLS use the lowest enabled version in
  the client hello, rather than the lowest supported. In addition, do
  not use SSL 3.0 as a version in the TLS record layer, unless SSL 3.0
  is the only protocol supported. That addresses issues with servers that
  immediately drop the connection when the encounter SSL 3.0 as the record
  version number. See:
  http://lists.gnutls.org/pipermail/gnutls-help/2014-November/003673.html
  * * libgnutls: Corrected encoding and decoding of ANSI X9.62 parameters.
  * * libgnutls: Handle zero length plaintext for VIA PadLock functions.
  This solves a potential crash on AES encryption for small size plaintext.
  Patch by Matthias-Christian Ott.
  * * libgnutls: In DTLS don't combine multiple packets which exceed MTU.
  Reported by Andreas Schultz. https://savannah.gnu.org/support/?108715
  * * libgnutls: In DTLS decode all handshake packets present in a record
  packet, in a single pass. Reported by Andreas Schultz.
  https://savannah.gnu.org/support/?108712
  * * libgnutls: When importing a CA file with a PKCS #11 URL, simply
  import the certificates, if the URL specifies objects, rather than
  treating it as trust module.
  * * libgnutls: When importing a PKCS #11 URL and we know the type of
  object we are importing, don't require the object type in the URL.
  * * libgnutls: fixed openpgp authentication when gnutls_certificate_set_retrieve_function2
  was used by the server.
  * * certtool: --pubkey-info will also attempt to load a public key from stdin.
  * * gnutls-cli: Added --starttls-proto option. That allows to specify a
  protocol for starttls negotiation.
- Version 3.3.11 (released 2014-12-11)
  * * libgnutls: Corrected regression introduced in 3.3.9 related to
  session renegotiation. Reported by Dan Winship.
  * * libgnutls: Corrected parsing issue with OCSP responses.
- Version 3.3.10 (released 2014-11-10)
  * * libgnutls: Refuse to import v1 or v2 certificates that contain
  extensions.
  * * libgnutls: Fixes in usage of PKCS #11 token callback
  * * libgnutls: Fixed bug in gnutls_x509_trust_list_get_issuer() when used
  with a PKCS #11 trust module and without the GNUTLS_TL_GET_COPY flag.
  Reported by David Woodhouse.
  * * libgnutls: Removed superfluous random generator refresh on every call
  of gnutls_deinit(). That reduces load and usage of /dev/urandom.
  * * libgnutls: Corrected issue in export of ECC parameters to X9.63 format.
  Reported by Sean Burford [GNUTLS-SA-2014-5].
  * * libgnutls: When gnutls_global_init() is called for a second time, it
  will check whether the /dev/urandom fd kept is still open and matches
  the original one. That behavior works around issues with servers that
  close all file descriptors.
  * * libgnutls: Corrected behavior with PKCS #11 objects that are marked
  as CKA_ALWAYS_AUTHENTICATE.
  * * certtool: The default cipher for PKCS #12 structures is 3des-pkcs12.
  That option is more compatible than AES or RC4.
- Version 3.3.9 (released 2014-10-13)
  * * libgnutls: Fixes in the transparent import of PKCS #11 certificates.
  Reported by Joseph Peruski.
  * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the
  handshake's hash buffer, in applications using the heartbeat extension
  or DTLS. Reported by Joeri de Ruiter.
  * * libgnutls: When both a trust module and additional CAs are present
  account the latter as well; reported by David Woodhouse.
  * * libgnutls: added GNUTLS_TL_GET_COPY flag for
  gnutls_x509_trust_list_get_issuer(). That allows the function to be used
  in a thread safe way when PKCS #11 trust modules are in use.
  * * libgnutls: fix issue in DTLS retransmission when session tickets
  were in use; reported by Manuel Pégourié-Gonnard.
  * * libgnutls-dane: Do not require the CA on a ca match to be direct CA.
  * * libgnutls: Prevent abort() in library if getrusage() fails. Try to
  detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work.
  * * guile: new 'set-session-server-name!' procedure; see the manual for
  details.
  * * certtool: The authority key identifier will be set in a certificate only
  if the CA's subject key identifier is set.
- Version 3.3.8 (released 2014-09-18)
  * * libgnutls: Updates in the name constraints checks. No name constraints
  will be checked for intermediate certificates. As our support for name
  constraints is limited to e-mail addresses in DNS names, it is pointless
  to check them on intermediate certificates.
  * * libgnutls: Fixed issues in PKCS #11 object listing. Previously multiple
  object listing would fail completely if a single object could not be exported.
  * * libgnutls: Improved the performance of PKCS #11 object listing/retrieving,
  by retrieving them in large batches. Report and suggestion by David
  Woodhouse.
  * * libgnutls: Fixed issue with certificates being sanitized by gnutls prior
  to signature verification. That resulted to certain non-DER compliant modifications
  of valid certificates, being corrected by libtasn1's parser and restructured as
  the original. Issue found and reported by Antti Karjalainen and Matti Kamunen from
  Codenomicon.
  * * libgnutls: Fixes in gnutls_x509_crt_set_dn() and friends to properly handle
  strings with embedded spaces and escaped commas.
  * * libgnutls: when comparing a CA certificate with the trusted list compare
  the name and key only instead of the whole certificate. That is to handle
  cases where a CA certificate was superceded by a different one with the same
  name and the same key.
  * * libgnutls: when verifying a certificate against a p11-kit trusted
  module, use the attached extensions in the module to override the CA's
  extensions (that requires p11-kit 0.20.7).
  * * libgnutls: In DTLS prevent sending zero-size fragments in certain cases
  of MTU split. Reported by Manuel Pégourié-Gonnard.
  * * libgnutls: Added gnutls_x509_trust_list_verify_crt2() which allows
  verifying using a hostname and a purpose (extended key usage). That
  enhances PKCS #11 trust module verification, as it can now check the purpose
  when this function is used.
  * * libgnutls: Corrected gnutls_x509_crl_verify() which would always report
  a CRL signature as invalid. Reported by Armin Burgmeier.
  * * libgnutls: added option --disable-padlock to allow disabling the padlock
  CPU acceleration.
  * * p11tool: when listing tokens, list their type as well.
  * * p11tool: when listing objects from a trust module print any attached
  extensions on certificates.
- Version 3.3.7 (released 2014-08-24)
  * * libgnutls: Added function to export the public key of a PKCS #11
  private key. Contributed by Wolfgang Meyer zu Bergsten.
  * * libgnutls: Explicitly set the exponent in PKCS #11 key generation.
  That improves compatibility with certain PKCS #11 modules. Contributed by
  Wolfgang Meyer zu Bergsten.
  * * libgnutls: When generating a PKCS #11 private key allow setting
  the WRAP/UNWRAP flags. Contributed by Wolfgang Meyer zu Bergsten.
  * * libgnutls: gnutls_pkcs11_privkey_t will always hold an open session
  to the key.
  * * libgnutls: bundle replacements of inet_pton and inet_aton if not
  available.
  * * libgnutls: initialize parameters variable on PKCS #8 decryption.
  * * libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1
  algorithms.
  * * libgnutls: gnutls_x509_crt_check_hostname() will follow the RFC6125
  requirement of checking the Common Name (CN) part of DN only if there is
  a single CN present in the certificate.
  * * libgnutls: The environment variable GNUTLS_FORCE_FIPS_MODE can be used
  to force the FIPS mode, when set to 1.
  * * libgnutls: In DTLS ignore only errors that relate to unexpected packets
  and decryption failures.
  * * p11tool: Added --info parameter.
  * * certtool: Added --mark-wrap parameter.
  * * danetool: --check will attempt to retrieve the server's certificate
  chain and verify against it.
  * * danetool/gnutls-cli-debug: Added --app-proto parameters which can
  be used to enforce starttls (currently only SMTP and IMAP) on the connection.
  * * danetool: Added openssl linking exception, to allow linking
  with libunbound.
- Version 3.3.6 (released 2014-07-23)
  * * libgnutls: Use inet_ntop to print IP addresses when available
  * * libgnutls: gnutls_x509_crt_check_hostname and friends will also check
  IP addresses, and match documented behavior. Reported by David Woodhouse.
  * * libgnutls: DSA key generation in FIPS140-2 mode doesn't allow 1024
  bit parameters.
  * * libgnutls: fixed issue in gnutls_pkcs11_reinit() which prevented tokens
  being usable after a reinitialization.
  * * libgnutls: fixed PKCS #11 private key operations after a fork.
  * * libgnutls: fixed PKCS #11 ECDSA key generation.
  * * libgnutls: The GNUTLS_CPUID_OVERRIDE environment variable can be used to
  explicitly enable/disable the use of certain CPU capabilities. Note that CPU
  detection cannot be overriden, i.e., VIA options cannot be enabled on an Intel
  CPU. The currently available options are:
    0x1: Disable all run-time detected optimizations
    0x2: Enable AES-NI
    0x4: Enable SSSE3
    0x8: Enable PCLMUL
    0x100000: Enable VIA padlock
    0x200000: Enable VIA PHE
    0x400000: Enable VIA PHE SHA512
  * * libdane: added dane_query_to_raw_tlsa(); patch by Simon Arlott.
  * * p11tool: use GNUTLS_SO_PIN to read the security officer's PIN if set.
  * * p11tool: ask for label when one isn't provided.
  * * p11tool: added --batch parameter to disable any interactivity.
  * * p11tool: will not implicitly enable so-login for certain types of
  objects. That avoids issues with tokens that require different login
  types.
  * * certtool/p11tool: Added the --curve parameter which allows to explicitly
  specify the curve to use.
- Version 3.3.5 (released 2014-06-26)
  * * libgnutls: Added gnutls_record_recv_packet() and gnutls_packet_deinit().
  These functions provide a variant of gnutls_record_recv() that avoids
  the final memcpy of data.
  * * libgnutls: gnutls_x509_crl_iter_crt_serial() was added as a
  faster variant of gnutls_x509_crl_get_crt_serial() when coping with
  very large structures.
  * * libgnutls: When the decoding of a printable DN element fails, then treat
  it as unknown and print its hex value rather than failing. That works around
  an issue in a TURKTRST root certificate which improperly encodes the
  X520countryName element.
  * * libgnutls: gnutls_x509_trust_list_add_trust_file() will return the number
  of certificates present in a PKCS #11 token when loading it.
  * * libgnutls: Allow the post client hello callback to put the handshake on
  hold, by returning GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED.
  * * certtool: option --to-p12 will now consider --load-ca-certificate
  * * certtol: Added option to specify the PKCS #12 friendly name on command line.
  * * p11tool: Allow marking a certificate copied to a token as a CA.
- Version 3.3.4 (released 2014-05-31)
  * * libgnutls: Updated Andy Polyakov's assembly code. That prevents a
  crash on certain CPUs.
- Version 3.3.3 (released 2014-05-30)
  * * libgnutls: Eliminated memory corruption issue in Server Hello parsing.
  Issue reported by Joonas Kuorilehto of Codenomicon.
  * * libgnutls: gnutls_global_set_mutex() was modified to operate with the
  new initialization process.
  * * libgnutls: Increased the maximum certificate size buffer
  in the PKCS #11 subsystem.
  * * libgnutls: Check the return code of getpwuid_r() instead of relying
  on the result value. That avoids issue in certain systems, when using
  tofu authentication and the home path cannot be determined. Issue reported
  by Viktor Dukhovni.
  * * libgnutls-dane: Improved dane_verify_session_crt(), which now attempts to
  create a full chain. This addresses points from https://savannah.gnu.org/support/index.php?108552
  * * gnutls-cli: --dane will only check the end certificate if PKIX validation
  has been disabled.
  * * gnutls-cli: --benchmark-soft-ciphers has been removed. That option cannot
  be emulated with the implicit initialization of gnutls.
  * * certtool: Allow multiple organizations and organizational unit names to
  be specified in a template.
  * * certtool: Warn when invalid configuration options are set to a template.
  * * ocsptool: Include path in ocsp request. This resolves #108582
  (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.
- Version 3.3.2 (released 2014-05-06)
  * * libgnutls: Added the 'very weak' certificate verification profile
  that corresponds to 64-bit security level.
  * * libgnutls: Corrected file descriptor leak on random generator
  initialization.
  * * libgnutls: Corrected file descriptor leak on PSK password file
  reading. Issue identified using the Codenomicon TLS test suite.
  * * libgnutls: Avoid deinitialization if initialization has failed.
  * * libgnutls: null-terminate othername alternative names.
  * * libgnutls: gnutls_x509_trust_list_get_issuer() will operate correctly
  on a PKCS #11 trust list.
  * * libgnutls: Several small bug fixes identified using valgrind and
  the Codenomicon TLS test suite.
  * * libgnutls-dane: Accept a certificate using DANE if there is at least one
  entry that matches the certificate. Patch by simon [at] arlott.org.
  * * libgnutls-guile: Fixed compilation issue.
  * * certtool: Allow exporting a CRL on DER format.
  * * certtool: The ECDSA keys generated by default use the SECP256R1 curve
  which is supported more widely than the previously used SECP224R1.
- Version 3.3.1 (released 2014-04-19)
  * * libgnutls: Enforce more strict checks to heartbeat messages
  concerning padding and payload. Suggested by Peter Dettman.
  * * libgnutls: Allow decoding PKCS #8 files with ECC parameters
  from openssl.
  * * libgnutls: Several small bug fixes found by coverity.
  * * libgnutls: The conditionally available self-test functions
  were moved to self-test.h.
  * * libgnutls: Fixed issue with the check of incoming data when two
  different recv and send pointers have been specified. Reported and
  investigated by JMRecio.
  * * libgnutls: Fixed issue in the RSA-PSK key exchange, which would
  result to illegal memory access if a server hint was provided. Reported
  by André Klitzing.
  * * libgnutls: Fixed client memory leak in the PSK key exchange, if a
  server hint was provided.
  * * libgnutls: Corrected the *get_*_othername_oid() functions.
- Version 3.3.0 (released 2014-04-10)
  * * libgnutls: The initialization of the library was moved to a
  constructor. That is, gnutls_global_init() is no longer required
  unless linking with a static library or a system that does not
  support library constructors.
  * * libgnutls: static libraries are not built by default.
  * * libgnutls: PKCS #11 initialization is delayed to first usage.
  That avoids long delays in gnutls initialization due to broken PKCS #11
  modules.
  * * libgnutls: The PKCS #11 subsystem is re-initialized "automatically"
  on the first PKCS #11 API call after a fork.
  * * libgnutls: certificate verification profiles were introduced
  that can be specified as flags to verification functions. They
  are enumerations in gnutls_certificate_verification_profiles_t
  and can be converted to flags for use in a verification function
  using GNUTLS_PROFILE_TO_VFLAGS().
  * * libgnutls: Added the ability to read system-specific initial
  keywords, if they are prefixed with '@'. That allows a compile-time
  specified configuration file to be used to read pre-configured priority
  strings from. That can be used to impose system specific policies.
  * * libgnutls: Increased the default security level of priority
  strings (NORMAL and PFS strings require at minimum a 1008 DH prime),
  and set a verification profile by default.  The LEGACY keyword is
  introduced to set the old defaults.
  * * libgnutls: Added support for the name constraints PKIX extension.
  Currently only DNS names and e-mails are supported (no URIs, IPs
  or DNs).
  * * libgnutls: Security parameter SEC_PARAM_NORMAL was renamed to
  SEC_PARAM_MEDIUM to avoid confusion with the priority string NORMAL.
  * * libgnutls: Added new API in x509-ext.h to handle X.509 extensions.
  This API handles the X.509 extensions in isolation, allowing to parse
  similarly formatted extensions stored in other structures.
  * * libgnutls: When generating DSA keys the macro GNUTLS_SUBGROUP_TO_BITS
  can be used to specify a particular subgroup as the number of bits in
  gnutls_privkey_generate; e.g., GNUTLS_SUBGROUP_TO_BITS(2048, 256).
  * * libgnutls: DH parameter generation is now delegated to nettle.
  That unfortunately has the side-effect that DH parameters longer than
  3072 bits, cannot be generated (not without a nettle update).
  * * libgnutls: Separated nonce RNG from the main RNG. The nonce
  random number generator is based on salsa20/12.
  * * libgnutls: The buffer alignment provided to crypto backend is
  enforced to be 16-byte aligned, when compiled with cryptodev
  support. That allows certain cryptodev drivers to operate more
  efficiently.
  * * libgnutls: Return error when a public/private key pair that doesn't
  match is set into a credentials structure.
  * * libgnutls: Depend on p11-kit 0.20.0 or later.
  * * libgnutls: The new padding (%NEW_PADDING) experimental TLS extension has
  been removed. It was not approved by IETF.
  * * libgnutls: The experimental xssl library is removed from the gnutls
  distribution.
  * * libgnutls: Reduced the number of gnulib modules used in the main library.
  * * libgnutls: Added priority string %DISABLE_WILDCARDS.
  * * libgnutls: Added the more extensible verification function
  gnutls_certificate_verify_peers(), that allows checking, in addition
  to a peer's DNS hostname, for the key purpose of the end certificate
  (via PKIX extended key usage).
  * * certtool: Timestamps for serial numbers were increased to 8 bytes,
  and in batch mode to 12 (appended with 4 random bytes).
  * * certtool: When no CRL number is provided (or value set to -1), then
  a time-based number will be used, similarly to the serial generation
  number in certificates.
  * * certtool: Print the SHA256 fingerprint of a certificate in addition
  to SHA1.
  * * libgnutls: Added --enable-fips140-mode configuration option (unsupported).
  That option enables (when running on FIPS140-enabled system):
  o RSA, DSA and DH key generation as in FIPS-186-4 (using provable primes)
  o The DRBG-CTR-AES256 deterministic random generator from SP800-90A.
  o Self-tests on initialization on ciphers/MACs, public key algorithms
    and the random generator.
  o HMAC-SHA256 verification of the library on load.
  o MD5 is included for TLS purposes but cannot be used by the high level
    hashing functions.
  o All ciphers except AES are disabled.
  o All MACs and hashes except GCM and SHA are disabled (e.g., HMAC-MD5).
  o All keys (temporal and long term) are zeroized after use.
  o Security levels are adjusted to the FIPS140-2 recommendations (rather
    than ECRYPT).</changelog>
  <changelog author="meissner@suse.com" date="1427112000">- disable trousers and unbound again for now, as it causes too long
  build cycles.</changelog>
  <changelog author="astieger@suse.com" date="1427284800">- for DANE support, use bcond_with
- for tpm support, same
- note p11-kit &gt;= 0.20.7 requirement
- note libtasn1 3.9 requirement (built-in lib used otherwise)</changelog>
  <changelog author="meissner@suse.com" date="1427889600">- updated to 3.3.13 (released 2015-03-30)
  * * libgnutls: When retrieving OCTET STRINGS from PKCS #12 ContentInfo
  structures use BER to decode them (requires libtasn1 4.3). That allows
  to decode some more complex structures.
  * * libgnutls: When an end-certificate with no name is present and there
  are CA name constraints, don't reject the certificate. This follows RFC5280
  advice closely. Reported by Fotis Loukos.
  * * libgnutls: Fixed handling of supplemental data with types &gt; 255.
  Patch by Thierry Quemerais.
  * * libgnutls: Fixed double free in the parsing of CRL distribution points certificate
  extension. Reported by Robert ?wi?cki.
  * * libgnutls: Fixed a two-byte stack overflow in DTLS 0.9 protocol. That
  protocol is not enabled by default (used by openconnect VPN).
  * * libgnutls: The maximum user data send size is set to be the same for
  block and non-block ciphersuites. This addresses a regression with wine:
  https://bugs.winehq.org/show_bug.cgi?id=37500
  * * libgnutls: When generating PKCS #11 keys, set CKA_ID, CKA_SIGN,
  and CKA_DECRYPT when needed.
  * * libgnutls: Allow names with zero size to be set using
  gnutls_server_name_set(). That will disable the Server Name Indication.
  Resolves issue with wine: https://gitlab.com/gnutls/gnutls/issues/2</changelog>
  <changelog author="vcizek@suse.com" date="1438603200">- fix for CVE-2015-3622 in bundled libtasn1 (bsc#929414)
  * invalid read in octet string
  * added gnutls-CVE-2015-3622.patch
- fix for GNUTLS-SA-2015-2 (bsc#929690)
  * ServerKeyExchange signature issue
  * added gnutls-GNUTLS-SA-2015-2.patch</changelog>
  <changelog author="vcizek@suse.com" date="1440158400">- fix for CVE-2015-6251 (GNUTLS-SA-2015-3) (bsc#941794)
  * double free in certificate DN decoding
  * added gnutls-CVE-2015-6251.patch</changelog>
  <changelog author="vcizek@suse.com" date="1484049600">- GNUTLS-SA-2017-2 (bsc#1018832)
  * several memory corruptions in OpenPGP certificate decoding
  * added patches:
    gnutls-CVE-2017-5335.patch
    gnutls-CVE-2017-5337.patch
    gnutls-CVE-2017-5336.patch
- GNUTLS-SA-2016-3 (bsc#999646)
  * Incorrect certificate validation when using OCSP responses
  * added gnutls-CVE-2016-7444.patch
- remote denial of service in SSL alert handling (bsc#1005879)
  * added gnutls-CVE-2016-8610.patch</changelog>
  <changelog author="vcizek@suse.com" date="1485259200">- Fix an infinite loop if an EOF occurs while skipping a PGP packet
  * add 0001-Do-not-infinite-loop-if-an-EOF-occurs-while-skipping.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1492689600">- Update to version 3.3.27 fate#322523
  * Version 3.3.27 (released 2017-03-06)
  * * libgnutls: read the pin-value attribute if the p11-kit version allows it.
  * * libgnutls: Addressed integer overflow resulting to invalid memory write
  in OpenPGP certificate parsing. [GNUTLS-SA-2017-3A]
  * * libgnutls: Addressed crashes in OpenPGP certificate parsing, related
  to private key parser. No longer allow OpenPGP certificates (public
  keys) to contain private key sub-packets. [GNUTLS-SA-2017-3B]
  * * libgnutls: Addressed large allocation in OpenPGP certificate parsing,
  that could lead in out-of-memory condition. [GNUTLS-SA-2017-3C]
  * Version 3.3.26 (released 2016-01-09)
  * * libgnutls: Handle status request responses as optional (following
  RFC6066). This improves compatibility with implementations not sending
  these messages (including specific versions on the GnuTLS 3.5.x
  branch).
  * * libgnutls: Set limits on the maximum number of alerts handled. That is,
  applications using gnutls could be tricked into an busy loop if the
  peer sends continuously alert messages. Applications which set a
  maximum handshake time (via gnutls_handshake_set_timeout) will
  eventually recover but others may remain in a busy loops indefinitely.
  This is related but not identical to CVE-2016-8610, due to the
  difference in alert handling of the libraries (gnutls delegates that
  handling to applications).
  * * libgnutls: Fixed issue in PKCS#12 password encoding, which truncated
  passwords over 32-characters. Reported by Mario Klebsch.
  * * libgnutls: Backported functionality allowing to manipulate the IDs
  of PKCS#11 objects.
  * * libgnutls: Link to trousers (TPM library) dynamically. Backported TPM
  key handling improvements from master branch.
  * * libgnutls: Backported several fixes in PKCS#8 decryption (related to
  gitlab issue #148).
  * * libgnutls: Fix double free in certificate information printing. If the
  PKIX extension proxy was set with a policy language set but no policy
  specified, that could lead to a double free. [GNUTLS-SA-2017-1]
  * * libgnutls: Addressed memory leak in server side error path
  (issue found using oss-fuzz project)
  * * libgnutls: Addressed memory leaks and an infinite loop in OpenPGP
  certificate parsing. Fixes by Alex Gaynor. (issues found using oss-fuzz
  project)
  * * libgnutls: Addressed invalid memory accesses in OpenPGP certificate
  parsing. (issues found using oss-fuzz project) [GNUTLS-SA-2017-2]
  * * tpmtool: backported the --test-sign option.
  * Version 3.3.25 (released 2016-10-9)
  * * libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key()
  failures due to key mismatch. This prevents leaks or double freeing
  on such failures.
  * * libgnutls: Corrected the comparison of the serial size in OCSP
  response. Previously the OCSP certificate check wouldn't verify the
  serial length and could succeed in cases it shouldn't
  (GNUTLS-SA-2016-3). Reported by Stefan Buehler.
  * * libgnutls: Fixes in gnutls_x509_crt_list_import2, which was
  ignoring flags if all certificates in the list fit within the
  initially allocated memory.
  * * libgnutls: Fix gnutls_pkcs12_simple_parse to always extract the
  complete chain, even when the extra_certs was non-null. Report and fix
  by Stefan Sørensen.
  * * libgnutls: Added support for decrypting PKCS#8 files which use the
  HMAC-SHA256 as PRF.
  * * libgnutls: Addressed issue with PKCS#11 signature generation on ECDSA
  keys. The signature is now written as unsigned integers into the
  DSASignatureValue structure. Previously signed integers could be
  written depending on what the underlying module would produce.
  Addresses #122.
  * * libgnutls: backported X.509 unique ID functionality from later
  versions.
  * * libgnutls: Increased the maximum size of the handshake message hash.
  This will allow the library to cope better with larger packets, as
  the ones offered by current TLS 1.3 drafts.
  * Version 3.3.24 (released 2016-07-06)
  * * libgnutls: Address issue when utilizing the p11-kit trust store
  for certificate verification (GNUTLS-SA-2016-2).
  * * libgnutls: when generating private keys mark the public key as not
  private.
  * * libgnutls: use secure_getenv() where available to obtain environment
  variables.
  * * libgnutls: Fixed DTLS handshake packet reconstruction. Reported by
  Guillaume Roguez.
  * * libgnutls: Fixed issues with PKCS#11 reading of sensitive objects
  from SafeNet Network HSM. Reported by Anthony Alba.
  * * libgnutls: Corrected reading and writing of PKCS#11
  CKA_SERIAL_NUMBER. Report and fix by Stanislav ?idek.
  * * libgnutls: Enhanced the priority functions to understand -VERS-ALL
  keyword to allow compatibility of priority strings between 3.4.x and
  3.3.x.
  * Version 3.3.23 (released 2016-05-20)
  * * libgnutls: Corrected behavior of ALPN extension parsing during session
  resumption. Report and patches by Yuriy M. Kaminskiy.
  * * libgnutls: Properly print the IP Adress name constraints.
  * * libgnutls: Fixes in gnutls_privkey_import_ecc_raw().
  * * libgnutls: Fixed gnutls_pkcs11_get_raw_issuer() usage with the
  GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag. Previously that
  operation could fail on certain PKCS#11 modules.
  * * libgnutls: gnutls_pkcs11_obj_import_url() and
  gnutls_x509_crt_import_pkcs11_url() can accept the
  GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag.
  * * libgnutls: gnutls_certificate_set_key() was enhanced to import the DNS
  name of the certificates if the provided names are NULL.
  * * libgnutls: when receiving SNI names, only save and expose to
  application the supported DNS names.
  * * libgnutls: when importing the certificate names at the
  gnutls_certificate_set* functions, only consider the CN as a fallback
  if DNS names are provided via the alternative name extension.
  * * ocsptool: use HTTP/1.0 for requests. This avoids issue with servers
  serving chunk encoding which ocsptool doesn't support. Reported by
  Thomas Klute.
  * * certtool: do not require a CA for OCSP signing tag. This follows the
  recommendations in RFC6960 in 4.2.2.2 which allow a CA to delegate OCSP
  signing to another certificate without requiring it to be a CA.
  Reported by Thomas Klute.
  * * gnutls-cli: on OCSP verification do not fail if we have a single valid
  reply. Report and reproducer by Thomas Klute.
  * Version 3.3.22 (released 2016-03-10)
  * * libgnutls: Eliminated issues preventing buffers more than 2^32 bytes
  to be used with hashing functions.
  * * libgnutls: Follow closely RFC5280 recommendations and use UTCTime for
  dates prior to 2050. Backported from 3.4.x branch.
  * * libgnutls: Several fixes to prevent relying on undefined behavior of C
  (found with libubsan).
  * * libgnutls: SSL 3.0 is no longer included in the default priorities
  list. It has to be explicitly enabled, e.g., with a string like
  "NORMAL:+VERS-SSL3.0". The previous behavior can be restored using
  the flag --with-ssl3 to configure.
  * Version 3.3.21 (released 2016-02-03)
  * * libgnutls: Corrected ALPN protocol negotiation. Before GnuTLS would
  negotiate the last commonly supported protocol, rather than the
  first. Reported by Remi Denis-Courmont (#63).
  * * libgnutls: ARCFOUR (RC4) is no longer included in the default
  priorities list. It has to be explicitly enabled, e.g., with a string
  like "NORMAL:+ARCFOUR-128". The previous behavior can be restored using
  the flag --with-arcfour128 to configure.
  * * libgnutls: Corrected regression caused by incorrect fix in
  gnutls_x509_ext_export_key_usage() at 3.3.20 release.
  * Version 3.3.20 (released 2016-01-08)
  * * libgnutls: Corrected memory leak in gnutls_pubkey_import_privkey() when
  used with PKCS #11 keys.
  * * libgnutls: For DSA and ECDSA keys in PKCS #11 objects, import
  their public keys from either a public key object or a certificate.
  That is, because private keys do not contain all the required
  parameters for a direct import. Reported by Jan Vcelak.
  * * libgnutls: Fixed issue when writing ECDSA private keys in PKCS #11
  tokens.
  * * libgnutls: Fixed out-of-bounds read in
  gnutls_x509_ext_export_key_usage(), report and patch by Tim Kosse.
  * * libgnutls: Handle DNS name constraints with a leading dot. Backported
  from 3.4.x branch.
  * * libgnutls: The max-record extension is no longer negotiated on DTLS.
  This resolves issue with the max-record being negotiated but ignored.
  * Version 3.3.19 (released 2015-11-22)
  * * libgnutls: Properly require TLS 1.2 to all the CBC-SHA256 and
  CBC-SHA384 ciphersuites. This solves an interoperability issue with
  openssl. Reported by Viktor Dukhovni.
  * * libgnutls: Fixed memory leak in
  gnutls_pubkey_get_preferred_hash_algorithm(), patch by Lennert
  Buytenhek.
  * * libgnutls: When writing a certificate into a PKCS #11 token, ensure
  that CKA_SERIAL_NUMBER and CKA_ISSUER are written.
  * * libgnutls: Allow the presence of legacy ciphers and key exchanges in
  priority strings and consider them a no-op.
  * * libgnutls: On a rehandshake allow switching from anonymous to ECDHE and
  DHE ciphersuites.
  * * libgnutls: Added GNUTLS_SKIP_GLOBAL_INIT macro to allow programs
  skipping the implicit global initialization.
  * * gnutls.pc: Don't include libtool specific options to link flags.
  Reported by Dan Kegel.
  * Version 3.3.18 (released 2015-09-12)
  * * libgnutls: When re-importing CRLs to a trust list ensure that there
  are no duplicate entries.
  * * certtool: Removed any arbitrary limits imposed on input file sizes
  and maximum number of certificates imported.
  * Version 3.3.17 (released 2015-08-10)
  * * libgnutls: Fix issue with server side sending the status request
  extension even when not requested. Reported by Jeremy Harris.
  * * libgnutls: gnutls_pkcs11_privkey_generate2() will store the generated
  public key, unless the GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY flag is
  specified.
  * * libgnutls: fixed double free in DN decoding [GNUTLS-SA-2015-3].
  * Version 3.3.16 (released 2015-07-12)
  * * libgnutls: Allow compilation with nettle 3.0 or later
  * * libgnutls: corrected failure when importing plain files
  with gnutls_x509_privkey_import2(), and a password was provided.
  * * libgnutls: Don't reject certificates if a CA has the URI or IP address
  name constraints, and the end certificate doesn't have an IP address
  name or a URI set.
  * * libgnutls: set and read the hint in DHE-PSK and ECDHE-PSK ciphersuites.
- Dropped patches:
  * gnutls-3.0.26-skip-test-fwrite.patch: Fixed upstream.
  * 0001-Do-not-infinite-loop-if-an-EOF-occurs-while-skipping.patch: seems
    not to be needed anymore.</changelog>
  <changelog author="vcizek@suse.com" date="1535112000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  The _asn1_check_identifier function in Libtasn1 caused a NULL
  pointer dereference and crash (CVE-2017-10790, bsc#1047002)
  * add gnutls-CVE-2017-10790.patch</changelog>
</package>
<package pkgid="1b0222ffa5f358b90f3c71d1aa3d3f7b42471725797976ddf2811fed66fa68af" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.3.27" rel="2.3.1"/>
  <changelog author="meissner@suse.com" date="1401796800">- Version 3.2.15 (released 2014-05-30)
  * * libgnutls: Eliminated memory corruption issue in Server Hello parsing.
  Issue reported by Joonas Kuorilehto of Codenomicon. (CVE-2014-3466 / bnc#880730)
  * * libgnutls: Several memory leaks caused by error conditions were
  fixed. The leaks were identified using valgrind and the Codenomicon
  TLS test suite.
  * * libgnutls: Increased the maximum certificate size buffer
  in the PKCS #11 subsystem.
  * * libgnutls: Check the return code of getpwuid_r() instead of relying
  on the result value. That avoids issue in certain systems, when using
  tofu authentication and the home path cannot be determined. Issue reported
  by Viktor Dukhovni.
  * * gnutls-cli: if dane is requested but not PKIX verification, then
  only do verify the end certificate.
  * * ocsptool: Include path in ocsp request. This resolves #108582
  (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.
- Version 3.2.14 (released 2014-05-06)
  * * libgnutls: Fixed issue with the check of incoming data when two
  different recv and send pointers have been specified. Reported and
  investigated by JMRecio.
  * * libgnutls: Fixed issue in the RSA-PSK key exchange, which would
  result to illegal memory access if a server hint was provided.
  * * libgnutls: Fixed client memory leak in the PSK key exchange, if a
  server hint was provided.
  * * libgnutls: Several small bug fixes identified using valgrind and
  the Codenomicon TLS test suite.
  * * libgnutls: Several small bug fixes found by coverity.
  * * libgnutls-dane: Accept a certificate using DANE if there is at least one
  entry that matches the certificate. Patch by simon [at] arlott.org.
  * * configure: Added --with-nettle-mini option, which allows linking
  with a libnettle that contains gmp.
  * * certtool: The ECDSA keys generated by default use the SECP256R1 curve
  which is supported more widely than the previously used SECP224R1.
- CVE-2014-3466.patch: is upstream.</changelog>
  <changelog author="citypw@gmail.com" date="1407067200">- Upgrade to Version 3.2.16 (released 2014-07-23)
  * * libgnutls: Do not call the post client hello callback twice when resuming
  using session tickets.
  * * libgnutls: When the decoding of a printable DN element fails, then treat
  it as unknown and print its hex value rather than failing. That works around
  an issue in a TURKTRST root certificate which improperly encodes the
  X520countryName element.
  * * libgnutls: IP addresses are printed using inet_ntop() when available.
  * * libgnutls: gnutls_x509_crt_check_hostname will also check IP addresses
  and match documented behavior. Reported by David Woodhouse.
  * * libgnutls: Fixed PKCS #11 ECDSA key generation.
  * * p11tool: use GNUTLS_SO_PIN to read the security officer's PIN if set.
  * * p11tool: will not implicitly enable so-login for certain types of
  objects. That avoids issues with tokens that require different login
  types.
  * * API and ABI modifications:
  No changes since last version.
  delete files: gnutls-3.2.15.tar.xz, gnutls-3.2.15.tar.xz.sig,
  audit-improve.patch( already in upstream)
  Add files: gnutls-3.2.16.tar.xz, gnutls-3.2.16.tar.xz.sig</changelog>
  <changelog author="citypw@gmail.com" date="1409486400">- Upgrade to Version 3.2.17 (released 2014-08-24)
  * * libgnutls: initialize parameters variable on PKCS #8 decryption.
  * * libgnutls: Explicitly set the exponent in PKCS #11 key generation.
  That improves compatibility with certain PKCS #11 modules. Contributed by
  Wolfgang Meyer zu Bergsten.
  * * libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1
  algorithms.
  * * libgnutls: when checking the hostname of a certificate with multiple CNs
  ensure that the "most specific" CN is being used.
  * * libgnutls: In DTLS ignore only errors that relate to unexpected packets
  and decryption failures.
  Delete files: gnutls-3.2.16.tar.xz, gnutls-3.2.16.tar.xz.sig
  Add files: gnutls-3.2.17.tar.xz, gnutls-3.2.17.tar.xz.sig</changelog>
  <changelog author="dmueller@suse.com" date="1411128000">- update list of available architectures for valgrind</changelog>
  <changelog author="citypw@gmail.com" date="1411560000">* Upgrade to Version 3.2.18 (released 2014-09-18)
  * * libgnutls: Fixes in gnutls_x509_crt_set_dn() and friends to properly handle
  strings with embedded spaces and escaped commas.
  * * libgnutls: Corrected gnutls_x509_crl_verify() which would always report
  a CRL signature as invalid. Reported by Armin Burgmeier.
  * * libgnutls: Fixed issue with certificates being sanitized by gnutls prior
  to signature verification. That resulted to certain non-DER compliant modifications
  of valid certificates, being corrected by libtasn1's parser and restructured as
  the original. Issue found and reported by Antti Karjalainen and Matti Kamunen from
  Codenomicon.
  * * API and ABI modifications:
  No changes since last version.
  Delete files: gnutls-3.2.17.tar.xz, gnutls-3.2.17.tar.xz.sig
  Add files: gnutls-3.2.18.tar.xz, gnutls-3.2.18.tar.xz.sig</changelog>
  <changelog author="meissner@suse.com" date="1415793600">- gnutls-CVE-2014-8564.patch: Fixed parsing problem in elliptic
  curve blobs over TLS that could lead to remote crashes.
  (bnc#904603 CVE-2014-8564)</changelog>
  <changelog author="meissner@suse.com" date="1415793601">- Updated to 3.2.20 (released 2014-11-10)
  * * libgnutls: Removed superfluous random generator refresh on every
    call of gnutls_deinit(). That reduces load and usage of /dev/urandom.
  * * libgnutls: Corrected issue in export of ECC parameters to X9.63
    format.  Reported by Sean Burford [GNUTLS-SA-2014-5].
  (CVE-2014-8564 bnc#904603)
- Updated to 3.2.19 (released 2014-10-13)
  * * libgnutls: Fixes in the transparent import of PKCS #11 certificates.
    Reported by Joseph Peruski.
  * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the
    handshake's hash buffer, in applications using the heartbeat extension
    or DTLS. Reported by Joeri de Ruiter.
  * * libgnutls: fix issue in DTLS retransmission when session tickets were
    in use; reported by Manuel Pégourié-Gonnard.
  * * libgnutls: Prevent abort() in library if getrusage() fails. Try to
    detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work.
  * * guile: new 'set-session-server-name!' procedure; see the manual
    for details.</changelog>
  <changelog author="meissner@suse.com" date="1420027200">- Updated to 3.2.21 (released 2014-12-11)
  - libgnutls: Corrected regression introduced in 3.2.19 related to
    session renegotiation. Reported by Dan Winship.
  - libgnutls: Corrected parsing issue with OCSP responses.</changelog>
  <changelog author="meissner@suse.com" date="1420027201">- build with PIE for commandline tools</changelog>
  <changelog author="vcizek@suse.com" date="1426680000">- fix for CVE-2015-0294 (bnc#919938)
  * certificate algorithm consistency checking issue
  * added gnutls-CVE-2015-0294.patch</changelog>
  <changelog author="meissner@suse.com" date="1426939200">- added unbound-devel (for DANE) and trousers-devel (for TPM support)
- removed now upstreamed gnutls-implement-trust-store-dir-3.2.8.diff
- libgnutls-dane0 new library added
- updated to 3.3.13 (released 2015-02-25)
  * * libgnutls: Enable AESNI in GCM on x86
  * * libgnutls: Fixes in DTLS message handling
  * * libgnutls: Check certificate algorithm consistency, i.e.,
    check whether the signatureAlgorithm field matches the signature
    field inside TBSCertificate.
  * * gnutls-cli: Fixes in OCSP verification.
- Version 3.3.12 (released 2015-01-17)
  * * libgnutls: When negotiating TLS use the lowest enabled version in
  the client hello, rather than the lowest supported. In addition, do
  not use SSL 3.0 as a version in the TLS record layer, unless SSL 3.0
  is the only protocol supported. That addresses issues with servers that
  immediately drop the connection when the encounter SSL 3.0 as the record
  version number. See:
  http://lists.gnutls.org/pipermail/gnutls-help/2014-November/003673.html
  * * libgnutls: Corrected encoding and decoding of ANSI X9.62 parameters.
  * * libgnutls: Handle zero length plaintext for VIA PadLock functions.
  This solves a potential crash on AES encryption for small size plaintext.
  Patch by Matthias-Christian Ott.
  * * libgnutls: In DTLS don't combine multiple packets which exceed MTU.
  Reported by Andreas Schultz. https://savannah.gnu.org/support/?108715
  * * libgnutls: In DTLS decode all handshake packets present in a record
  packet, in a single pass. Reported by Andreas Schultz.
  https://savannah.gnu.org/support/?108712
  * * libgnutls: When importing a CA file with a PKCS #11 URL, simply
  import the certificates, if the URL specifies objects, rather than
  treating it as trust module.
  * * libgnutls: When importing a PKCS #11 URL and we know the type of
  object we are importing, don't require the object type in the URL.
  * * libgnutls: fixed openpgp authentication when gnutls_certificate_set_retrieve_function2
  was used by the server.
  * * certtool: --pubkey-info will also attempt to load a public key from stdin.
  * * gnutls-cli: Added --starttls-proto option. That allows to specify a
  protocol for starttls negotiation.
- Version 3.3.11 (released 2014-12-11)
  * * libgnutls: Corrected regression introduced in 3.3.9 related to
  session renegotiation. Reported by Dan Winship.
  * * libgnutls: Corrected parsing issue with OCSP responses.
- Version 3.3.10 (released 2014-11-10)
  * * libgnutls: Refuse to import v1 or v2 certificates that contain
  extensions.
  * * libgnutls: Fixes in usage of PKCS #11 token callback
  * * libgnutls: Fixed bug in gnutls_x509_trust_list_get_issuer() when used
  with a PKCS #11 trust module and without the GNUTLS_TL_GET_COPY flag.
  Reported by David Woodhouse.
  * * libgnutls: Removed superfluous random generator refresh on every call
  of gnutls_deinit(). That reduces load and usage of /dev/urandom.
  * * libgnutls: Corrected issue in export of ECC parameters to X9.63 format.
  Reported by Sean Burford [GNUTLS-SA-2014-5].
  * * libgnutls: When gnutls_global_init() is called for a second time, it
  will check whether the /dev/urandom fd kept is still open and matches
  the original one. That behavior works around issues with servers that
  close all file descriptors.
  * * libgnutls: Corrected behavior with PKCS #11 objects that are marked
  as CKA_ALWAYS_AUTHENTICATE.
  * * certtool: The default cipher for PKCS #12 structures is 3des-pkcs12.
  That option is more compatible than AES or RC4.
- Version 3.3.9 (released 2014-10-13)
  * * libgnutls: Fixes in the transparent import of PKCS #11 certificates.
  Reported by Joseph Peruski.
  * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the
  handshake's hash buffer, in applications using the heartbeat extension
  or DTLS. Reported by Joeri de Ruiter.
  * * libgnutls: When both a trust module and additional CAs are present
  account the latter as well; reported by David Woodhouse.
  * * libgnutls: added GNUTLS_TL_GET_COPY flag for
  gnutls_x509_trust_list_get_issuer(). That allows the function to be used
  in a thread safe way when PKCS #11 trust modules are in use.
  * * libgnutls: fix issue in DTLS retransmission when session tickets
  were in use; reported by Manuel Pégourié-Gonnard.
  * * libgnutls-dane: Do not require the CA on a ca match to be direct CA.
  * * libgnutls: Prevent abort() in library if getrusage() fails. Try to
  detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work.
  * * guile: new 'set-session-server-name!' procedure; see the manual for
  details.
  * * certtool: The authority key identifier will be set in a certificate only
  if the CA's subject key identifier is set.
- Version 3.3.8 (released 2014-09-18)
  * * libgnutls: Updates in the name constraints checks. No name constraints
  will be checked for intermediate certificates. As our support for name
  constraints is limited to e-mail addresses in DNS names, it is pointless
  to check them on intermediate certificates.
  * * libgnutls: Fixed issues in PKCS #11 object listing. Previously multiple
  object listing would fail completely if a single object could not be exported.
  * * libgnutls: Improved the performance of PKCS #11 object listing/retrieving,
  by retrieving them in large batches. Report and suggestion by David
  Woodhouse.
  * * libgnutls: Fixed issue with certificates being sanitized by gnutls prior
  to signature verification. That resulted to certain non-DER compliant modifications
  of valid certificates, being corrected by libtasn1's parser and restructured as
  the original. Issue found and reported by Antti Karjalainen and Matti Kamunen from
  Codenomicon.
  * * libgnutls: Fixes in gnutls_x509_crt_set_dn() and friends to properly handle
  strings with embedded spaces and escaped commas.
  * * libgnutls: when comparing a CA certificate with the trusted list compare
  the name and key only instead of the whole certificate. That is to handle
  cases where a CA certificate was superceded by a different one with the same
  name and the same key.
  * * libgnutls: when verifying a certificate against a p11-kit trusted
  module, use the attached extensions in the module to override the CA's
  extensions (that requires p11-kit 0.20.7).
  * * libgnutls: In DTLS prevent sending zero-size fragments in certain cases
  of MTU split. Reported by Manuel Pégourié-Gonnard.
  * * libgnutls: Added gnutls_x509_trust_list_verify_crt2() which allows
  verifying using a hostname and a purpose (extended key usage). That
  enhances PKCS #11 trust module verification, as it can now check the purpose
  when this function is used.
  * * libgnutls: Corrected gnutls_x509_crl_verify() which would always report
  a CRL signature as invalid. Reported by Armin Burgmeier.
  * * libgnutls: added option --disable-padlock to allow disabling the padlock
  CPU acceleration.
  * * p11tool: when listing tokens, list their type as well.
  * * p11tool: when listing objects from a trust module print any attached
  extensions on certificates.
- Version 3.3.7 (released 2014-08-24)
  * * libgnutls: Added function to export the public key of a PKCS #11
  private key. Contributed by Wolfgang Meyer zu Bergsten.
  * * libgnutls: Explicitly set the exponent in PKCS #11 key generation.
  That improves compatibility with certain PKCS #11 modules. Contributed by
  Wolfgang Meyer zu Bergsten.
  * * libgnutls: When generating a PKCS #11 private key allow setting
  the WRAP/UNWRAP flags. Contributed by Wolfgang Meyer zu Bergsten.
  * * libgnutls: gnutls_pkcs11_privkey_t will always hold an open session
  to the key.
  * * libgnutls: bundle replacements of inet_pton and inet_aton if not
  available.
  * * libgnutls: initialize parameters variable on PKCS #8 decryption.
  * * libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1
  algorithms.
  * * libgnutls: gnutls_x509_crt_check_hostname() will follow the RFC6125
  requirement of checking the Common Name (CN) part of DN only if there is
  a single CN present in the certificate.
  * * libgnutls: The environment variable GNUTLS_FORCE_FIPS_MODE can be used
  to force the FIPS mode, when set to 1.
  * * libgnutls: In DTLS ignore only errors that relate to unexpected packets
  and decryption failures.
  * * p11tool: Added --info parameter.
  * * certtool: Added --mark-wrap parameter.
  * * danetool: --check will attempt to retrieve the server's certificate
  chain and verify against it.
  * * danetool/gnutls-cli-debug: Added --app-proto parameters which can
  be used to enforce starttls (currently only SMTP and IMAP) on the connection.
  * * danetool: Added openssl linking exception, to allow linking
  with libunbound.
- Version 3.3.6 (released 2014-07-23)
  * * libgnutls: Use inet_ntop to print IP addresses when available
  * * libgnutls: gnutls_x509_crt_check_hostname and friends will also check
  IP addresses, and match documented behavior. Reported by David Woodhouse.
  * * libgnutls: DSA key generation in FIPS140-2 mode doesn't allow 1024
  bit parameters.
  * * libgnutls: fixed issue in gnutls_pkcs11_reinit() which prevented tokens
  being usable after a reinitialization.
  * * libgnutls: fixed PKCS #11 private key operations after a fork.
  * * libgnutls: fixed PKCS #11 ECDSA key generation.
  * * libgnutls: The GNUTLS_CPUID_OVERRIDE environment variable can be used to
  explicitly enable/disable the use of certain CPU capabilities. Note that CPU
  detection cannot be overriden, i.e., VIA options cannot be enabled on an Intel
  CPU. The currently available options are:
    0x1: Disable all run-time detected optimizations
    0x2: Enable AES-NI
    0x4: Enable SSSE3
    0x8: Enable PCLMUL
    0x100000: Enable VIA padlock
    0x200000: Enable VIA PHE
    0x400000: Enable VIA PHE SHA512
  * * libdane: added dane_query_to_raw_tlsa(); patch by Simon Arlott.
  * * p11tool: use GNUTLS_SO_PIN to read the security officer's PIN if set.
  * * p11tool: ask for label when one isn't provided.
  * * p11tool: added --batch parameter to disable any interactivity.
  * * p11tool: will not implicitly enable so-login for certain types of
  objects. That avoids issues with tokens that require different login
  types.
  * * certtool/p11tool: Added the --curve parameter which allows to explicitly
  specify the curve to use.
- Version 3.3.5 (released 2014-06-26)
  * * libgnutls: Added gnutls_record_recv_packet() and gnutls_packet_deinit().
  These functions provide a variant of gnutls_record_recv() that avoids
  the final memcpy of data.
  * * libgnutls: gnutls_x509_crl_iter_crt_serial() was added as a
  faster variant of gnutls_x509_crl_get_crt_serial() when coping with
  very large structures.
  * * libgnutls: When the decoding of a printable DN element fails, then treat
  it as unknown and print its hex value rather than failing. That works around
  an issue in a TURKTRST root certificate which improperly encodes the
  X520countryName element.
  * * libgnutls: gnutls_x509_trust_list_add_trust_file() will return the number
  of certificates present in a PKCS #11 token when loading it.
  * * libgnutls: Allow the post client hello callback to put the handshake on
  hold, by returning GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED.
  * * certtool: option --to-p12 will now consider --load-ca-certificate
  * * certtol: Added option to specify the PKCS #12 friendly name on command line.
  * * p11tool: Allow marking a certificate copied to a token as a CA.
- Version 3.3.4 (released 2014-05-31)
  * * libgnutls: Updated Andy Polyakov's assembly code. That prevents a
  crash on certain CPUs.
- Version 3.3.3 (released 2014-05-30)
  * * libgnutls: Eliminated memory corruption issue in Server Hello parsing.
  Issue reported by Joonas Kuorilehto of Codenomicon.
  * * libgnutls: gnutls_global_set_mutex() was modified to operate with the
  new initialization process.
  * * libgnutls: Increased the maximum certificate size buffer
  in the PKCS #11 subsystem.
  * * libgnutls: Check the return code of getpwuid_r() instead of relying
  on the result value. That avoids issue in certain systems, when using
  tofu authentication and the home path cannot be determined. Issue reported
  by Viktor Dukhovni.
  * * libgnutls-dane: Improved dane_verify_session_crt(), which now attempts to
  create a full chain. This addresses points from https://savannah.gnu.org/support/index.php?108552
  * * gnutls-cli: --dane will only check the end certificate if PKIX validation
  has been disabled.
  * * gnutls-cli: --benchmark-soft-ciphers has been removed. That option cannot
  be emulated with the implicit initialization of gnutls.
  * * certtool: Allow multiple organizations and organizational unit names to
  be specified in a template.
  * * certtool: Warn when invalid configuration options are set to a template.
  * * ocsptool: Include path in ocsp request. This resolves #108582
  (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.
- Version 3.3.2 (released 2014-05-06)
  * * libgnutls: Added the 'very weak' certificate verification profile
  that corresponds to 64-bit security level.
  * * libgnutls: Corrected file descriptor leak on random generator
  initialization.
  * * libgnutls: Corrected file descriptor leak on PSK password file
  reading. Issue identified using the Codenomicon TLS test suite.
  * * libgnutls: Avoid deinitialization if initialization has failed.
  * * libgnutls: null-terminate othername alternative names.
  * * libgnutls: gnutls_x509_trust_list_get_issuer() will operate correctly
  on a PKCS #11 trust list.
  * * libgnutls: Several small bug fixes identified using valgrind and
  the Codenomicon TLS test suite.
  * * libgnutls-dane: Accept a certificate using DANE if there is at least one
  entry that matches the certificate. Patch by simon [at] arlott.org.
  * * libgnutls-guile: Fixed compilation issue.
  * * certtool: Allow exporting a CRL on DER format.
  * * certtool: The ECDSA keys generated by default use the SECP256R1 curve
  which is supported more widely than the previously used SECP224R1.
- Version 3.3.1 (released 2014-04-19)
  * * libgnutls: Enforce more strict checks to heartbeat messages
  concerning padding and payload. Suggested by Peter Dettman.
  * * libgnutls: Allow decoding PKCS #8 files with ECC parameters
  from openssl.
  * * libgnutls: Several small bug fixes found by coverity.
  * * libgnutls: The conditionally available self-test functions
  were moved to self-test.h.
  * * libgnutls: Fixed issue with the check of incoming data when two
  different recv and send pointers have been specified. Reported and
  investigated by JMRecio.
  * * libgnutls: Fixed issue in the RSA-PSK key exchange, which would
  result to illegal memory access if a server hint was provided. Reported
  by André Klitzing.
  * * libgnutls: Fixed client memory leak in the PSK key exchange, if a
  server hint was provided.
  * * libgnutls: Corrected the *get_*_othername_oid() functions.
- Version 3.3.0 (released 2014-04-10)
  * * libgnutls: The initialization of the library was moved to a
  constructor. That is, gnutls_global_init() is no longer required
  unless linking with a static library or a system that does not
  support library constructors.
  * * libgnutls: static libraries are not built by default.
  * * libgnutls: PKCS #11 initialization is delayed to first usage.
  That avoids long delays in gnutls initialization due to broken PKCS #11
  modules.
  * * libgnutls: The PKCS #11 subsystem is re-initialized "automatically"
  on the first PKCS #11 API call after a fork.
  * * libgnutls: certificate verification profiles were introduced
  that can be specified as flags to verification functions. They
  are enumerations in gnutls_certificate_verification_profiles_t
  and can be converted to flags for use in a verification function
  using GNUTLS_PROFILE_TO_VFLAGS().
  * * libgnutls: Added the ability to read system-specific initial
  keywords, if they are prefixed with '@'. That allows a compile-time
  specified configuration file to be used to read pre-configured priority
  strings from. That can be used to impose system specific policies.
  * * libgnutls: Increased the default security level of priority
  strings (NORMAL and PFS strings require at minimum a 1008 DH prime),
  and set a verification profile by default.  The LEGACY keyword is
  introduced to set the old defaults.
  * * libgnutls: Added support for the name constraints PKIX extension.
  Currently only DNS names and e-mails are supported (no URIs, IPs
  or DNs).
  * * libgnutls: Security parameter SEC_PARAM_NORMAL was renamed to
  SEC_PARAM_MEDIUM to avoid confusion with the priority string NORMAL.
  * * libgnutls: Added new API in x509-ext.h to handle X.509 extensions.
  This API handles the X.509 extensions in isolation, allowing to parse
  similarly formatted extensions stored in other structures.
  * * libgnutls: When generating DSA keys the macro GNUTLS_SUBGROUP_TO_BITS
  can be used to specify a particular subgroup as the number of bits in
  gnutls_privkey_generate; e.g., GNUTLS_SUBGROUP_TO_BITS(2048, 256).
  * * libgnutls: DH parameter generation is now delegated to nettle.
  That unfortunately has the side-effect that DH parameters longer than
  3072 bits, cannot be generated (not without a nettle update).
  * * libgnutls: Separated nonce RNG from the main RNG. The nonce
  random number generator is based on salsa20/12.
  * * libgnutls: The buffer alignment provided to crypto backend is
  enforced to be 16-byte aligned, when compiled with cryptodev
  support. That allows certain cryptodev drivers to operate more
  efficiently.
  * * libgnutls: Return error when a public/private key pair that doesn't
  match is set into a credentials structure.
  * * libgnutls: Depend on p11-kit 0.20.0 or later.
  * * libgnutls: The new padding (%NEW_PADDING) experimental TLS extension has
  been removed. It was not approved by IETF.
  * * libgnutls: The experimental xssl library is removed from the gnutls
  distribution.
  * * libgnutls: Reduced the number of gnulib modules used in the main library.
  * * libgnutls: Added priority string %DISABLE_WILDCARDS.
  * * libgnutls: Added the more extensible verification function
  gnutls_certificate_verify_peers(), that allows checking, in addition
  to a peer's DNS hostname, for the key purpose of the end certificate
  (via PKIX extended key usage).
  * * certtool: Timestamps for serial numbers were increased to 8 bytes,
  and in batch mode to 12 (appended with 4 random bytes).
  * * certtool: When no CRL number is provided (or value set to -1), then
  a time-based number will be used, similarly to the serial generation
  number in certificates.
  * * certtool: Print the SHA256 fingerprint of a certificate in addition
  to SHA1.
  * * libgnutls: Added --enable-fips140-mode configuration option (unsupported).
  That option enables (when running on FIPS140-enabled system):
  o RSA, DSA and DH key generation as in FIPS-186-4 (using provable primes)
  o The DRBG-CTR-AES256 deterministic random generator from SP800-90A.
  o Self-tests on initialization on ciphers/MACs, public key algorithms
    and the random generator.
  o HMAC-SHA256 verification of the library on load.
  o MD5 is included for TLS purposes but cannot be used by the high level
    hashing functions.
  o All ciphers except AES are disabled.
  o All MACs and hashes except GCM and SHA are disabled (e.g., HMAC-MD5).
  o All keys (temporal and long term) are zeroized after use.
  o Security levels are adjusted to the FIPS140-2 recommendations (rather
    than ECRYPT).</changelog>
  <changelog author="meissner@suse.com" date="1427112000">- disable trousers and unbound again for now, as it causes too long
  build cycles.</changelog>
  <changelog author="astieger@suse.com" date="1427284800">- for DANE support, use bcond_with
- for tpm support, same
- note p11-kit &gt;= 0.20.7 requirement
- note libtasn1 3.9 requirement (built-in lib used otherwise)</changelog>
  <changelog author="meissner@suse.com" date="1427889600">- updated to 3.3.13 (released 2015-03-30)
  * * libgnutls: When retrieving OCTET STRINGS from PKCS #12 ContentInfo
  structures use BER to decode them (requires libtasn1 4.3). That allows
  to decode some more complex structures.
  * * libgnutls: When an end-certificate with no name is present and there
  are CA name constraints, don't reject the certificate. This follows RFC5280
  advice closely. Reported by Fotis Loukos.
  * * libgnutls: Fixed handling of supplemental data with types &gt; 255.
  Patch by Thierry Quemerais.
  * * libgnutls: Fixed double free in the parsing of CRL distribution points certificate
  extension. Reported by Robert ?wi?cki.
  * * libgnutls: Fixed a two-byte stack overflow in DTLS 0.9 protocol. That
  protocol is not enabled by default (used by openconnect VPN).
  * * libgnutls: The maximum user data send size is set to be the same for
  block and non-block ciphersuites. This addresses a regression with wine:
  https://bugs.winehq.org/show_bug.cgi?id=37500
  * * libgnutls: When generating PKCS #11 keys, set CKA_ID, CKA_SIGN,
  and CKA_DECRYPT when needed.
  * * libgnutls: Allow names with zero size to be set using
  gnutls_server_name_set(). That will disable the Server Name Indication.
  Resolves issue with wine: https://gitlab.com/gnutls/gnutls/issues/2</changelog>
  <changelog author="vcizek@suse.com" date="1438603200">- fix for CVE-2015-3622 in bundled libtasn1 (bsc#929414)
  * invalid read in octet string
  * added gnutls-CVE-2015-3622.patch
- fix for GNUTLS-SA-2015-2 (bsc#929690)
  * ServerKeyExchange signature issue
  * added gnutls-GNUTLS-SA-2015-2.patch</changelog>
  <changelog author="vcizek@suse.com" date="1440158400">- fix for CVE-2015-6251 (GNUTLS-SA-2015-3) (bsc#941794)
  * double free in certificate DN decoding
  * added gnutls-CVE-2015-6251.patch</changelog>
  <changelog author="vcizek@suse.com" date="1484049600">- GNUTLS-SA-2017-2 (bsc#1018832)
  * several memory corruptions in OpenPGP certificate decoding
  * added patches:
    gnutls-CVE-2017-5335.patch
    gnutls-CVE-2017-5337.patch
    gnutls-CVE-2017-5336.patch
- GNUTLS-SA-2016-3 (bsc#999646)
  * Incorrect certificate validation when using OCSP responses
  * added gnutls-CVE-2016-7444.patch
- remote denial of service in SSL alert handling (bsc#1005879)
  * added gnutls-CVE-2016-8610.patch</changelog>
  <changelog author="vcizek@suse.com" date="1485259200">- Fix an infinite loop if an EOF occurs while skipping a PGP packet
  * add 0001-Do-not-infinite-loop-if-an-EOF-occurs-while-skipping.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1492689600">- Update to version 3.3.27 fate#322523
  * Version 3.3.27 (released 2017-03-06)
  * * libgnutls: read the pin-value attribute if the p11-kit version allows it.
  * * libgnutls: Addressed integer overflow resulting to invalid memory write
  in OpenPGP certificate parsing. [GNUTLS-SA-2017-3A]
  * * libgnutls: Addressed crashes in OpenPGP certificate parsing, related
  to private key parser. No longer allow OpenPGP certificates (public
  keys) to contain private key sub-packets. [GNUTLS-SA-2017-3B]
  * * libgnutls: Addressed large allocation in OpenPGP certificate parsing,
  that could lead in out-of-memory condition. [GNUTLS-SA-2017-3C]
  * Version 3.3.26 (released 2016-01-09)
  * * libgnutls: Handle status request responses as optional (following
  RFC6066). This improves compatibility with implementations not sending
  these messages (including specific versions on the GnuTLS 3.5.x
  branch).
  * * libgnutls: Set limits on the maximum number of alerts handled. That is,
  applications using gnutls could be tricked into an busy loop if the
  peer sends continuously alert messages. Applications which set a
  maximum handshake time (via gnutls_handshake_set_timeout) will
  eventually recover but others may remain in a busy loops indefinitely.
  This is related but not identical to CVE-2016-8610, due to the
  difference in alert handling of the libraries (gnutls delegates that
  handling to applications).
  * * libgnutls: Fixed issue in PKCS#12 password encoding, which truncated
  passwords over 32-characters. Reported by Mario Klebsch.
  * * libgnutls: Backported functionality allowing to manipulate the IDs
  of PKCS#11 objects.
  * * libgnutls: Link to trousers (TPM library) dynamically. Backported TPM
  key handling improvements from master branch.
  * * libgnutls: Backported several fixes in PKCS#8 decryption (related to
  gitlab issue #148).
  * * libgnutls: Fix double free in certificate information printing. If the
  PKIX extension proxy was set with a policy language set but no policy
  specified, that could lead to a double free. [GNUTLS-SA-2017-1]
  * * libgnutls: Addressed memory leak in server side error path
  (issue found using oss-fuzz project)
  * * libgnutls: Addressed memory leaks and an infinite loop in OpenPGP
  certificate parsing. Fixes by Alex Gaynor. (issues found using oss-fuzz
  project)
  * * libgnutls: Addressed invalid memory accesses in OpenPGP certificate
  parsing. (issues found using oss-fuzz project) [GNUTLS-SA-2017-2]
  * * tpmtool: backported the --test-sign option.
  * Version 3.3.25 (released 2016-10-9)
  * * libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key()
  failures due to key mismatch. This prevents leaks or double freeing
  on such failures.
  * * libgnutls: Corrected the comparison of the serial size in OCSP
  response. Previously the OCSP certificate check wouldn't verify the
  serial length and could succeed in cases it shouldn't
  (GNUTLS-SA-2016-3). Reported by Stefan Buehler.
  * * libgnutls: Fixes in gnutls_x509_crt_list_import2, which was
  ignoring flags if all certificates in the list fit within the
  initially allocated memory.
  * * libgnutls: Fix gnutls_pkcs12_simple_parse to always extract the
  complete chain, even when the extra_certs was non-null. Report and fix
  by Stefan Sørensen.
  * * libgnutls: Added support for decrypting PKCS#8 files which use the
  HMAC-SHA256 as PRF.
  * * libgnutls: Addressed issue with PKCS#11 signature generation on ECDSA
  keys. The signature is now written as unsigned integers into the
  DSASignatureValue structure. Previously signed integers could be
  written depending on what the underlying module would produce.
  Addresses #122.
  * * libgnutls: backported X.509 unique ID functionality from later
  versions.
  * * libgnutls: Increased the maximum size of the handshake message hash.
  This will allow the library to cope better with larger packets, as
  the ones offered by current TLS 1.3 drafts.
  * Version 3.3.24 (released 2016-07-06)
  * * libgnutls: Address issue when utilizing the p11-kit trust store
  for certificate verification (GNUTLS-SA-2016-2).
  * * libgnutls: when generating private keys mark the public key as not
  private.
  * * libgnutls: use secure_getenv() where available to obtain environment
  variables.
  * * libgnutls: Fixed DTLS handshake packet reconstruction. Reported by
  Guillaume Roguez.
  * * libgnutls: Fixed issues with PKCS#11 reading of sensitive objects
  from SafeNet Network HSM. Reported by Anthony Alba.
  * * libgnutls: Corrected reading and writing of PKCS#11
  CKA_SERIAL_NUMBER. Report and fix by Stanislav ?idek.
  * * libgnutls: Enhanced the priority functions to understand -VERS-ALL
  keyword to allow compatibility of priority strings between 3.4.x and
  3.3.x.
  * Version 3.3.23 (released 2016-05-20)
  * * libgnutls: Corrected behavior of ALPN extension parsing during session
  resumption. Report and patches by Yuriy M. Kaminskiy.
  * * libgnutls: Properly print the IP Adress name constraints.
  * * libgnutls: Fixes in gnutls_privkey_import_ecc_raw().
  * * libgnutls: Fixed gnutls_pkcs11_get_raw_issuer() usage with the
  GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag. Previously that
  operation could fail on certain PKCS#11 modules.
  * * libgnutls: gnutls_pkcs11_obj_import_url() and
  gnutls_x509_crt_import_pkcs11_url() can accept the
  GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag.
  * * libgnutls: gnutls_certificate_set_key() was enhanced to import the DNS
  name of the certificates if the provided names are NULL.
  * * libgnutls: when receiving SNI names, only save and expose to
  application the supported DNS names.
  * * libgnutls: when importing the certificate names at the
  gnutls_certificate_set* functions, only consider the CN as a fallback
  if DNS names are provided via the alternative name extension.
  * * ocsptool: use HTTP/1.0 for requests. This avoids issue with servers
  serving chunk encoding which ocsptool doesn't support. Reported by
  Thomas Klute.
  * * certtool: do not require a CA for OCSP signing tag. This follows the
  recommendations in RFC6960 in 4.2.2.2 which allow a CA to delegate OCSP
  signing to another certificate without requiring it to be a CA.
  Reported by Thomas Klute.
  * * gnutls-cli: on OCSP verification do not fail if we have a single valid
  reply. Report and reproducer by Thomas Klute.
  * Version 3.3.22 (released 2016-03-10)
  * * libgnutls: Eliminated issues preventing buffers more than 2^32 bytes
  to be used with hashing functions.
  * * libgnutls: Follow closely RFC5280 recommendations and use UTCTime for
  dates prior to 2050. Backported from 3.4.x branch.
  * * libgnutls: Several fixes to prevent relying on undefined behavior of C
  (found with libubsan).
  * * libgnutls: SSL 3.0 is no longer included in the default priorities
  list. It has to be explicitly enabled, e.g., with a string like
  "NORMAL:+VERS-SSL3.0". The previous behavior can be restored using
  the flag --with-ssl3 to configure.
  * Version 3.3.21 (released 2016-02-03)
  * * libgnutls: Corrected ALPN protocol negotiation. Before GnuTLS would
  negotiate the last commonly supported protocol, rather than the
  first. Reported by Remi Denis-Courmont (#63).
  * * libgnutls: ARCFOUR (RC4) is no longer included in the default
  priorities list. It has to be explicitly enabled, e.g., with a string
  like "NORMAL:+ARCFOUR-128". The previous behavior can be restored using
  the flag --with-arcfour128 to configure.
  * * libgnutls: Corrected regression caused by incorrect fix in
  gnutls_x509_ext_export_key_usage() at 3.3.20 release.
  * Version 3.3.20 (released 2016-01-08)
  * * libgnutls: Corrected memory leak in gnutls_pubkey_import_privkey() when
  used with PKCS #11 keys.
  * * libgnutls: For DSA and ECDSA keys in PKCS #11 objects, import
  their public keys from either a public key object or a certificate.
  That is, because private keys do not contain all the required
  parameters for a direct import. Reported by Jan Vcelak.
  * * libgnutls: Fixed issue when writing ECDSA private keys in PKCS #11
  tokens.
  * * libgnutls: Fixed out-of-bounds read in
  gnutls_x509_ext_export_key_usage(), report and patch by Tim Kosse.
  * * libgnutls: Handle DNS name constraints with a leading dot. Backported
  from 3.4.x branch.
  * * libgnutls: The max-record extension is no longer negotiated on DTLS.
  This resolves issue with the max-record being negotiated but ignored.
  * Version 3.3.19 (released 2015-11-22)
  * * libgnutls: Properly require TLS 1.2 to all the CBC-SHA256 and
  CBC-SHA384 ciphersuites. This solves an interoperability issue with
  openssl. Reported by Viktor Dukhovni.
  * * libgnutls: Fixed memory leak in
  gnutls_pubkey_get_preferred_hash_algorithm(), patch by Lennert
  Buytenhek.
  * * libgnutls: When writing a certificate into a PKCS #11 token, ensure
  that CKA_SERIAL_NUMBER and CKA_ISSUER are written.
  * * libgnutls: Allow the presence of legacy ciphers and key exchanges in
  priority strings and consider them a no-op.
  * * libgnutls: On a rehandshake allow switching from anonymous to ECDHE and
  DHE ciphersuites.
  * * libgnutls: Added GNUTLS_SKIP_GLOBAL_INIT macro to allow programs
  skipping the implicit global initialization.
  * * gnutls.pc: Don't include libtool specific options to link flags.
  Reported by Dan Kegel.
  * Version 3.3.18 (released 2015-09-12)
  * * libgnutls: When re-importing CRLs to a trust list ensure that there
  are no duplicate entries.
  * * certtool: Removed any arbitrary limits imposed on input file sizes
  and maximum number of certificates imported.
  * Version 3.3.17 (released 2015-08-10)
  * * libgnutls: Fix issue with server side sending the status request
  extension even when not requested. Reported by Jeremy Harris.
  * * libgnutls: gnutls_pkcs11_privkey_generate2() will store the generated
  public key, unless the GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY flag is
  specified.
  * * libgnutls: fixed double free in DN decoding [GNUTLS-SA-2015-3].
  * Version 3.3.16 (released 2015-07-12)
  * * libgnutls: Allow compilation with nettle 3.0 or later
  * * libgnutls: corrected failure when importing plain files
  with gnutls_x509_privkey_import2(), and a password was provided.
  * * libgnutls: Don't reject certificates if a CA has the URI or IP address
  name constraints, and the end certificate doesn't have an IP address
  name or a URI set.
  * * libgnutls: set and read the hint in DHE-PSK and ECDHE-PSK ciphersuites.
- Dropped patches:
  * gnutls-3.0.26-skip-test-fwrite.patch: Fixed upstream.
  * 0001-Do-not-infinite-loop-if-an-EOF-occurs-while-skipping.patch: seems
    not to be needed anymore.</changelog>
  <changelog author="vcizek@suse.com" date="1535112000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  The _asn1_check_identifier function in Libtasn1 caused a NULL
  pointer dereference and crash (CVE-2017-10790, bsc#1047002)
  * add gnutls-CVE-2017-10790.patch</changelog>
</package>
<package pkgid="c6dfdcd23c106273a08daa476410a8fb34f528d0fd4ff1d92e31a6028aa268a1" name="go" arch="src">
  <version epoch="0" ver="1.10.4" rel="40.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="e62c5a9e36e47ca64c8904cef971cad1a9edf514b83163c40d2be8678d0d21d4" name="go" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="40.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="8b97a7b524f81fddfd8e5fdb289e6c4837c594127e1b2603cb7e767ff65b2511" name="go" arch="src">
  <version epoch="0" ver="1.7.5" rel="27.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
  <changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
  <changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
  <changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
  <changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
</package>
<package pkgid="6e7fe322fc679d82a29eebce1a8f92abf162cb39c060b9c09716d2c4779f977a" name="go" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="27.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
  <changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
  <changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
  <changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
  <changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
</package>
<package pkgid="b3b75cbe39e91643e1e1ae131bfd62013e521e9d2b1de4339e0033c4e7370bee" name="go" arch="src">
  <version epoch="0" ver="1.9.2" rel="30.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage</changelog>
</package>
<package pkgid="b96841bf07e9c6481fcdfbb3b8f8247883c0945db70402593976b6591b1b6d64" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="30.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage</changelog>
</package>
<package pkgid="3c96a2ae9b2189bbe50cb6b8ac4755a3faaf50d0817423421f2f9a29720efec7" name="go" arch="src">
  <version epoch="0" ver="1.9.4" rel="33.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
</package>
<package pkgid="2378e9ee565b58c062d19a4318edad8ce1da67990b69dfd4781a8ad5db7d62ab" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="33.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
</package>
<package pkgid="29c2d9d3ad397d6927035fe562c67eda3a020f6bf82b48700b8825079370c07d" name="go" arch="src">
  <version epoch="0" ver="1.9.7" rel="37.2"/>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="88ae5ea1b083effda8f9d7011a1bc86300f10acb448a5c965840e39a651acf1d" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="37.2"/>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="db38f47f3c36f40a6aebcf72f260d94b39e603df9766313a1fb497ef4c68fdc3" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="40.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="9210ceb7a608633d287e4349a4d2486be6a15043a0b2770f62bf84eaededfe2c" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="27.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
  <changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
  <changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
  <changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
  <changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
</package>
<package pkgid="d046d1def1082e3b23be4cc0096138cc42b2c2f7060c4696e38e5bd100666eba" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="30.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage</changelog>
</package>
<package pkgid="05be135b57512099bb6c8fb5a371cf7c6c6737ddee503422727994090c5624e8" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="33.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
</package>
<package pkgid="d5b11c438aa70c3a1ffdae548c7d196687e91ae25319a1c768e144203c257feb" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="37.2"/>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="97b06393cc46cade3c7f33f8f70326f3a3d45966a9a571daa4717baddb2c6099" name="go-md2man" arch="x86_64">
  <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>
  <changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
  <changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>
</package>
<package pkgid="0d0f8f01d126e0e924003c6ac1eecb00f726c83f2895d19eec877183e37d00e7" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="40.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="57945b5b0d52ec5818166809d95094566304013e498c540de8df94b12006ac42" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="30.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage</changelog>
</package>
<package pkgid="a37b731ff014e525e844cb9e8e3e1a210361a8f917ae44b4097ce9f8a095612a" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="33.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
</package>
<package pkgid="adfe63d4e0b08757aa8db625d5827f5baa595c0368ef323a9c529411a8b9b177" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="37.2"/>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="7864f721f317d7d3a2f27a2876683e679723e1ae263e3582493627592b140219" name="go-tools" arch="x86_64">
  <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>
  <changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
  <changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
  <changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
  <changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
  <changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
  <changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>
</package>
<package pkgid="923668c71667b17e8ed7d918d6b4b3ea0fcf74eaeb84d37553b5c56a9eaed30a" name="go1.10" arch="src">
  <version epoch="0" ver="1.10.4" rel="2.2"/>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
</package>
<package pkgid="d22458f01ebec0016555283e820c5c0e74e60f1c71dc7bff735f9160d9e37e39" name="go1.10" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="2.2"/>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
</package>
<package pkgid="e84020523d01b8b166f55f885700380797a8460cb285005736c1a6d83d72a914" name="go1.10" arch="src">
  <version epoch="0" ver="1.10.7" rel="5.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="1869e9c46f47fd654707d1115c4263a937a9cebe404de81fac9d874a6f95bd63" name="go1.10" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="5.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="989a9dfb7d1b0145bb0b00b8e8a33afc052cce9b6242a67c41ec8020cdec2c07" name="go1.10-doc" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="2.2"/>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
</package>
<package pkgid="79ff17f6b2edb207970ba8310198f2f7f4a498f6497fbb1f07bdd6898d6263c4" name="go1.10-doc" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="5.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="c5da2e8051003af781638eb8e21043c1b4a8338d8f347c2192590098ef34ce88" name="go1.10-race" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="2.2"/>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
</package>
<package pkgid="4677306a2be7ae4504cd73a2b5c53e2a42b142f4cd543f653dfbd5f2b079e7cd" name="go1.10-race" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="5.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="2af3ece55fb2c416c6128c2bc64bef51085bb6896341222f2f98508977686aa7" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.4" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="7bc86039af24bd386abd707391a044101f3532643916d8783bb2f941677cf240" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="f2ce6d5b84def12f01842103459660027b4cc027fadee31ec692f01d79c5c664" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="f2bcf0dcdc167b4bebddf059aac2cbf2fa5584a16bcbf3132fc0b26473a513fa" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="585b690dce76bea1b783dfd814751cb0d55350f19eb297c25bbf6d8982e3e82a" name="go1.7" arch="src">
  <version epoch="0" ver="1.7.5" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
</package>
<package pkgid="a74242cbb907e5ab9943825cc9afb655cab155356f2d93dc8b142c492dc2ce3c" name="go1.7" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
</package>
<package pkgid="07762b50e6acd92ad49268bc817ba05bc977b0aeeb5ad4bfbffea6fc89c728e3" name="go1.7" arch="src">
  <version epoch="0" ver="1.7.5" rel="5.1"/>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
</package>
<package pkgid="73219111ce4aa3ba4759df82b843a547f345b51fdf5de2bb0c2903f68ca02ba5" name="go1.7" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="5.1"/>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
</package>
<package pkgid="8fe860a2bb530cdd34537d10e7b08585bca15a776c4aa440b6a3b761c4c513ad" name="go1.7-doc" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
</package>
<package pkgid="97ff5dc9c1e37d2561ec60c32fcb872069d7bf09875944edb7f4b7a8dc653f34" name="go1.7-doc" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="5.1"/>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
</package>
<package pkgid="988b400f3d9efa70afb18eb4a2abbafc52a2e2a7ea172edf9fed74df833af91b" name="go1.7-race" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="2.1"/>
  <changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
</package>
<package pkgid="0665b8f78d79cce93c1d98c12b59b8fcaac1a8bbb7b28b1f96ca920c2cdec5cb" name="go1.7-race" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="5.1"/>
  <changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
  <changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
  <changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493380800">- Rename package to go1.7</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>
  <changelog author="schwab@suse.de" date="1498910400">- Need binutils-gold on aarch64</changelog>
  <changelog author="thipp@suse.de" date="1500292800">- Remove gcc5-go dependency and only use gcc6-go if needed
- Remove gcc5-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fix incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1507550400">- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch</changelog>
  <changelog author="thipp@suse.de" date="1507636800">- Add patch to fix arbitrary code execution during ?go get? or ?go get -d?
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch</changelog>
  <changelog author="fstrba@suse.com" date="1507896000">- Build with gcc7-go in openSUSE:Factory
- Added path:
  * gcc7-go.patch
    + execute %{_bindir}/go-7 instead of %{_bindir}/go</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
</package>
<package pkgid="556d6b0e16900c58c49f8e0c44912fd237cde950b5ac50e9c6ab8697e07c5d34" name="go1.8" arch="src">
  <version epoch="0" ver="1.8.5" rel="2.1"/>
  <changelog author="bg@suse.com" date="1483099200">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
</package>
<package pkgid="edabf025c5d78196d851ec8d6a95d3f85527a564c17306f7869d0d91605227bc" name="go1.8" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="2.1"/>
  <changelog author="bg@suse.com" date="1483099200">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
</package>
<package pkgid="a5148ba4302560969f1fe9ea473edc35641cc20d350bb86bf5d1975e84927dce" name="go1.8" arch="src">
  <version epoch="0" ver="1.8.7" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.8.7 (released 2018/02/07) includes a security fix
  to ?go get? (bsc#1080006 - (CVE-2018-6574)).
- update to go1.8.6 (released 2018/01/22) includes the the same fix
  in math/big as Go 1.9.3 and was released at the same time.</changelog>
</package>
<package pkgid="dd96970e21e2c37c8f0b3ac198e98e71e5d40fc36ca1afd93fb55db40964720c" name="go1.8" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.8.7 (released 2018/02/07) includes a security fix
  to ?go get? (bsc#1080006 - (CVE-2018-6574)).
- update to go1.8.6 (released 2018/01/22) includes the the same fix
  in math/big as Go 1.9.3 and was released at the same time.</changelog>
</package>
<package pkgid="1d28c7a44a7713529fdb516064a20c74dbbee58446cd1ae66947e896d5cf0974" name="go1.8-doc" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="2.1"/>
  <changelog author="bg@suse.com" date="1483099200">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
</package>
<package pkgid="5e3505df720dc80982a7ff24fd047edc9e4a109f02222fe1d157f035f0760040" name="go1.8-doc" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.8.7 (released 2018/02/07) includes a security fix
  to ?go get? (bsc#1080006 - (CVE-2018-6574)).
- update to go1.8.6 (released 2018/01/22) includes the the same fix
  in math/big as Go 1.9.3 and was released at the same time.</changelog>
</package>
<package pkgid="e57e9dae5d87c02b5ccbb34d83d6ec5c2e6f50c8480fb4c1cf3a03479b3463c6" name="go1.8-race" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="2.1"/>
  <changelog author="bg@suse.com" date="1483099200">- set libdir for s390x in go.sh</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
</package>
<package pkgid="2be2189505829b33b636198dcb07e2fe9e342c475ccdbc7ea5b499ff141d8cfd" name="go1.8-race" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Rename to go1.8</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.8.4
  go1.8.4 (released 2017/10/04) includes two security fixes. It
  contains the same fixes as Go 1.9.1 and was released at the same
  time. See the Go 1.8.4 milestone on our issue tracker for
  details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.8.5
  go1.8.5 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509
  and net/smtp packages. It includes a fix to a bug introduced in
  Go 1.8.4 that broke go get of non-Git repositories under certain
  conditions. See the Go 1.8.5 milestone on our issue tracker for
  details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.8.7 (released 2018/02/07) includes a security fix
  to ?go get? (bsc#1080006 - (CVE-2018-6574)).
- update to go1.8.6 (released 2018/01/22) includes the the same fix
  in math/big as Go 1.9.3 and was released at the same time.</changelog>
</package>
<package pkgid="02da17876a601ff7b6349f1c2bcfb60a36b09a3a8c2260175011a12a41a9b658" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.2" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
</package>
<package pkgid="bd06ec7f94c3a691dc94299b31ef408629082d1b65ff379ffc69d4704ccfe346" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
</package>
<package pkgid="26266254882435551def84626e867db889e8e168c7799c845cb4515ee056d669" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
</package>
<package pkgid="9ea4e5e8ba50a87310f33e5e6ade1bdb1a92d3f24aa60282b0fcaa82fe42a7d8" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
</package>
<package pkgid="5c6202adf945fe08fcbb13c0ecd77e9ca159d67cf5cc5e1236f852543ef702d2" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.7" rel="10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="6b9d3341b62b59f4ab0c54fd5840195e9864e9d0361c34d84a92916a72eb7e43" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="dac1e106ddbd9e59ec5ae1a2d8f29ef963dc24ea79d8548c473f9e846362ba53" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
</package>
<package pkgid="98ea7eaf306d243e0eb80fa22304532720f4df5096161505c1e12d180e602603" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
</package>
<package pkgid="7495f5bf2c23c61c0b5e93d0c1ba3d28d3f8c013c2930e6065178c54bb77dbed" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="d9d79cb26d51e7790e0f856d7374e551a847a21eef258954523dc955f2800a19" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
</package>
<package pkgid="9fdf8bf2e28e8c24911c1242c235ce056377d4f25981f5969086f5275e421942" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493208000">- Remove mercurial build dependency. Mercurial is a version control
  system, like git. We are not using this in the build service to
  get the sources.
- Do not set GOBIN. If GOBIN is unset, by default go assumes GOPATH/bin.
  This way, the user can change GOPATH without the need to change GOBIN.
  fix bsc#1026658</changelog>
  <changelog author="thipp@suse.de" date="1493294400">- Update to go1.8.1
  Most of its changes are in the implementation of the toolchain, runtime, and
  libraries. There are two minor changes to the language specification. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds support for 32-bit MIPS, updates the compiler back end to
  generate more efficient code, reduces GC pauses by eliminating stop-the-world
  stack rescanning, adds HTTP/2 Push support, adds HTTP graceful shutdown, adds
  more context support, enables profiling mutexes, and simplifies sorting
  slices.
  more at: https://golang.org/doc/go1.8
  Update patches:
  - allow-binary-only-packages.patch
  - gcc5-go.patch
  - gcc6-go.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
</package>
<package pkgid="7da7466ea6d56e476bc177bfcb88bd955b21a6a3c1d3d9f9717004aa7b5c2b79" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="d7fd14fd1ed3f8eaf6c465996d1c4b57e2f3adbf77c242d125231998b7dd6eca" name="golang-bitbucket-taruti-bigendian" arch="src">
  <version epoch="0" ver="0.0.0+hg20130320.25.37f0ed9bf940" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1309608000">- Initial version</changelog>
  <changelog author="saschpe@suse.de" date="1323086400">- Update to 05/12/2011 mercurial version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130320.25.37f0ed9bf940:
  + Upstream provides no changelog
- Use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-bitbucket-taruti-bigendian
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="1285ba0dee1b29fc6da4a35e7a7cc08cdfb6b7084e11077bb38f26aac7bb2cf5" name="golang-bitbucket-taruti-bigendian" arch="x86_64">
  <version epoch="0" ver="0.0.0+hg20130320.25.37f0ed9bf940" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1309608000">- Initial version</changelog>
  <changelog author="saschpe@suse.de" date="1323086400">- Update to 05/12/2011 mercurial version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130320.25.37f0ed9bf940:
  + Upstream provides no changelog
- Use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-bitbucket-taruti-bigendian
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="bce35e84b6b552e9b1f8531ce41324733c91df692433e1fdddb36acf0b16489b" name="golang-github-cpuguy83-go-md2man" arch="src">
  <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>
  <changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
  <changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>
</package>
<package pkgid="3954a2856aef4a677b68bd8f90c1ae13794b1ffe3bcd06eb2f9b953405a73464" name="golang-github-cpuguy83-go-md2man" arch="x86_64">
  <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>
  <changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
  <changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>
</package>
<package pkgid="b0d4f3ef97ff963da286faeba7fa63a1fba6f1d99b0539008d85f1998122f91a" name="golang-github-dchest-authcookie" arch="src">
  <version epoch="0" ver="0.0.0+git20120917.fbdef6e" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to fix build errors</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Adjust to Go weekly.2011-12-02 release changes</changelog>
  <changelog author="graham@andtech.eu" date="1327492800">- Pass hash to hmac.New instead of using NewSHA256
- Update to weekly.2012-01-20</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %go_exclusivearch macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120917.fbdef6e:
  + Upstream provides no changelog
- Use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-dchest-authcookie
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="15dc6684d493f197d19790642b325c1c89f22a5de832c59ad5c9889644854e1c" name="golang-github-dchest-authcookie" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20120917.fbdef6e" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to fix build errors</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Adjust to Go weekly.2011-12-02 release changes</changelog>
  <changelog author="graham@andtech.eu" date="1327492800">- Pass hash to hmac.New instead of using NewSHA256
- Update to weekly.2012-01-20</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %go_exclusivearch macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120917.fbdef6e:
  + Upstream provides no changelog
- Use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-dchest-authcookie
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="0d4e1578c9946fad6bbe14d6e5aae38aa0fe857112ccb97795796d09679fa472" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
</package>
<package pkgid="84fb084bcf4d4cb8e073ee5247f0197c4b3595fd18d9441d0c05c3816aa3fe5e" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
</package>
<package pkgid="bc1ba5e0592e0bfd8d9193c00147ce3ea02ef1e0524e798d5ed4e99f1b20d374" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2066_7b2b1feb1de4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="bc43f98bdf1499da0b19c87fc88a6cfa547d21477780e8479c82aa7931f1f452" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2066_7b2b1feb1de4" rel="5.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
</package>
<package pkgid="c905482c6b470fc2c9323731a33d4c5a6cc43c1e2fbf0bfab2742721a1cff673" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="8.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="939141ae09e6db113daa470fe9d9feb72021dbd46ec85fa6f1ffb431d38e8082" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="8.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="fd66025c88148b2a07dbf6a220db4f3d28a2a5f5c765675506a94df3bd99b000" name="golang-github-exercism-cli" arch="src">
  <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>
  <changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
  <changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
  <changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>
</package>
<package pkgid="b317116bbca64d6f2474e59da54923c61f66e80cd124f2af3515510e1a224ade" name="golang-github-exercism-cli" arch="x86_64">
  <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>
  <changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
  <changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
  <changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
  <changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>
</package>
<package pkgid="0d16c2d15554c0f6b8591a74017e7240d38e897215a05e09187d227d2ef261ca" name="golang-github-fitstar-falcore" arch="src">
  <version epoch="0" ver="0.0.0+git20161013.63e3547" rel="3.1"/>
  <changelog author="graham@andtech.eu" date="1333368000">- initial package</changelog>
  <changelog author="graham@andtech.eu" date="1344945600">- Support for sendfile on linux/bsd
  Additional net/http handler
  Windows build fixes</changelog>
  <changelog author="graham@andtech.eu" date="1345377600">- Issue #29
  - Mime type lookup fails for RHEL6 and it's clones. mime types
    tested for are now guaranteed to be in the lookup table.</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update to latest git version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20130807.da39923:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-fitstar-falcore
- update version 0.0.0+git20150708.286078d
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161013.63e3547:
  * gofmt
  * - Checkout fixed example from ngmoco
  * - Update github reference and change Simpe to StringResponse
  * body on http.Response should never be nil. leave the zero-length strings.NewReader intact
  * fixing the percentages on the trace
  * make sure to drop transfer encoding since we dropped the body
  * don't allocate headers when they're already provided
  * removed debug etag test error
  * don't crash if the upstream pool is empty
  * make content length behavior match</changelog>
</package>
<package pkgid="e060d56835ab99e6be965703ee1351c0f9804c2ce4853ab96d4b618d92cf37a9" name="golang-github-fitstar-falcore" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20161013.63e3547" rel="3.1"/>
  <changelog author="graham@andtech.eu" date="1333368000">- initial package</changelog>
  <changelog author="graham@andtech.eu" date="1344945600">- Support for sendfile on linux/bsd
  Additional net/http handler
  Windows build fixes</changelog>
  <changelog author="graham@andtech.eu" date="1345377600">- Issue #29
  - Mime type lookup fails for RHEL6 and it's clones. mime types
    tested for are now guaranteed to be in the lookup table.</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update to latest git version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20130807.da39923:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-fitstar-falcore
- update version 0.0.0+git20150708.286078d
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161013.63e3547:
  * gofmt
  * - Checkout fixed example from ngmoco
  * - Update github reference and change Simpe to StringResponse
  * body on http.Response should never be nil. leave the zero-length strings.NewReader intact
  * fixing the percentages on the trace
  * make sure to drop transfer encoding since we dropped the body
  * don't allocate headers when they're already provided
  * removed debug etag test error
  * don't crash if the upstream pool is empty
  * make content length behavior match</changelog>
</package>
<package pkgid="2cb743f11bb50e41db229c8d4de4ec99316299596241f1560236c02c088028e8" name="golang-github-golang-geo" arch="noarch">
  <version epoch="0" ver="0.0.0+git20170112.f819552" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
</package>
<package pkgid="41828b9028afc4abafe8ab439552b6bfa2fb965ba044fbef7a6a4079e4343302" name="golang-github-golang-geo" arch="src">
  <version epoch="0" ver="0.0.0+git20170112.f819552" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
</package>
<package pkgid="072e152441f9b5cfb6510228fbec3bdf161ea32483e50eb182d0ee83426d075e" name="golang-github-golang-glog" arch="src">
  <version epoch="0" ver="0.0.0+git20141105.44145f0" rel="7.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20141105.44145f0</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Ensure neutrality of description / trim redundant words</changelog>
</package>
<package pkgid="b9a38b036428da71f8f3a9fcb88b3fd256d50c7b0deabb526cd8859406858da8" name="golang-github-golang-glog" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20141105.44145f0" rel="7.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20141105.44145f0</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Ensure neutrality of description / trim redundant words</changelog>
</package>
<package pkgid="a3aa538931f47dbda49f5ab266c84baa6002036465b38ecb91fbb0d9ce197866" name="golang-github-golang-protobuf" arch="src">
  <version epoch="0" ver="0.0.0+git20170217.69b215d" rel="5.1"/>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
  <changelog author="saschpe@gmx.de" date="1308052800">- Update to 14/06/2011 mercurial release
  * Adapted reflect API changes
  * Safer unmarshalling
- Added goprotobuf-fix-imports patch
- Added goprotobuf-fix-proto-testsuite patch
- Also build and install goproto-gen-go binary
- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@gmx.de" date="1308916800">- Update to 24/06/2011 mercurial version
  * goprotobuf: update for Alignof/Sizeof returning uintptr, and
    goto restriction
  * goprotobuf: sync from Google internal version</changelog>
  <changelog author="saschpe@suse.de" date="1315483200">- Update to 08/09/2011 mercurial version:
  * Follow changes of weekly Go release</changelog>
  <changelog author="saschpe@suse.de" date="1323864000">- Adjust to Go weekly.2011-12-02 changes</changelog>
  <changelog author="graham@andtech.eu" date="1327492800">- Update for weekly.2012-01-20
- update to go 1 import strings
- Fix panic in SetDefaults for nil sub-messages
- Fix a couple of instances where bad input could cause a panic
- GetExtension now returns a specific error when the requested extension is
  missing</changelog>
  <changelog author="graham@andtech.eu" date="1328702400">- patch for encode/decode update runtime.MemStats use for weekly</changelog>
  <changelog author="graham@andtech.eu" date="1329393600">- Update for weekly 2012-02-12
- Remove uses of runtime.MemStats.
- Correctly generate extension names for .proto files that don't declare a
  package.
- Better error handling for invalid input that mentions tag 0.
- Weak import/field handling.
- Fix proto.Equal to consider empty and nil repeated fields as equal.
- Avoid generating a struct that uses the same name for a field and a method.
- update to loss of unsafe.Unreflect, unsafe.New</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package path locations
- Add documentation sub-package</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update pacakge to latest upstream mercurial version</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage
- name changed to go-protobuf
- source changed from google code to github.com/golang/protobuf
- version update to 0.0.0+git20150320.de8c523</changelog>
  <changelog author="i@marguerite.su" date="1436616000">- rename golang-github-golang-protobuf
- update version 0.0.0+git20150708.ab974be
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 0.0.0+git20151207.68415e7:
  + Unexport proto.MessageSet, and remove a bunch of its support.
  + Add compressed file descriptor code generation.
  + Remove a test that has outlived its usefulness.
  + Generate correct service name for gRPC services without a package name.
  + Document parameters in README
  + Fix unmarshaling code to properly handle multiple instances of the same extension appearing in the wire format. Prior to this change, multiple custom options would result in all but the first being discarded when processed using the proto.GetExtension() facilities.
  + Regenerate protos.
  + Generate sizer functions for oneofs.
  + By popular demand, rename README to README.md and make Markdown consistent.
  + Add some more Markdown annotations.</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Renamed the subpackage for the protoc-gen-go binary</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161116.8ee7999:
  * Run 'make generate-test-pbs' in proto/ to regenerate proto3.pb.go testdata
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.</changelog>
  <changelog author="thipp@suse.de" date="1488369600">- Update to version 0.0.0+git20170217.69b215d:
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.
  * fix import path
- Update rpmlintrc
- Update requirements</changelog>
</package>
<package pkgid="118f77e85d3aa5a0b28aad1581cc15f5bcaf185ed4c4f6a8d7588c817ad39036" name="golang-github-golang-protobuf" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170217.69b215d" rel="5.1"/>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
  <changelog author="saschpe@gmx.de" date="1308052800">- Update to 14/06/2011 mercurial release
  * Adapted reflect API changes
  * Safer unmarshalling
- Added goprotobuf-fix-imports patch
- Added goprotobuf-fix-proto-testsuite patch
- Also build and install goproto-gen-go binary
- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@gmx.de" date="1308916800">- Update to 24/06/2011 mercurial version
  * goprotobuf: update for Alignof/Sizeof returning uintptr, and
    goto restriction
  * goprotobuf: sync from Google internal version</changelog>
  <changelog author="saschpe@suse.de" date="1315483200">- Update to 08/09/2011 mercurial version:
  * Follow changes of weekly Go release</changelog>
  <changelog author="saschpe@suse.de" date="1323864000">- Adjust to Go weekly.2011-12-02 changes</changelog>
  <changelog author="graham@andtech.eu" date="1327492800">- Update for weekly.2012-01-20
- update to go 1 import strings
- Fix panic in SetDefaults for nil sub-messages
- Fix a couple of instances where bad input could cause a panic
- GetExtension now returns a specific error when the requested extension is
  missing</changelog>
  <changelog author="graham@andtech.eu" date="1328702400">- patch for encode/decode update runtime.MemStats use for weekly</changelog>
  <changelog author="graham@andtech.eu" date="1329393600">- Update for weekly 2012-02-12
- Remove uses of runtime.MemStats.
- Correctly generate extension names for .proto files that don't declare a
  package.
- Better error handling for invalid input that mentions tag 0.
- Weak import/field handling.
- Fix proto.Equal to consider empty and nil repeated fields as equal.
- Avoid generating a struct that uses the same name for a field and a method.
- update to loss of unsafe.Unreflect, unsafe.New</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package path locations
- Add documentation sub-package</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update pacakge to latest upstream mercurial version</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage
- name changed to go-protobuf
- source changed from google code to github.com/golang/protobuf
- version update to 0.0.0+git20150320.de8c523</changelog>
  <changelog author="i@marguerite.su" date="1436616000">- rename golang-github-golang-protobuf
- update version 0.0.0+git20150708.ab974be
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 0.0.0+git20151207.68415e7:
  + Unexport proto.MessageSet, and remove a bunch of its support.
  + Add compressed file descriptor code generation.
  + Remove a test that has outlived its usefulness.
  + Generate correct service name for gRPC services without a package name.
  + Document parameters in README
  + Fix unmarshaling code to properly handle multiple instances of the same extension appearing in the wire format. Prior to this change, multiple custom options would result in all but the first being discarded when processed using the proto.GetExtension() facilities.
  + Regenerate protos.
  + Generate sizer functions for oneofs.
  + By popular demand, rename README to README.md and make Markdown consistent.
  + Add some more Markdown annotations.</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Renamed the subpackage for the protoc-gen-go binary</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161116.8ee7999:
  * Run 'make generate-test-pbs' in proto/ to regenerate proto3.pb.go testdata
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.</changelog>
  <changelog author="thipp@suse.de" date="1488369600">- Update to version 0.0.0+git20170217.69b215d:
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.
  * fix import path
- Update rpmlintrc
- Update requirements</changelog>
</package>
<package pkgid="836a8e37a199d9c989598eedd6418f4b94a35f4fb95d6c8f1c3bbe3b1991db8b" name="golang-github-gorilla-context" arch="noarch">
  <version epoch="0" ver="1.1" rel="3.1"/>
  <changelog author="me@zygoon.pl" date="1468238400">- Initial version for openSUSE by Frank Schreiner</changelog>
  <changelog author="thipp@suse.de" date="1484136000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="34504d9c7a115883d054cd415a56cd1d703b470f3db7a07fb9e0dc1eede2ef87" name="golang-github-gorilla-context" arch="src">
  <version epoch="0" ver="1.1" rel="3.1"/>
  <changelog author="me@zygoon.pl" date="1468238400">- Initial version for openSUSE by Frank Schreiner</changelog>
  <changelog author="thipp@suse.de" date="1484136000">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="3fb5d2d7e6a444741843d9d407acade573c7ef713f68bbd232b0eb04f6985e2f" name="golang-github-gorilla-websocket" arch="noarch">
  <version epoch="0" ver="0.0.0+git20170718.a69d9f6" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1426852800">- initial version 0.0.0+git20150309.2dbddeb</changelog>
  <changelog author="avvissu@yandex.by" date="1459252800">- Update to version 0.0.0+git20160313.e2e3d84:
  + Support proxy authorization for websocket client
  + Improve Upgrader.Upgrade doc
  + Update .travis.yml to build Go 1.6
  + Fix go vet warning
  + Run 'go vet' instead of 'go tool vet' in Travis
  + Remove Go 1.1 from Travis config
  + Add IsWebSocketUpgrade
  + Document that default ping handler can block</changelog>
  <changelog author="avvissu@yandex.by" date="1468670400">- Get rid of source subpackage, no one use it</changelog>
  <changelog author="thipp@suse.de" date="1484049600">- Update to version 0.0.0+git20161231.adf16b3:
  * Fix filewatch example
  * .travis.yml go vet fix.
  * Do not shallow copy crypto/tls.Config
  * Drop Go 1.3 from supported configurations
  * Fix Read() to return errUnexpectedEOF when EOF is received before all bytes in the frame have been read
  * Test truncated frames at all positions
  * Handle invalid close frames
  * Meaningful names for hub
  * Meaningful names for connection, message
  * Cleanup js in chat example
  * Reduce memory allocations in NextReader, NextWriter
  * Use single character receiver names in chat example
  * Revert "Reduce memory allocations in NextReader, NextWriter"
  * Reduce memory allocations in NextReader, NextWriter
  * Add Sec-WebSocket-Extensions header parser
  * Add Ping/Pong handler getter methods
  * Coalesce outbound messages in chat example
  * Implement RFC 6455, section 4.4
  * Add hooks to support RFC 7692 (per-message compression extension)
  * Add description to the chat example readme
  * Update hub.go
  * Improve chat example
  * Fix typos in chat example
  * Simplify dial TLS test
  * per message compression; only no context modes
  * Update README to reflect change of Go sub-repo websocket feature
  * compression: add tests, rename option
  * add cookie jar to dialer
  * Test w/ Go 1.7 on Travis
  * Improve mask performance
  * Update README.md
  * Improve chat example
  * Improve command example
  * Fix mask alignment
  * Improve write error handling
  * Add Conn.[Set]CloseHandler
  * Fix documentation
  * Improve WriteMessage fast path
  * pool flate writers
  * pool flate readers
  * Fix up README.md for command example.
  * Compression improvements
  * Add safe maskBytes
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170718.a69d9f6:
  * Update compression documentation
  * benchmarks for write with compression enabled/disabled
  * Improve SetXHandler documentation
  * Change default and add API for compression level
  * Fix to compile on Go &lt; 1.6
  * Fix compile error on Go &lt; 1.6
  * Improve upgrade error messages
  * fix flate write pool size to work with best compression
  * remove test as HuffmanOnly compression level not defined in Go &lt; 1.7
  * Add code snippet for EnableCompression in doc.go, change EnableWriteCompression()'s parameter to false since enableWriteCompression is true by default.
  * Change text/template to html/template in the examples
  * Prepared Messages (#211)
  * Improve examples
  * Add Go 1.8 to Travis config
  * Update cloneTLSConfig to use Go 1.8 Config.Clone method
  * Use bufio.Reader returned from hijack in upgrade
  * Fix formatting.
  * Use bufio.Writer returned from hijack in upgrade
  * enable client compression based on response header
  * Reduce memory used in chat example
  * doc: use ":=" when check error for conn.WriteMessage
  * distinguish Upgrader.Upgrade from Upgrade
  * implementing (some of) @garyburd's suggestions
  * Misc cleanup</changelog>
</package>
<package pkgid="045a05298649973916098d15c5566ef0721e715064276c5cbdf77852723557f6" name="golang-github-gorilla-websocket" arch="src">
  <version epoch="0" ver="0.0.0+git20170718.a69d9f6" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1426852800">- initial version 0.0.0+git20150309.2dbddeb</changelog>
  <changelog author="avvissu@yandex.by" date="1459252800">- Update to version 0.0.0+git20160313.e2e3d84:
  + Support proxy authorization for websocket client
  + Improve Upgrader.Upgrade doc
  + Update .travis.yml to build Go 1.6
  + Fix go vet warning
  + Run 'go vet' instead of 'go tool vet' in Travis
  + Remove Go 1.1 from Travis config
  + Add IsWebSocketUpgrade
  + Document that default ping handler can block</changelog>
  <changelog author="avvissu@yandex.by" date="1468670400">- Get rid of source subpackage, no one use it</changelog>
  <changelog author="thipp@suse.de" date="1484049600">- Update to version 0.0.0+git20161231.adf16b3:
  * Fix filewatch example
  * .travis.yml go vet fix.
  * Do not shallow copy crypto/tls.Config
  * Drop Go 1.3 from supported configurations
  * Fix Read() to return errUnexpectedEOF when EOF is received before all bytes in the frame have been read
  * Test truncated frames at all positions
  * Handle invalid close frames
  * Meaningful names for hub
  * Meaningful names for connection, message
  * Cleanup js in chat example
  * Reduce memory allocations in NextReader, NextWriter
  * Use single character receiver names in chat example
  * Revert "Reduce memory allocations in NextReader, NextWriter"
  * Reduce memory allocations in NextReader, NextWriter
  * Add Sec-WebSocket-Extensions header parser
  * Add Ping/Pong handler getter methods
  * Coalesce outbound messages in chat example
  * Implement RFC 6455, section 4.4
  * Add hooks to support RFC 7692 (per-message compression extension)
  * Add description to the chat example readme
  * Update hub.go
  * Improve chat example
  * Fix typos in chat example
  * Simplify dial TLS test
  * per message compression; only no context modes
  * Update README to reflect change of Go sub-repo websocket feature
  * compression: add tests, rename option
  * add cookie jar to dialer
  * Test w/ Go 1.7 on Travis
  * Improve mask performance
  * Update README.md
  * Improve chat example
  * Improve command example
  * Fix mask alignment
  * Improve write error handling
  * Add Conn.[Set]CloseHandler
  * Fix documentation
  * Improve WriteMessage fast path
  * pool flate writers
  * pool flate readers
  * Fix up README.md for command example.
  * Compression improvements
  * Add safe maskBytes
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170718.a69d9f6:
  * Update compression documentation
  * benchmarks for write with compression enabled/disabled
  * Improve SetXHandler documentation
  * Change default and add API for compression level
  * Fix to compile on Go &lt; 1.6
  * Fix compile error on Go &lt; 1.6
  * Improve upgrade error messages
  * fix flate write pool size to work with best compression
  * remove test as HuffmanOnly compression level not defined in Go &lt; 1.7
  * Add code snippet for EnableCompression in doc.go, change EnableWriteCompression()'s parameter to false since enableWriteCompression is true by default.
  * Change text/template to html/template in the examples
  * Prepared Messages (#211)
  * Improve examples
  * Add Go 1.8 to Travis config
  * Update cloneTLSConfig to use Go 1.8 Config.Clone method
  * Use bufio.Reader returned from hijack in upgrade
  * Fix formatting.
  * Use bufio.Writer returned from hijack in upgrade
  * enable client compression based on response header
  * Reduce memory used in chat example
  * doc: use ":=" when check error for conn.WriteMessage
  * distinguish Upgrader.Upgrade from Upgrade
  * implementing (some of) @garyburd's suggestions
  * Misc cleanup</changelog>
</package>
<package pkgid="ef3af5cef19a54e0cf464978102c65ba84b37c10ccfad44ff3bde6eae8fbb2ee" name="golang-github-hoisie-httplib" arch="noarch">
  <version epoch="0" ver="0.0.0+git20120409.3cbb2f7" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="graham@andtech.eu" date="1309176000">- Patch to build against weekly.2011-06-23</changelog>
  <changelog author="graham@andtech.eu" date="1317902400">- Synch with upstsream fixes for r60
- add rpmlintrc (ELF strip/static binary warnings)</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Patch to build against weekly.2011-12-02</changelog>
  <changelog author="graham@andtech.eu" date="1328270400">- use go install instead of gomake</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- update spec file to use new Go rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update specfile to use new package locaitons
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20120409.3cbb2f7
- drop httplib.go-weekly-fixes.patch
  * upstream contains this fix
- import changed to github.com/hoisie/httplib
- remove go_disable_brp_strip_static_archive usage</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-httplib
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484308800">- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
</package>
<package pkgid="27f148410b9fab690da8ca0d68944a2aac787501ca72e26b98244dfead31d643" name="golang-github-hoisie-httplib" arch="src">
  <version epoch="0" ver="0.0.0+git20120409.3cbb2f7" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="graham@andtech.eu" date="1309176000">- Patch to build against weekly.2011-06-23</changelog>
  <changelog author="graham@andtech.eu" date="1317902400">- Synch with upstsream fixes for r60
- add rpmlintrc (ELF strip/static binary warnings)</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Patch to build against weekly.2011-12-02</changelog>
  <changelog author="graham@andtech.eu" date="1328270400">- use go install instead of gomake</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- update spec file to use new Go rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update specfile to use new package locaitons
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20120409.3cbb2f7
- drop httplib.go-weekly-fixes.patch
  * upstream contains this fix
- import changed to github.com/hoisie/httplib
- remove go_disable_brp_strip_static_archive usage</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-httplib
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484308800">- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
</package>
<package pkgid="d0683a28990d2505ce44ce4199020108892b67142139a997713ca34cf1a819da" name="golang-github-hoisie-mustache" arch="noarch">
  <version epoch="0" ver="0.0.0+git20160804.6375acf" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1289304000">- Initial commit</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305720002">- Disable tests also for RHEL, CentOS and Mandriva</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r59
  * Properly handle the case where struct pointers are nil
  * Double-bracket variables, {{var}}, are now HTML-escaping by default,
    and triple-bracket vars, {{{var}}}, are raw
  * Remove workaround for relection table bug since it's been fixed</changelog>
  <changelog author="saschpe@suse.de" date="1313409600">- Update license to MIT (from BSD), fixes bnc#712213</changelog>
  <changelog author="graham@andtech.eu" date="1328788800">- gofixes for latest weekly (2012-02-07)</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">-  update spec for new Go rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new patch locations for package
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20141121.af524a1
- import path changed to github.com/hoisie/mustache
- remove go_disable_brp_strip_static_archive usage
- drop patch: opensuse-build-fix.patch, upstream fixed</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-mustache
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484308800">- Update to 0.0.0+git20160804.6375acf
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
</package>
<package pkgid="e6a8e865f35eaaba9ab1643e4f7e5be9b371448e54c90de5c778d4b34da360dc" name="golang-github-hoisie-mustache" arch="src">
  <version epoch="0" ver="0.0.0+git20160804.6375acf" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1289304000">- Initial commit</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305720002">- Disable tests also for RHEL, CentOS and Mandriva</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r59
  * Properly handle the case where struct pointers are nil
  * Double-bracket variables, {{var}}, are now HTML-escaping by default,
    and triple-bracket vars, {{{var}}}, are raw
  * Remove workaround for relection table bug since it's been fixed</changelog>
  <changelog author="saschpe@suse.de" date="1313409600">- Update license to MIT (from BSD), fixes bnc#712213</changelog>
  <changelog author="graham@andtech.eu" date="1328788800">- gofixes for latest weekly (2012-02-07)</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">-  update spec for new Go rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new patch locations for package
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20141121.af524a1
- import path changed to github.com/hoisie/mustache
- remove go_disable_brp_strip_static_archive usage
- drop patch: opensuse-build-fix.patch, upstream fixed</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-mustache
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484308800">- Update to 0.0.0+git20160804.6375acf
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
</package>
<package pkgid="3adbe18f12b862dfbe2000d8728e151cb171a6d418378d4be9bcdfad92af5a20" name="golang-github-hoisie-web" arch="noarch">
  <version epoch="0" ver="0.0.0+git20160809.a498c02" rel="5.1"/>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305720002">- Disable tests for Mandriva
- Also disable brp-strip-static-archive on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Removed rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Disable tests on Mandriva</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1309176000">- Add patch to build against weekly 2011.06.23 api changes</changelog>
  <changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r.59
- Drop web.go-fix-weekly patch, merged upstream</changelog>
  <changelog author="graham@andtech.eu" date="1317902400">- Update to 15/09/2011 git version:
  * Updates for Go r.60</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Apply fixes for weekly.2011-12-02 changes</changelog>
  <changelog author="graham@andtech.eu" date="1329480000">- updates for weekly.2012-02-12</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- update spec file for new pacakge location
- add documentation package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20130630.5a66d0f
- import path changed to github.com/hoisie/web
- drop weekly-build-fix.patch
  * upstream contains this fix
- remove go_disable_brp_strip_static_archive usage
- add patch web.go-go.net.patch
  * patch web.go to use golang.org/x/net instead of
    code.google.com/p/go.net</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-web
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484740800">- Update to 0.0.0+git20160809.a498c02
- Refactoring based on new packaging proposal
- Remove web.go-go.net.patch</changelog>
</package>
<package pkgid="347d77e0f192a30ee2437e29f6f8267b0fdeecd06f16b4f6e379b0b2c53affc7" name="golang-github-hoisie-web" arch="src">
  <version epoch="0" ver="0.0.0+git20160809.a498c02" rel="5.1"/>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305720002">- Disable tests for Mandriva
- Also disable brp-strip-static-archive on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Removed rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Disable tests on Mandriva</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1309176000">- Add patch to build against weekly 2011.06.23 api changes</changelog>
  <changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r.59
- Drop web.go-fix-weekly patch, merged upstream</changelog>
  <changelog author="graham@andtech.eu" date="1317902400">- Update to 15/09/2011 git version:
  * Updates for Go r.60</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Apply fixes for weekly.2011-12-02 changes</changelog>
  <changelog author="graham@andtech.eu" date="1329480000">- updates for weekly.2012-02-12</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- update spec file for new pacakge location
- add documentation package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20130630.5a66d0f
- import path changed to github.com/hoisie/web
- drop weekly-build-fix.patch
  * upstream contains this fix
- remove go_disable_brp_strip_static_archive usage
- add patch web.go-go.net.patch
  * patch web.go to use golang.org/x/net instead of
    code.google.com/p/go.net</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-web
- use golang-packaging for packaging</changelog>
  <changelog author="thipp@suse.de" date="1484740800">- Update to 0.0.0+git20160809.a498c02
- Refactoring based on new packaging proposal
- Remove web.go-go.net.patch</changelog>
</package>
<package pkgid="9a3956f3bc6a9e934ed7dd79422dfecff290126ea40b178b225ed4e1a5323a1c" name="golang-github-jpoirier-cpu" arch="src">
  <version epoch="0" ver="0.0.0+git20141224.5b5a7ea" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120228.3403179:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename golang-github-jpoirier-cpu
- update version 0.0.0+git20141224.5b5a7ea
- use golang-packaging for packaging</changelog>
  <changelog author="dvaleev@suse.com" date="1441195200">- set ExclusiveArch to intel architecture.
  (Requires cpuid instuction)</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="1e8926938c761761c48fbad188c318b02e04b95a7be4e90fe8ef1981cdb69b33" name="golang-github-jpoirier-cpu" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20141224.5b5a7ea" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120228.3403179:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename golang-github-jpoirier-cpu
- update version 0.0.0+git20141224.5b5a7ea
- use golang-packaging for packaging</changelog>
  <changelog author="dvaleev@suse.com" date="1441195200">- set ExclusiveArch to intel architecture.
  (Requires cpuid instuction)</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="f0f5d3a32553b33eceb15f23a121e16e224020e393d9abc7b4a9c933d248581f" name="golang-github-kr-pty" arch="src">
  <version epoch="0" ver="0.0.0+git20160716.ce7fa45" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150511.5cf931e</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160716.ce7fa45:
  * Add support for Power (ppc64, ppc64le) and System z (s390x)
  * Remove ioctl_* constants on Linux
  * Remove uintptr(...)
  * Add support for ARM64
  * Prevent arm64 file to be compiled anywhere else. Fixed #32.
  * run: don't override supplied SysProcAttr
  * Don't attempt to build on windows
  * Support DragonFly BSD
  * Reformat pty_dragonfly.go file using gofmt</changelog>
</package>
<package pkgid="f786d77111c8199740d2c2d141c5401b1073c75964c73f79f8369459aad2ce49" name="golang-github-kr-pty" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20160716.ce7fa45" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150511.5cf931e</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160716.ce7fa45:
  * Add support for Power (ppc64, ppc64le) and System z (s390x)
  * Remove ioctl_* constants on Linux
  * Remove uintptr(...)
  * Add support for ARM64
  * Prevent arm64 file to be compiled anywhere else. Fixed #32.
  * run: don't override supplied SysProcAttr
  * Don't attempt to build on windows
  * Support DragonFly BSD
  * Reformat pty_dragonfly.go file using gofmt</changelog>
</package>
<package pkgid="22ca00591b2a060cf347aec526bc7b7eaa8f12f0503a98ee4bb816bcff27d2c4" name="golang-github-kr-text" arch="src">
  <version epoch="0" ver="0.0.0+git20160504.7cafcd8" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1411128000">- initial version 0.0.0+git20130910.6807e77
  * upstream has no version scheme so see git commits
- don't run tests, because it'll need github.com/kr/pty
  we don't want to import new dependencies.</changelog>
  <changelog author="i@marguerite.su" date="1426161600">- update version 0.0.0+git20130910.6807e77
  * no changelog</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-kr-text
- update version 0.0.0+git20150520.e373e13
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160504.7cafcd8:
  * handle unicode input correctly
  * add license (from plan 9 from user space)
  * open only one file at a time
  * indent writer
  * refactor
  * properly track prefix bytes written
  * relicense whole repo under MIT
  * Run 'gofmt -w -s' on sources
  * text: fix infinite loop in Wrap
  * cmd/agg: new command</changelog>
</package>
<package pkgid="192ced1903d87e11df8c4dcb977f2cc6eacb22afbf1efa1f4759254be2b47850" name="golang-github-kr-text" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20160504.7cafcd8" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1411128000">- initial version 0.0.0+git20130910.6807e77
  * upstream has no version scheme so see git commits
- don't run tests, because it'll need github.com/kr/pty
  we don't want to import new dependencies.</changelog>
  <changelog author="i@marguerite.su" date="1426161600">- update version 0.0.0+git20130910.6807e77
  * no changelog</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-kr-text
- update version 0.0.0+git20150520.e373e13
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160504.7cafcd8:
  * handle unicode input correctly
  * add license (from plan 9 from user space)
  * open only one file at a time
  * indent writer
  * refactor
  * properly track prefix bytes written
  * relicense whole repo under MIT
  * Run 'gofmt -w -s' on sources
  * text: fix infinite loop in Wrap
  * cmd/agg: new command</changelog>
</package>
<package pkgid="de90391b8f57d3795d4db8064a67b3bdc07ed31dc4fceacba0b957fc2ac62153" name="golang-github-petar-gollrb" arch="src">
  <version epoch="0" ver="0.0.0+git20130427.53be0d3" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="saschpe@suse.de" date="1308916801">- Corrected package description</changelog>
  <changelog author="saschpe@suse.de" date="1308916802">- Fixed URL</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Re-packaged tarball
- Adjust to Go weekly.2011-12-02 release changes</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec files for new pacakge location
- Add documentation package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426852800">- update version 0.0.0+git20130427.53be0d3
- remove go_disable_brp_strip_static_archive usage
- drop GoLLRB-weekly-fixes.patch
  * upstream contains this fix</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-petar-gollrb
- update version 0.0.0+git20130427.53be0d3
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="5d5c5e4d402bf52d38a2bc3eba7feaa7eaad502d427252c1a6a23014fb591130" name="golang-github-petar-gollrb" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20130427.53be0d3" rel="3.1"/>
  <changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
  <changelog author="saschpe@suse.de" date="1308916801">- Corrected package description</changelog>
  <changelog author="saschpe@suse.de" date="1308916802">- Fixed URL</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Re-packaged tarball
- Adjust to Go weekly.2011-12-02 release changes</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec files for new pacakge location
- Add documentation package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426852800">- update version 0.0.0+git20130427.53be0d3
- remove go_disable_brp_strip_static_archive usage
- drop GoLLRB-weekly-fixes.patch
  * upstream contains this fix</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-petar-gollrb
- update version 0.0.0+git20130427.53be0d3
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="d306a1dd4ba46e20b824730f6b3751cfad2371f095432d2e5f89cb1fc15a2877" name="golang-github-philio-gomysql" arch="src">
  <version epoch="0" ver="0.0.0+git20110531.e621cd9" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Disable tests for now, needs a running MySQL server</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1324728000">- Update to work with weekly.2011.12.22
- If db isn't setup, show helpful tips and don't crash
- Remove some unnecessary type assertions
- Add UseResult method on Statement
- fixed to handle null values
- Return an error in UseResult if there's no result set</changelog>
  <changelog author="saschpe@suse.de" date="1328529600">- Move to goinstall</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- update specfile</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package locations
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-philio-gomysql
- update version 0.0.0+git20110531.e621cd9
- use golang-packaging for packaging
- add patch: shadowed-err.patch
  * fix 'err is shadowed' error
- add patch: strconv.patch
  * fix Atoi64 and such functions
- add patch: crypto.sum.patch
  * fix crypto/sha1 Sum() to Sum(nil)</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="f2e34814a35e9c1810299cb832ffc076df8f305bda2f154db228e88df43d5a97" name="golang-github-philio-gomysql" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20110531.e621cd9" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Disable tests for now, needs a running MySQL server</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1324728000">- Update to work with weekly.2011.12.22
- If db isn't setup, show helpful tips and don't crash
- Remove some unnecessary type assertions
- Add UseResult method on Statement
- fixed to handle null values
- Return an error in UseResult if there's no result set</changelog>
  <changelog author="saschpe@suse.de" date="1328529600">- Move to goinstall</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- update specfile</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package locations
- Add documentation sub package</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-philio-gomysql
- update version 0.0.0+git20110531.e621cd9
- use golang-packaging for packaging
- add patch: shadowed-err.patch
  * fix 'err is shadowed' error
- add patch: strconv.patch
  * fix Atoi64 and such functions
- add patch: crypto.sum.patch
  * fix crypto/sha1 Sum() to Sum(nil)</changelog>
  <changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>
</package>
<package pkgid="e857d39b1d4948f7958fcc442d604ae54764b621b4e51920f588c47ec055c01f" name="golang-github-russross-blackfriday" arch="src">
  <version epoch="0" ver="1.4.0+git20151230.c8875c0" rel="11.1"/>
  <changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.2</changelog>
  <changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-russross-blackfriday
- update version 1.2.0+git20150720.8cec3a8
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 1.4.0+git20151230.c8875c0:
  + remove check that brace is &gt; 0
  + Use more idiomatic form for set of strings
  + Add a few missing HTML5 block tags
  + Fix footnote following an exclamation point
  + Add String() method to reference struct
  + Fix nested footnotes
  + Fix fenced code processing inside blockquotes
  + Refix fenced code blocks w/o preceding blank lines
  + Fix escaping asterisks within emphasis
  + Fix footnote followed by a reference style link
  + Fix bug parsing emphasis
  + Add HTML_SMARTYPANTS_DASHES for togging smart dashes
  + LaTex backend: add # to list of characters requiring
    backslash-escaping
  + Don't require the input to end with a newline
  + Implement support for CDATA section
  + Convert constant variables into consts
  + Fix bug with gathering list item lines</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Always call gobuild and goinstall</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680005">- Recursively test all packages</changelog>
</package>
<package pkgid="9f4dd03f147f944f41b61b57dda3eace8cd4a8953a67d2d0115df30cc15a51e5" name="golang-github-russross-blackfriday" arch="x86_64">
  <version epoch="0" ver="1.4.0+git20151230.c8875c0" rel="11.1"/>
  <changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.2</changelog>
  <changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-russross-blackfriday
- update version 1.2.0+git20150720.8cec3a8
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 1.4.0+git20151230.c8875c0:
  + remove check that brace is &gt; 0
  + Use more idiomatic form for set of strings
  + Add a few missing HTML5 block tags
  + Fix footnote following an exclamation point
  + Add String() method to reference struct
  + Fix nested footnotes
  + Fix fenced code processing inside blockquotes
  + Refix fenced code blocks w/o preceding blank lines
  + Fix escaping asterisks within emphasis
  + Fix footnote followed by a reference style link
  + Fix bug parsing emphasis
  + Add HTML_SMARTYPANTS_DASHES for togging smart dashes
  + LaTex backend: add # to list of characters requiring
    backslash-escaping
  + Don't require the input to end with a newline
  + Implement support for CDATA section
  + Convert constant variables into consts
  + Fix bug with gathering list item lines</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Always call gobuild and goinstall</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680005">- Recursively test all packages</changelog>
</package>
<package pkgid="dabd01a5cfbd97f7d194f1d5596a934f8e808991fc987d5dd81b59c4adf2740f" name="golang-github-shurcool-sanitized_anchor_name" arch="src">
  <version epoch="0" ver="0.0.0+git20151027.10ef21a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1438084800">- initial version 0.0.0+git20150514.11a20b7</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 0.0.0+git20151027.10ef21a
  * pollute repository with an extraneous non-executable file
- don't build -source sub-package</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Always call gobuild and goinstall</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
</package>
<package pkgid="e450d9c3c77c8b8b314728886cd43fd75a179c3df72e92478d71221bb01a3851" name="golang-github-shurcool-sanitized_anchor_name" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20151027.10ef21a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1438084800">- initial version 0.0.0+git20150514.11a20b7</changelog>
  <changelog author="i@marguerite.su" date="1453032000">- Update to version 0.0.0+git20151027.10ef21a
  * pollute repository with an extraneous non-executable file
- don't build -source sub-package</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
  <changelog author="tboerger@suse.com" date="1480680002">- Always call gobuild and goinstall</changelog>
  <changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
</package>
<package pkgid="6a73ea3199890d31f5ef6b9df940a38b7169aabec423e30bb9d00b73c90726cc" name="golang-google-golangorg-appengine" arch="src">
  <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>
</package>
<package pkgid="7454cee305719f898a1b4be75685c6a43a5314084bee2ead55b12aa834296278" name="golang-google-golangorg-appengine" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>
  <changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
  <changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>
</package>
<package pkgid="91166382c0de161b3db707ed303eddd479a1dc7d34bbab32941ee5a96e4b8d49" name="golang-googlecode-couch-go" arch="src">
  <version epoch="0" ver="0.0.0+hg20120329.80177d89e264" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Require couchdb
- Disable tests, they need a running CouchDB</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- update API to Go r60 (via patch, changes submitted upstream)</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update package to latest mercurial</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20120329.56.80177d89e264:
  + Upstream provides no changelog
- Use _service file
- Drop rpmlintrc, both issues are obvious Go issues</changelog>
  <changelog author="speilicke@suse.com" date="1379419200">- Only recommend couchdb to not depend on having it on the same
  machine</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-couch-go
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
</package>
<package pkgid="7d8251640df52e3916872f748137b223fdcf179ba5da6fb507bfeca68817672e" name="golang-googlecode-couch-go" arch="x86_64">
  <version epoch="0" ver="0.0.0+hg20120329.80177d89e264" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1306065600">- Require couchdb
- Disable tests, they need a running CouchDB</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- update API to Go r60 (via patch, changes submitted upstream)</changelog>
  <changelog author="graham@andtech.eu" date="1372507200">- Update package to latest mercurial</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20120329.56.80177d89e264:
  + Upstream provides no changelog
- Use _service file
- Drop rpmlintrc, both issues are obvious Go issues</changelog>
  <changelog author="speilicke@suse.com" date="1379419200">- Only recommend couchdb to not depend on having it on the same
  machine</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-couch-go
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
</package>
<package pkgid="d9b3c933c36614c65da6ef5c0f95f83b9714c304bd451072cb388c793193566e" name="golang-googlecode-freetype-go" arch="noarch">
  <version epoch="0" ver="0.0.0+git20170609.e2365df" rel="3.1"/>
  <changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, RHEL and CentOS
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter
- Added include path patch</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@suse.de" date="1307707200">- Update to 10/06/2011 mercurial version
  * Rename exp/draw to image/draw
  * Follow go stdlib changes for os.Open and Stderr/Println
- Rebased include-fix patch to upstream changes</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- Update to HG 18.07.2011 (for Go r60)
- image.Pix changes</changelog>
  <changelog author="graham@andtech.eu" date="1318248000">- Fudge a $GOROOT build env so freetype sub-package types have a
  good looking signature for packaging. This is a messy solution
  and needs tidied up into real packages.</changelog>
  <changelog author="graham@andtech.eu" date="1324641600">- Update to 23.12.2011 mercurial</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{exclusivearch} macro
- Install binaries with "go-" prefix</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130813.72.38e23dc4a845:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="speilicke@suse.com" date="1379592000">- Fix license: FTL or GPL-2.0+</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-freetype-go
- update version 0.0.0+hg20150309.128.46c3056cafbb
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
  <changelog author="thipp@suse.de" date="1488542400">- Update to version 0.0.0+git20161208.d9be45a
- Refactoring based on new packaging proposal
- Rename %{name}-rpmlintrc to rpmlintrc
- Use git instead of mercurial
- Remove example binaries from package</changelog>
  <changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170609.e2365df:
  * Add an example/capjoin program.
  * Add a face.Metrics method, and parse hhea ascent and descent.
  * Use an "example" build tag instead of "ignore".
  * Loosen the SLOOP (Set LOOP) opcode precondition.
  * Add the genbasicfont program.
  * Don't crash when a glyph has no contours.
  * Support TTC v2
  * Support Unicode Full Repertoire cmap tables.
  * Allow multiple kern subtables.
  * Fix a comment typo.</changelog>
</package>
<package pkgid="f275c80511f92cf0cf961d0c9d90330b7e9e1a950e7aa13072d0fea3d4c37cb8" name="golang-googlecode-freetype-go" arch="src">
  <version epoch="0" ver="0.0.0+git20170609.e2365df" rel="3.1"/>
  <changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, RHEL and CentOS
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter
- Added include path patch</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@suse.de" date="1307707200">- Update to 10/06/2011 mercurial version
  * Rename exp/draw to image/draw
  * Follow go stdlib changes for os.Open and Stderr/Println
- Rebased include-fix patch to upstream changes</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- Update to HG 18.07.2011 (for Go r60)
- image.Pix changes</changelog>
  <changelog author="graham@andtech.eu" date="1318248000">- Fudge a $GOROOT build env so freetype sub-package types have a
  good looking signature for packaging. This is a messy solution
  and needs tidied up into real packages.</changelog>
  <changelog author="graham@andtech.eu" date="1324641600">- Update to 23.12.2011 mercurial</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{exclusivearch} macro
- Install binaries with "go-" prefix</changelog>
  <changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130813.72.38e23dc4a845:
  + Upstream provides no changelog
- Add _service file</changelog>
  <changelog author="speilicke@suse.com" date="1379592000">- Fix license: FTL or GPL-2.0+</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-freetype-go
- update version 0.0.0+hg20150309.128.46c3056cafbb
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
  <changelog author="thipp@suse.de" date="1488542400">- Update to version 0.0.0+git20161208.d9be45a
- Refactoring based on new packaging proposal
- Rename %{name}-rpmlintrc to rpmlintrc
- Use git instead of mercurial
- Remove example binaries from package</changelog>
  <changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170609.e2365df:
  * Add an example/capjoin program.
  * Add a face.Metrics method, and parse hhea ascent and descent.
  * Use an "example" build tag instead of "ignore".
  * Loosen the SLOOP (Set LOOP) opcode precondition.
  * Add the genbasicfont program.
  * Don't crash when a glyph has no contours.
  * Support TTC v2
  * Support Unicode Full Repertoire cmap tables.
  * Allow multiple kern subtables.
  * Fix a comment typo.</changelog>
</package>
<package pkgid="fd89f6dc8604fe9736fd1b53f2e1e4a00f07f417205375c8ea428fff063f91bb" name="golang-googlecode-goconf" arch="src">
  <version epoch="0" ver="0.0.0+hg20120508.a4db5c465ed1" rel="3.1"/>
  <changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
  <changelog author="graham@andtech.eu" date="1296561600">- Patch get.go to use float64 (float type is removed)</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 2011/05/18 mercurial version</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1305892801">- Remove non-working tests</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@suse.de" date="1308916800">- Fix upstream URL</changelog>
  <changelog author="graham@andtech.eu" date="1330948800">- update for weekly.2012-03-04</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Update to version 0.0.0+hg20120508.16.a4db5c465ed1
- Add and use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-googlecode-goconf
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
</package>
<package pkgid="614366dcdb7594e857b537436d1e2f8546847ea28afdf0b42e7aa6c6015fa340" name="golang-googlecode-goconf" arch="x86_64">
  <version epoch="0" ver="0.0.0+hg20120508.a4db5c465ed1" rel="3.1"/>
  <changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
  <changelog author="graham@andtech.eu" date="1296561600">- Patch get.go to use float64 (float type is removed)</changelog>
  <changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
  <changelog author="saschpe@suse.de" date="1305720000">- Update to 2011/05/18 mercurial version</changelog>
  <changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
  <changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
  <changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
  <changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
  <changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
  <changelog author="saschpe@suse.de" date="1305892801">- Remove non-working tests</changelog>
  <changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
  <changelog author="saschpe@suse.de" date="1308916800">- Fix upstream URL</changelog>
  <changelog author="graham@andtech.eu" date="1330948800">- update for weekly.2012-03-04</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Update to version 0.0.0+hg20120508.16.a4db5c465ed1
- Add and use _service file</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-googlecode-goconf
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
</package>
<package pkgid="3030b726d9b522a0a607a8dc2d4e1b8bd0a92df967b79ff262cf7ceb2e297fe5" name="golang-googlecode-mango-doc" arch="src">
  <version epoch="0" ver="0.0.0+hg20141127.23dea2f59f66" rel="2.1"/>
  <changelog author="tboerger@suse.com" date="1465214400">- Initial packaging</changelog>
  <changelog author="tboerger@suse.com" date="1465214401">- Also provide mango-doc</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
  <changelog author="thipp@suse.de" date="1489665600">- Rename rpmlintrc to golang-googlecode-mango-doc-rpmlintrc</changelog>
</package>
<package pkgid="a806a8bc87fe14ef3ecdebfa3528ae477117d2c004a2136dec92006ee02517eb" name="golang-googlecode-mango-doc" arch="x86_64">
  <version epoch="0" ver="0.0.0+hg20141127.23dea2f59f66" rel="2.1"/>
  <changelog author="tboerger@suse.com" date="1465214400">- Initial packaging</changelog>
  <changelog author="tboerger@suse.com" date="1465214401">- Also provide mango-doc</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
  <changelog author="thipp@suse.de" date="1489665600">- Rename rpmlintrc to golang-googlecode-mango-doc-rpmlintrc</changelog>
</package>
<package pkgid="4129e557e037f3da96569508a27006b41cf34157beca085a03b7f281d8768b54" name="golang-gopkgin-check" arch="src">
  <version epoch="0" ver="0.0.0+git20161122.aa8c435" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to avoid build error</changelog>
  <changelog author="graham@andtech.eu" date="1309003200">- Update to latest bzr (fixes breakage due to GOTO lang change)</changelog>
  <changelog author="graham@andtech.eu" date="1317816000">- Update to latest bzr, builds against go release r.60</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- correct license to BSD3c</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Update to bzr 13/12/2011 version:
  * Port to weekly.2011-12-02
  * *C now has an Output method matching the log.Logger interface.</changelog>
  <changelog author="graham@andtech.eu" date="1330948800">- Update to weekly.2012-03-04
- Added HasLen checker
- Renamed Bug to Commentf.
- Added DeepEquals and Equals now matches the behavior of ==</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec for new package locations
- Add documentation sub package</changelog>
  <changelog author="graham@andtech.eu" date="1344945600">- Update to latest r2012.07.24
- support for std libs testing package benchmarking</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="i@marguerite.su" date="1410091200">- update version 2014.08.27 from github
  * see upstream git commits</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- rename to go-gocheck
- remove go_disable_brp_strip_static_archive usage
- update version 0.0.0+git20140401.1632973</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-gopkgin-check
- update version 0.0.0+git20150626.b3d3430
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161122.aa8c435:
  * Replaced path.Join with filepath.Join in newPath() in order to facilitate proper MkDir() on all OS-es
  * Fixed misleading tempdir removal message under Windows.
  * Include the whole Go license on benchmark.go.
  * check: fix data race on C.status
  * Fix panic tracebacks with Go tip.
  * Moved the reporter functions to a separate file.
  * Do not export reporterS.
  * Get the filename from runtime.
  * Fix tests and some golint issues (#85)
  * Fix typo: conjuction (#83)</changelog>
</package>
<package pkgid="7b20f34a78191857add3be9ee78bfe5f6bf6d3ba770a39340fb8ea6ba701e407" name="golang-gopkgin-check" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20161122.aa8c435" rel="3.1"/>
  <changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
  <changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to avoid build error</changelog>
  <changelog author="graham@andtech.eu" date="1309003200">- Update to latest bzr (fixes breakage due to GOTO lang change)</changelog>
  <changelog author="graham@andtech.eu" date="1317816000">- Update to latest bzr, builds against go release r.60</changelog>
  <changelog author="graham@andtech.eu" date="1317988800">- correct license to BSD3c</changelog>
  <changelog author="saschpe@suse.de" date="1323777600">- Update to bzr 13/12/2011 version:
  * Port to weekly.2011-12-02
  * *C now has an Output method matching the log.Logger interface.</changelog>
  <changelog author="graham@andtech.eu" date="1330948800">- Update to weekly.2012-03-04
- Added HasLen checker
- Renamed Bug to Commentf.
- Added DeepEquals and Equals now matches the behavior of ==</changelog>
  <changelog author="graham@andtech.eu" date="1339416000">- Update spec for new package locations
- Add documentation sub package</changelog>
  <changelog author="graham@andtech.eu" date="1344945600">- Update to latest r2012.07.24
- support for std libs testing package benchmarking</changelog>
  <changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
  <changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
  <changelog author="i@marguerite.su" date="1410091200">- update version 2014.08.27 from github
  * see upstream git commits</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- rename to go-gocheck
- remove go_disable_brp_strip_static_archive usage
- update version 0.0.0+git20140401.1632973</changelog>
  <changelog author="i@marguerite.su" date="1437825600">- rename to golang-gopkgin-check
- update version 0.0.0+git20150626.b3d3430
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
  <changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161122.aa8c435:
  * Replaced path.Join with filepath.Join in newPath() in order to facilitate proper MkDir() on all OS-es
  * Fixed misleading tempdir removal message under Windows.
  * Include the whole Go license on benchmark.go.
  * check: fix data race on C.status
  * Fix panic tracebacks with Go tip.
  * Moved the reporter functions to a separate file.
  * Do not export reporterS.
  * Get the filename from runtime.
  * Fix tests and some golint issues (#85)
  * Fix typo: conjuction (#83)</changelog>
</package>
<package pkgid="dcff5533a5eb306f7151f3dbfb9fd360b320e5ea39149ad7bcc3221419a1ca6c" name="golang-org-x-crypto" arch="src">
  <version epoch="0" ver="1.5.2+git20161212.9a6f0a0" rel="2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1425038400">- Initial version</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20150318.b7d6bf2
- disable gotest for sle</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-crypto
- update version 0.0.0+git20150711.f6a608d
- use golang-packaging for packaging</changelog>
  <changelog author="dvaleev@suse.com" date="1441368000">- Fix flaky TestHostKeyCert test (crypto-fix-ssh.patch) (boo#944474)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 1.5.2+git20151215.f18420e:
  + x/crypto/pkcs12: deal with short byte array in PBKDF
  + otr: smpFailureError processing tlvTypeSMP3 prevents sending tlvTypeSMP4
  + x/crypto/openpgp/packet: fix message for errors resulting from an unknown cipher.
  + crypto/ssh: fix typo in error string.
  + x/crypto/otr: clear key slots when handshaking.
  + x/crypto/otr: make errors fatal.
  + x/crypto/otr: update libotr test code for version 4.
  + x/crypto/otr: reformat the libotr test harness with clang-format.
  + x/crypto/ssh: run go fmt
  + x/crypto/ssh/agent: Fix keyring removing the wrong key(s)
- Removed crypto-fix-ssh.patch: has been upstreamed</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Reformatted service file properly</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161212.9a6f0a0:
  * blake2s: fix build constraints
  * chacha20poly1305: fix build constraints
  * x/crypto/ssh: Add FingerprintLegacyMD5 and FingerprintSHA256 methods
  * acme/autocert: remove trailing dot from domain before requesting cert
  * x/crypto/blake2b: SSE4.1 is bit 19, not 15.
  * chacha20poly1305: make polyHashADInternal private
  * bn256: fix equations in comments
  * x/crypto/ssh/terminal: replace \n with \r\n.
  * x/crypto/ocsp: Don't hard-code OCSP response hash function
  * blake2b: fix constant size</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Fix requirements</changelog>
</package>
<package pkgid="ac5d14c5f4d29ffd8cf65b77816a758481a0dc0dd4bfd9ca26e267eafc157e8a" name="golang-org-x-crypto" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161212.9a6f0a0" rel="2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1425038400">- Initial version</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20150318.b7d6bf2
- disable gotest for sle</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-crypto
- update version 0.0.0+git20150711.f6a608d
- use golang-packaging for packaging</changelog>
  <changelog author="dvaleev@suse.com" date="1441368000">- Fix flaky TestHostKeyCert test (crypto-fix-ssh.patch) (boo#944474)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 1.5.2+git20151215.f18420e:
  + x/crypto/pkcs12: deal with short byte array in PBKDF
  + otr: smpFailureError processing tlvTypeSMP3 prevents sending tlvTypeSMP4
  + x/crypto/openpgp/packet: fix message for errors resulting from an unknown cipher.
  + crypto/ssh: fix typo in error string.
  + x/crypto/otr: clear key slots when handshaking.
  + x/crypto/otr: make errors fatal.
  + x/crypto/otr: update libotr test code for version 4.
  + x/crypto/otr: reformat the libotr test harness with clang-format.
  + x/crypto/ssh: run go fmt
  + x/crypto/ssh/agent: Fix keyring removing the wrong key(s)
- Removed crypto-fix-ssh.patch: has been upstreamed</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Reformatted service file properly</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161212.9a6f0a0:
  * blake2s: fix build constraints
  * chacha20poly1305: fix build constraints
  * x/crypto/ssh: Add FingerprintLegacyMD5 and FingerprintSHA256 methods
  * acme/autocert: remove trailing dot from domain before requesting cert
  * x/crypto/blake2b: SSE4.1 is bit 19, not 15.
  * chacha20poly1305: make polyHashADInternal private
  * bn256: fix equations in comments
  * x/crypto/ssh/terminal: replace \n with \r\n.
  * x/crypto/ocsp: Don't hard-code OCSP response hash function
  * blake2b: fix constant size</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Fix requirements</changelog>
</package>
<package pkgid="4954d033dd364e9c529f43323da9eff7aa5b38e6bf916c9df632ce1001268905" name="golang-org-x-debug" arch="src">
  <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
</package>
<package pkgid="185a4817a945dd27a3ee91d5e91410afa62f5ff21fc9acfff26f47c1e6f90d97" name="golang-org-x-debug" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
</package>
<package pkgid="a9949db61b63a58d61eba5c4cef774d9643fea631fc7eaec693ff1579bf9b1d9" name="golang-org-x-debug-debugproxy" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
</package>
<package pkgid="ac737ea953fb8dba4a098c13ab309407a0ab6a44182cf30637f05d9702ddc41f" name="golang-org-x-image" arch="src">
  <version epoch="0" ver="1.0.3+git20161212.88b0132" rel="3.1"/>
  <changelog author="graham@andtech.eu" date="1330603200">- initial package</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- updade spec for new rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13
- go.image/tiff: optimize reading uncompressed files from a tiff
  buffer.
- go.image/tiff: simplify encoding.</changelog>
  <changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- tiff: new Options parameter for Encode.
- tiff: support writing files with differencing predictor.</changelog>
  <changelog author="i@marguerite.su" date="1427025600">- update version 1.0.3+git20150321.7eedc60
- source URL changed to github.com/golang/image
- import path changed to golang.org/x/image
- clean specfile</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-image
- update version 1.0.3+git20150702.92cae9f
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1441886400">- Update to version 1.0.3+git20150901.b3d8467:
  + shiny/screen: new package.
  + shiny/font: new package for drawing text on an image.
  + colornames: new package for named colors
  + math/fixed: add I and P helper functions.
  + shiny/font/plan9font: implement ParseFont.
  + shiny/font: add Hinting, Stretch, Style and Weight option types.
  + math/fixed: add rectangle types and the R function.
  + shiny/font: add per-glyph metrics.
  + shiny/font: have Face.Glyph return an advance width, not a new dot.
  + shiny/font/plan9font: add an example test.
  + font: fix up some old x/exp/shiny references.
  + draw: tweak the YCbCr to RGBA conversion formula.
  + image/draw: have Transform take a f64.Aff3 instead of a *f64.Aff3.
  + vp8: split expression to placate 386 compiler
  + draw: skip TestFastPaths for Go 1.4.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: new package.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: add Point methods (Add, Sub, Mul, Div).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Make Group tag consistent with other golang packages.</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.0.3+git20161212.88b0132:
  * vector: make args float32 pairs instead of f32.Vec2.
  * vector: measure the fixed point rasterizer's accuracy.
  * font/gofont: new packages for the Go font family.
  * font/gofont: add style descriptions to the generated package docs.
  * font/sfnt: new package for parsing SFNT fonts.
  * font/sfnt: parse the CFF table.
  * font/sfnt: parse CFF 2-byte operators and real numbers.
  * font: add some comments for the XxxBytes methods.
  * font/sfnt: parse Type 2 Charstrings.
  * font/sfnt: implement rrcurveto.</changelog>
</package>
<package pkgid="d2a84ad312c04014994b4f5fd5ec0b598281fcb89a395798aa60c8da9378ae39" name="golang-org-x-image" arch="x86_64">
  <version epoch="0" ver="1.0.3+git20161212.88b0132" rel="3.1"/>
  <changelog author="graham@andtech.eu" date="1330603200">- initial package</changelog>
  <changelog author="graham@andtech.eu" date="1331121600">- updade spec for new rpm macros</changelog>
  <changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13
- go.image/tiff: optimize reading uncompressed files from a tiff
  buffer.
- go.image/tiff: simplify encoding.</changelog>
  <changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- tiff: new Options parameter for Encode.
- tiff: support writing files with differencing predictor.</changelog>
  <changelog author="i@marguerite.su" date="1427025600">- update version 1.0.3+git20150321.7eedc60
- source URL changed to github.com/golang/image
- import path changed to golang.org/x/image
- clean specfile</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-image
- update version 1.0.3+git20150702.92cae9f
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1441886400">- Update to version 1.0.3+git20150901.b3d8467:
  + shiny/screen: new package.
  + shiny/font: new package for drawing text on an image.
  + colornames: new package for named colors
  + math/fixed: add I and P helper functions.
  + shiny/font/plan9font: implement ParseFont.
  + shiny/font: add Hinting, Stretch, Style and Weight option types.
  + math/fixed: add rectangle types and the R function.
  + shiny/font: add per-glyph metrics.
  + shiny/font: have Face.Glyph return an advance width, not a new dot.
  + shiny/font/plan9font: add an example test.
  + font: fix up some old x/exp/shiny references.
  + draw: tweak the YCbCr to RGBA conversion formula.
  + image/draw: have Transform take a f64.Aff3 instead of a *f64.Aff3.
  + vp8: split expression to placate 386 compiler
  + draw: skip TestFastPaths for Go 1.4.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: new package.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: add Point methods (Add, Sub, Mul, Div).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Make Group tag consistent with other golang packages.</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.0.3+git20161212.88b0132:
  * vector: make args float32 pairs instead of f32.Vec2.
  * vector: measure the fixed point rasterizer's accuracy.
  * font/gofont: new packages for the Go font family.
  * font/gofont: add style descriptions to the generated package docs.
  * font/sfnt: new package for parsing SFNT fonts.
  * font/sfnt: parse the CFF table.
  * font/sfnt: parse CFF 2-byte operators and real numbers.
  * font: add some comments for the XxxBytes methods.
  * font/sfnt: parse Type 2 Charstrings.
  * font/sfnt: implement rrcurveto.</changelog>
</package>
<package pkgid="bdb3653fb40ba5155b67416f7cdcf55ea9bacde4b138d4496c9a542d92c5e937" name="golang-org-x-net" arch="src">
  <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>
  <changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
  <changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
  <changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
  <changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
  <changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
  <changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
  <changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
  <changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>
</package>
<package pkgid="c0b78d48cf399e751e11b8a68f73f2fe42b70a8f4eccfee9dfe5db9defbdc527" name="golang-org-x-net" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>
  <changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
  <changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
  <changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
  <changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
  <changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
  <changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
  <changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
  <changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>
</package>
<package pkgid="b197882f9ecd8174b94fc3500383018bf2ea37d0db6b6f6dc457d2696fc21120" name="golang-org-x-net-context" arch="src">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 1.5.2+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * context/ctxhttp: remove pre-Go 1.5 support
  * context: fix doc typo
  * context: correct spelling of TODO in comment
  * context/ctxhttp: add a specialized minimal version for Go 1.7
  * context/ctxhttp: if context is canceled, return its error
  * context: use Go 1.8 type alias for CancelFunc and Context
  * Revert "context: use Go 1.8 type alias for CancelFunc and Context"
  * context: deflake tests under Go 1.6
  * all: single space after period
  * context/ctxhttp: close httptest server</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="76cec1e2be2b814c008c4106e6ba9c7c19dcf1c7cd52acdab0ad35155b9afdc1" name="golang-org-x-net-context" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 1.5.2+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * context/ctxhttp: remove pre-Go 1.5 support
  * context: fix doc typo
  * context: correct spelling of TODO in comment
  * context/ctxhttp: add a specialized minimal version for Go 1.7
  * context/ctxhttp: if context is canceled, return its error
  * context: use Go 1.8 type alias for CancelFunc and Context
  * Revert "context: use Go 1.8 type alias for CancelFunc and Context"
  * context: deflake tests under Go 1.6
  * all: single space after period
  * context/ctxhttp: close httptest server</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="5cd1ff91ccf44ca8cc0533e30d41472399b9ebfe8a4b3e0aab1cc594f2edc388" name="golang-org-x-net-html" arch="src">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * x/net/html: Sync the html parser and atom with the current whatwg spec
  * x/net/html/charset: Change NewReaderByName to NewReaderLabel.
  * html/charset/testdata: update licensing info in README
  * html: Use existing standard library interface internally.
  * html: remove license references from benchmark test data
  * html/charmap: update table with latest data
  * html/charset: use x/text/encoding/htmlindex
  * html/charset: handle unsupported code points for encoding
  * html/charset: verify correct UTF-8 behavior
  * html/charset: replace EUC-KR test</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- Remove net/html/charset to avoid cyclic dependency</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="bbed7dcb208f8091321f5dabf3d9d9949ed5c34b0d674fce004a7fc65a1b20fa" name="golang-org-x-net-html" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * x/net/html: Sync the html parser and atom with the current whatwg spec
  * x/net/html/charset: Change NewReaderByName to NewReaderLabel.
  * html/charset/testdata: update licensing info in README
  * html: Use existing standard library interface internally.
  * html: remove license references from benchmark test data
  * html/charmap: update table with latest data
  * html/charset: use x/text/encoding/htmlindex
  * html/charset: handle unsupported code points for encoding
  * html/charset: verify correct UTF-8 behavior
  * html/charset: replace EUC-KR test</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- Remove net/html/charset to avoid cyclic dependency</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="7b22f0278f5e44bbf2204ebbcf25314d2ad6be447180469735dd5362c4cd2589" name="golang-org-x-net-websocket" arch="src">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380800">- Only package and build golang.org/x/net/websocket. Otherwise, we were creating
  a "dependency cycle" because we were building golang.org/x/net which depends
  on golang.org/x/text, which depends on golang.org/x/tools, which depends on
  golang.org/x/net/websocket, which will try to build golang.org/x/net.
- Update to version 0.0.0+git20170424.da118f7:
  * websocket: handle solicited and unsolicited Ping/Pong frames correctly
  * websocket: don't send IPv6 zone identifier in outbound request, per RFC 6874
  * websocket: Be explicit about goroutine safety
  * websocket: remove redundant error handling
  * websocket: fix Read behaviour in hybiFrameReader.Read
  * websocket: use net.Dialer to open tcp connection
  * websocket: limit incoming payload size
  * websocket: use of crypto/rand package in test
  * websocket: drop support for go1.4 or below
  * websocket: mention the gorilla package</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="344846d15003bee9cbbc6ce9895feb54b617a1e08e2ba4d05101a75c871a7edf" name="golang-org-x-net-websocket" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1493380800">- Only package and build golang.org/x/net/websocket. Otherwise, we were creating
  a "dependency cycle" because we were building golang.org/x/net which depends
  on golang.org/x/text, which depends on golang.org/x/tools, which depends on
  golang.org/x/net/websocket, which will try to build golang.org/x/net.
- Update to version 0.0.0+git20170424.da118f7:
  * websocket: handle solicited and unsolicited Ping/Pong frames correctly
  * websocket: don't send IPv6 zone identifier in outbound request, per RFC 6874
  * websocket: Be explicit about goroutine safety
  * websocket: remove redundant error handling
  * websocket: fix Read behaviour in hybiFrameReader.Read
  * websocket: use net.Dialer to open tcp connection
  * websocket: limit incoming payload size
  * websocket: use of crypto/rand package in test
  * websocket: drop support for go1.4 or below
  * websocket: mention the gorilla package</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
  <changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>
</package>
<package pkgid="a7d5338bd220bb9ec349c06593f3eb4c203cc52bdd28edd4f2ef27627fdc1d8e" name="golang-org-x-sync" arch="src">
  <version epoch="0" ver="0.0.0+git20161206.450f422" rel="2.1"/>
  <changelog author="tboerger@suse.com" date="1481198400">- Initial packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Enabled changes generate within service</changelog>
</package>
<package pkgid="6e48744de93d381004e0224aa0f4e9ee9f9901d8bd59dc0fccfe8533499e6f15" name="golang-org-x-sync" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20161206.450f422" rel="2.1"/>
  <changelog author="tboerger@suse.com" date="1481198400">- Initial packaging</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Enabled changes generate within service</changelog>
</package>
<package pkgid="370745c4eb9a359072c3632436c383459e5e2769c34fc16bec48423e9f36613c" name="golang-org-x-sys" arch="src">
  <version epoch="0" ver="0.0.0+git20161205.478fcf5" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1427112000">- initial version 0.0.0+git20150320.8642817</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-sys
- update version 0.0.0+git20150612.b4e2899
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Switched to disabled run service</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 0.0.0+git20161205.478fcf5:
  * x/sys/unix: add *linkat functions on linux
  * unix: Fix *linkat on sparc64 and s390x
  * unix: Add FADV_* constants for linux/arm
  * unix: fix name of prlimit parameters
  * x/sys/unix: add Getsid on linux
  * x/sys/unix: added SockaddrCAN struct to allow creation of AF_CAN sockets
  * unix: Use syscall.SysctlRaw in Sysctl
  * windows: run "go generate"
  * windows/registry: add code to access remote pc registry
  * x/sys/unix: added linux/mips{,le} support</changelog>
</package>
<package pkgid="6a46a65d7c776452b1d6dbe8ee4a2a54d3bf348ac98bc71d3e8bd2524892d4e1" name="golang-org-x-sys" arch="x86_64">
  <version epoch="0" ver="0.0.0+git20161205.478fcf5" rel="3.1"/>
  <changelog author="i@marguerite.su" date="1427112000">- initial version 0.0.0+git20150320.8642817</changelog>
  <changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-sys
- update version 0.0.0+git20150612.b4e2899
- use golang-packaging for packaging</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Switched to disabled run service</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 0.0.0+git20161205.478fcf5:
  * x/sys/unix: add *linkat functions on linux
  * unix: Fix *linkat on sparc64 and s390x
  * unix: Add FADV_* constants for linux/arm
  * unix: fix name of prlimit parameters
  * x/sys/unix: add Getsid on linux
  * x/sys/unix: added SockaddrCAN struct to allow creation of AF_CAN sockets
  * unix: Use syscall.SysctlRaw in Sysctl
  * windows: run "go generate"
  * windows/registry: add code to access remote pc registry
  * x/sys/unix: added linux/mips{,le} support</changelog>
</package>
<package pkgid="362f18fb58a27b0d3235cbdf799856bce5ce1f7a959aa78749ba99401374cb91" name="golang-org-x-text" arch="src">
  <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
  <changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>
</package>
<package pkgid="3ee473152a119944170ac70f21d32a0a1995d56b900920bf113b404e284320a2" name="golang-org-x-text" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
  <changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>
</package>
<package pkgid="fce7e737329932ca2c104b940ee613aeda53ed6af5e663cb10c8c88b14e3ffc0" name="golang-org-x-time-rate" arch="noarch">
  <version epoch="0" ver="0.0.0+git20161028.f51c127" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
  <changelog author="thipp@suse.de" date="1486641601">- Fix import path</changelog>
</package>
<package pkgid="f685b0e6da23eba95b7bb7b68bc5ddb56b5280871296613fa019e7130d0f19ba" name="golang-org-x-time-rate" arch="src">
  <version epoch="0" ver="0.0.0+git20161028.f51c127" rel="2.1"/>
  <changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
  <changelog author="thipp@suse.de" date="1486641601">- Fix import path</changelog>
</package>
<package pkgid="6abf2e86acd95c69176afb8e83442daec16a6cd4a1f8b2a679b17f0229d3b19a" name="golang-org-x-tools" arch="src">
  <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>
  <changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
  <changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
  <changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
  <changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
  <changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
  <changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>
</package>
<package pkgid="5ae29c3698440ae1716986b37ef6a9fc0a2eb16eaa82e8987e6e2a194eafbf63" name="golang-org-x-tools" arch="x86_64">
  <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>
  <changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
  <changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
  <changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
  <changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
  <changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
  <changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
  <changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
  <changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>
</package>
<package pkgid="46053ccf287b55fce6245d736f5de6017b437e150dbb0765c6d9835fd3127414" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="15.0.11" rel="17.1"/>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
</package>
<package pkgid="bd262f2745ae1af1bfa551c77007f1004ba2322705cbb23c1f78567adb9f5846" name="golang-packaging" arch="src">
  <version epoch="0" ver="15.0.11" rel="17.1"/>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
</package>
<package pkgid="9a858c85edf6fff6df10cdec75bf952ce5fb0ac21ef326369d77c81cda327fd9" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="15.0.3" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1451995200">- update version 14
  * if importpath has "test/example", it should survive (github#5)
  * merge macros.go from openSUSE's go here
  * add golang-macros.rb, replacement for the complicated
    macros in shell in macros.go
  * golang-macros.rb:
    + support build with fake build id
    + support build with custom tags (github#7)
    + support pass any -&lt;arg&gt;="a b c" or -&lt;arg&gt;=&lt;value&gt;
    to go install, shared build is possible now
    (not fully support, other macros need to be adapted)
    + --filelist, to generate filelist used in %files
    section with excluding support
    + use IO.popen to break the build at the exact place
    it fails (github#6)</changelog>
  <changelog author="i@marguerite.su" date="1452513600">- update version 14.1
  * golang.prov fix: uniq! returns nil if everything is unique</changelog>
  <changelog author="i@marguerite.su" date="1452513601">- update version 14.2
  * golang.req: fix ' // indirect' comment in import</changelog>
  <changelog author="i@marguerite.su" date="1453204800">- update version 14.3
  * fix: command not found error for go test on SLE
  * fix #5 again: gsub importpath itself is not enough</changelog>
  <changelog author="i@marguerite.su" date="1453464000">- update version 14.4
  * fix #5 on golang.req</changelog>
  <changelog author="i@marguerite.su" date="1453464001">- update version 14.5
  * fix a typo that prevent golang.req from running (fix #10)</changelog>
  <changelog author="i@marguerite.su" date="1455278400">- update version 14.6
  * Fix rbarch for Power architectures</changelog>
  <changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
  <changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
  <changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
  <changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
  <changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
</package>
<package pkgid="9b2863aaaf3da5dc481b5b8d83d1bd43939f52c191ccafe4c0104c72956946c9" name="golang-packaging" arch="src">
  <version epoch="0" ver="15.0.3" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1451995200">- update version 14
  * if importpath has "test/example", it should survive (github#5)
  * merge macros.go from openSUSE's go here
  * add golang-macros.rb, replacement for the complicated
    macros in shell in macros.go
  * golang-macros.rb:
    + support build with fake build id
    + support build with custom tags (github#7)
    + support pass any -&lt;arg&gt;="a b c" or -&lt;arg&gt;=&lt;value&gt;
    to go install, shared build is possible now
    (not fully support, other macros need to be adapted)
    + --filelist, to generate filelist used in %files
    section with excluding support
    + use IO.popen to break the build at the exact place
    it fails (github#6)</changelog>
  <changelog author="i@marguerite.su" date="1452513600">- update version 14.1
  * golang.prov fix: uniq! returns nil if everything is unique</changelog>
  <changelog author="i@marguerite.su" date="1452513601">- update version 14.2
  * golang.req: fix ' // indirect' comment in import</changelog>
  <changelog author="i@marguerite.su" date="1453204800">- update version 14.3
  * fix: command not found error for go test on SLE
  * fix #5 again: gsub importpath itself is not enough</changelog>
  <changelog author="i@marguerite.su" date="1453464000">- update version 14.4
  * fix #5 on golang.req</changelog>
  <changelog author="i@marguerite.su" date="1453464001">- update version 14.5
  * fix a typo that prevent golang.req from running (fix #10)</changelog>
  <changelog author="i@marguerite.su" date="1455278400">- update version 14.6
  * Fix rbarch for Power architectures</changelog>
  <changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
  <changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
  <changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
  <changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
  <changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
</package>
<package pkgid="ff7316791b59bc757abdc268e109be779d54c1cc5c70ecff456701671644d21f" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="14.1"/>
  <changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
  <changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
  <changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
  <changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
  <changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
</package>
<package pkgid="085965aed589de0b4b76d063147fc76a451e0dd75aae2fb97a92ac9f4bf0bc7f" name="golang-packaging" arch="src">
  <version epoch="0" ver="15.0.7" rel="14.1"/>
  <changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
  <changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
  <changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
  <changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
  <changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
  <changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
</package>
<package pkgid="7dbb25aeb50ef66765da98bde958683ab511911767143f4be9aea8c2100e6019" name="google-cloud-sdk" arch="noarch">
  <version epoch="0" ver="0.9.87" rel="7.1"/>
  <changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
</package>
<package pkgid="ecfa1901ec536920fb0fd2909d70855dde06998b6e5fa30ab95dc76bee07a0a1" name="google-cloud-sdk" arch="src">
  <version epoch="0" ver="0.9.87" rel="7.1"/>
  <changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
</package>
<package pkgid="f16caef8b51917562c28d4d5147d26bc23d2db74acbdd47b9355ff1f20a94ff2" name="google-cloud-sdk" arch="noarch">
  <version epoch="0" ver="140.0.0" rel="10.1"/>
  <changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394020800">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
</package>
<package pkgid="b61552125257a86e1affbc9de13cdf6b22cd9636484a32a115dbaa3d0a402c6e" name="google-cloud-sdk" arch="src">
  <version epoch="0" ver="140.0.0" rel="10.1"/>
  <changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394020800">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
</package>
<package pkgid="576f782657e91c2df7472648ffc7f3b6d87d1b1d280d8463c579972c47714956" name="google-cloud-sdk" arch="noarch">
  <version epoch="0" ver="140.0.0" rel="13.1"/>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Use the more typical &gt;= operator for version comparisons
- Use find -exec over xargs</changelog>
  <changelog author="rjschwei@suse.com" date="1504699200">- Fix gsutil (bsc#1054930)
  + Force VERSION and CHECKSUM file into the right place, settings from
    MANIFEST.in are being ignored
  + Remove the "gsutil test" command. The test command depends on third_party
    test implementation and is invoked during "regular" operation such
    as cp and ls. Testing should be loaded only for developers</changelog>
</package>
<package pkgid="42722041aaac5003058c0178b5eb52a158b469bc4bfdc75cb56d928fa2993227" name="google-cloud-sdk" arch="src">
  <version epoch="0" ver="140.0.0" rel="13.1"/>
  <changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
  <changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
  <changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
  <changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
  <changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
  <changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
  <changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
  <changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
  <changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
  <changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
  <changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Use the more typical &gt;= operator for version comparisons
- Use find -exec over xargs</changelog>
  <changelog author="rjschwei@suse.com" date="1504699200">- Fix gsutil (bsc#1054930)
  + Force VERSION and CHECKSUM file into the right place, settings from
    MANIFEST.in are being ignored
  + Remove the "gsutil test" command. The test command depends on third_party
    test implementation and is invoked during "regular" operation such
    as cp and ls. Testing should be loaded only for developers</changelog>
</package>
<package pkgid="f1609bdf411b26687da6aa029b85ec626366af3970c1c8230f301836c4c96caf" name="gotext" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>
  <changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
  <changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>
</package>
<package pkgid="d5dec130ee8d1aea2b6e8f7f54573ee3c07e6073474e748cd2b59efb961d6c05" name="gpg2" arch="src">
  <version epoch="0" ver="2.0.24" rel="9.3.1"/>
  <changelog author="gregkh@opensuse.org" date="1332849600">- update to upstream 2.0.19
  * GPG now accepts a space separated fingerprint as a user ID.  This
    allows to copy and paste the fingerprint from the key listing.
  * GPG now uses the longest key ID available.  Removed support for the
    original HKP keyserver which is not anymore used by any site.
  * Rebuild the trustdb after changing the option --min-cert-level.
  * Ukrainian translation.
  * Honor option --cert-digest-algo when creating a cert.
  * Emit a DECRYPTION_INFO status line.
  * Improved detection of JPEG files.</changelog>
  <changelog author="vcizek@suse.com" date="1334750400">- Mention some of the changes in Greg's version update</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1357905600">- BuildRequires: libbz2-devel (support BZIP2 compression
  algorithm) (bnc#798175).</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1368187200">- update to 2.0.20
  * Decryption using smartcards keys &gt; 3072 bit does now work.
  * New meta option ignore-invalid-option to allow using the same
  option file by other GnuPG versions.
  * gpg: The hash algorithm is now printed for sig records in key listings.
  * gpg: Skip invalid keyblock packets during import to avoid a DoS.
  * gpg: Correctly handle ports from DNS SRV records.
  * keyserver: Improve use of SRV records
  * gpg-agent: Avoid tty corruption when killing pinentry.
  * scdaemon: Improve detection of card insertion and removal.
  * scdaemon: Rename option --disable-keypad to --disable-pinpad.
  * scdaemon: Better support for CCID readers.  Now, the internal CCID
  driver supports readers without the auto configuration feature.
  * scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and
  it supports variable length PIN input, and you specify
  - -enable-pinpad-varlen option.
  * scdaemon: New option --enable-pinpad-varlen.
  * scdaemon: Install into libexecdir to avoid accidental execution
  from the command line.
  * Assorted bug fixes.
- refresh gnupg-2.0.9-RSA_ES.patch
- verify gpg signature of source tarball</changelog>
  <changelog author="vcizek@suse.com" date="1368532800">- set safe umask before creating a plaintext file (bnc#780943)
  added gpg2-set_umask_before_open_outfile.patch
- select proper ciphers when running in FIPS mode (bnc#808958)
  added gnupg-detect_FIPS_mode.patch</changelog>
  <changelog author="coolo@suse.com" date="1371470400">- add gnupg-2.0.20-automake113.diff to fix build with automake 1.13</changelog>
  <changelog author="coolo@suse.com" date="1371470401">- revert usage of gpg-offline to avoid cycles</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376913600">- update to 2.0.21
  * gpg-agent: By default the users are now asked via the Pinentry
  whether they trust an X.509 root key.  To prohibit interactive
  marking of such keys, the new option --no-allow-mark-trusted may
  be used.
  * gpg-agent: The command KEYINFO has options to add info from
  sshcontrol.
  * The included ssh agent does now support ECDSA keys.
- now requires libgpg-error 1.11
- update gnupg-2.0.9-langinfo.patch for upstream whitespace changes
- drop gnupg-broken-curl-test.patch, no longer required</changelog>
  <changelog author="vcizek@suse.com" date="1379332800">- fix CVE-2013-4351 (bnc#840510)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1380974400">- update to 2.0.22 [bnc#844175]
  * Fixed possible infinite recursion in the compressed packet
    parser. [CVE-2013-4402]
  * Improved support for some card readers.
  * Prepared building with the forthcoming Libgcrypt 1.6.
  * Protect against rogue keyservers sending secret keys.
- remove gpg2-CVE-2013-4351.patch, committed upstream</changelog>
  <changelog author="vcizek@suse.com" date="1392379200">- install scdaemon to /usr/bin (bnc#863645)</changelog>
  <changelog author="vcizek@suse.com" date="1398772800">- add patch by Stephan Mueller which adds an option to enable
  legacy ciphers in FIPS mode
  * added gnupg-add_legacy_FIPS_mode_option.patch
  (part of bnc#856312)
- added BuildRequires: makeinfo (to build info pages from the
  patched gnupg.texi)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- update to 2.0.23:
  * gpg: Reject signatures made using the MD5 hash algorithm unless the
  new option --allow-weak-digest-algos or --pgp2 are given.
  * gpg: Do not create a trustdb file if --trust-model=always is used.
  * gpg: Only the major version number is by default included in the
  armored output.
  * gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the
  communication with the gpg-agent.
  * gpg: The format of the fallback key listing ("gpg KEYFILE") is now more
  aligned to the regular key listing ("gpg -k").
  * gpg: The option--show-session-key prints its output now before the
  decryption of the bulk message starts.
  * gpg: New %U expando for the photo viewer.
  * gpgsm: Improved handling of re-issued CA certificates.
  * scdaemon: Various fixes for pinpad equipped card readers.
  * Minor bug fixes.
- Packaging changes:
  * add gpgtar utility
  * update and use use source URL for tarball signing key
  * removed gnupg-2.0.9-RSA_ES.patch, applied upstream
  * updated for context changes:
    gnupg-add_legacy_FIPS_mode_option.patch
    gnupg-2.0.18-files-are-digests.patch
    gnupg-dont-fail-with-seahorse-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1403611200">- update to 2.0.24
  Contains a security fix to stop a possible DoS using garbled
  compressed data packets which can be used to put gpg into an
  infinite loop. [bnc#884130] [CVE-2014-4617]
  * gpg: Avoid DoS due to garbled compressed data packets.
- further:
  * gpg: Screen keyserver responses to avoid importing unwanted
    keys from rogue servers.
  * gpg: The validity of user ids is now shown by default. To
    revert this add "list-options no-show-uid-validity" to gpg.conf
  * gpg: Print more specific reason codes with the INV_RECP status.
  * gpg: Allow loading of a cert only key to an OpenPGP card.
  * gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
    1.6.</changelog>
  <changelog author="tiwai@suse.de" date="1447934400">- Fix regression of "gpg --recv" due to keyserver import filter
  (bsc#955753,boo#952347):
  0001-gpg-Make-screening-of-keyserver-result-work-with-mul.patch
  0002-gpg-Add-kbnode_t-for-easier-backporting.patch
  0003-gpg-Fix-regression-due-to-the-keyserver-import-filte.patch</changelog>
  <changelog author="vcizek@suse.com" date="1447934401">- fix CVE-2015-1606 (bsc#918089)
  * Invalid memory read using a garbled keyring
  * 0001-gpg-Prevent-an-invalid-memory-read-using-a-garbled-k.patch
- fix CVE-2015-1607 (bsc#918090)
  * memcpy with overlapping ranges
  * 0001-Use-inline-functions-to-convert-buffer-data-to-scala.patch</changelog>
  <changelog author="jsegitz@novell.com" date="1467028800">- Added gnupg-init-trustdb.patch to get commit
  23191d7851eae2217ecdac6484349849a24fd94a: Need to init the
  trustdb for import. (bsc#986783)</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Added 0001-Do-not-install-cacert-and-other-root-certificates.patch
  to backport a patch from gnupg 2.1.14 to not install cacert and
  other root certificates which are not needed with Let's Encrypt
  (boo#1036736).</changelog>
  <changelog author="vcizek@suse.com" date="1528718400">- Sanitize the diagnostic output of the original file name in verbose
  mode (CVE-2018-12020, bsc#1096745)
  * the attacker could have crafted a file name that could inject
    terminal control sequences or fake a status message
  * add gnupg-CVE-2018-12020.patch</changelog>
</package>
<package pkgid="82a9d44386309af89c2c02bf407eb7be3e94fdd0013e4602b8154f25c09d0b44" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.0.24" rel="9.3.1"/>
  <changelog author="gregkh@opensuse.org" date="1332849600">- update to upstream 2.0.19
  * GPG now accepts a space separated fingerprint as a user ID.  This
    allows to copy and paste the fingerprint from the key listing.
  * GPG now uses the longest key ID available.  Removed support for the
    original HKP keyserver which is not anymore used by any site.
  * Rebuild the trustdb after changing the option --min-cert-level.
  * Ukrainian translation.
  * Honor option --cert-digest-algo when creating a cert.
  * Emit a DECRYPTION_INFO status line.
  * Improved detection of JPEG files.</changelog>
  <changelog author="vcizek@suse.com" date="1334750400">- Mention some of the changes in Greg's version update</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1357905600">- BuildRequires: libbz2-devel (support BZIP2 compression
  algorithm) (bnc#798175).</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1368187200">- update to 2.0.20
  * Decryption using smartcards keys &gt; 3072 bit does now work.
  * New meta option ignore-invalid-option to allow using the same
  option file by other GnuPG versions.
  * gpg: The hash algorithm is now printed for sig records in key listings.
  * gpg: Skip invalid keyblock packets during import to avoid a DoS.
  * gpg: Correctly handle ports from DNS SRV records.
  * keyserver: Improve use of SRV records
  * gpg-agent: Avoid tty corruption when killing pinentry.
  * scdaemon: Improve detection of card insertion and removal.
  * scdaemon: Rename option --disable-keypad to --disable-pinpad.
  * scdaemon: Better support for CCID readers.  Now, the internal CCID
  driver supports readers without the auto configuration feature.
  * scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and
  it supports variable length PIN input, and you specify
  - -enable-pinpad-varlen option.
  * scdaemon: New option --enable-pinpad-varlen.
  * scdaemon: Install into libexecdir to avoid accidental execution
  from the command line.
  * Assorted bug fixes.
- refresh gnupg-2.0.9-RSA_ES.patch
- verify gpg signature of source tarball</changelog>
  <changelog author="vcizek@suse.com" date="1368532800">- set safe umask before creating a plaintext file (bnc#780943)
  added gpg2-set_umask_before_open_outfile.patch
- select proper ciphers when running in FIPS mode (bnc#808958)
  added gnupg-detect_FIPS_mode.patch</changelog>
  <changelog author="coolo@suse.com" date="1371470400">- add gnupg-2.0.20-automake113.diff to fix build with automake 1.13</changelog>
  <changelog author="coolo@suse.com" date="1371470401">- revert usage of gpg-offline to avoid cycles</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376913600">- update to 2.0.21
  * gpg-agent: By default the users are now asked via the Pinentry
  whether they trust an X.509 root key.  To prohibit interactive
  marking of such keys, the new option --no-allow-mark-trusted may
  be used.
  * gpg-agent: The command KEYINFO has options to add info from
  sshcontrol.
  * The included ssh agent does now support ECDSA keys.
- now requires libgpg-error 1.11
- update gnupg-2.0.9-langinfo.patch for upstream whitespace changes
- drop gnupg-broken-curl-test.patch, no longer required</changelog>
  <changelog author="vcizek@suse.com" date="1379332800">- fix CVE-2013-4351 (bnc#840510)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1380974400">- update to 2.0.22 [bnc#844175]
  * Fixed possible infinite recursion in the compressed packet
    parser. [CVE-2013-4402]
  * Improved support for some card readers.
  * Prepared building with the forthcoming Libgcrypt 1.6.
  * Protect against rogue keyservers sending secret keys.
- remove gpg2-CVE-2013-4351.patch, committed upstream</changelog>
  <changelog author="vcizek@suse.com" date="1392379200">- install scdaemon to /usr/bin (bnc#863645)</changelog>
  <changelog author="vcizek@suse.com" date="1398772800">- add patch by Stephan Mueller which adds an option to enable
  legacy ciphers in FIPS mode
  * added gnupg-add_legacy_FIPS_mode_option.patch
  (part of bnc#856312)
- added BuildRequires: makeinfo (to build info pages from the
  patched gnupg.texi)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- update to 2.0.23:
  * gpg: Reject signatures made using the MD5 hash algorithm unless the
  new option --allow-weak-digest-algos or --pgp2 are given.
  * gpg: Do not create a trustdb file if --trust-model=always is used.
  * gpg: Only the major version number is by default included in the
  armored output.
  * gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the
  communication with the gpg-agent.
  * gpg: The format of the fallback key listing ("gpg KEYFILE") is now more
  aligned to the regular key listing ("gpg -k").
  * gpg: The option--show-session-key prints its output now before the
  decryption of the bulk message starts.
  * gpg: New %U expando for the photo viewer.
  * gpgsm: Improved handling of re-issued CA certificates.
  * scdaemon: Various fixes for pinpad equipped card readers.
  * Minor bug fixes.
- Packaging changes:
  * add gpgtar utility
  * update and use use source URL for tarball signing key
  * removed gnupg-2.0.9-RSA_ES.patch, applied upstream
  * updated for context changes:
    gnupg-add_legacy_FIPS_mode_option.patch
    gnupg-2.0.18-files-are-digests.patch
    gnupg-dont-fail-with-seahorse-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1403611200">- update to 2.0.24
  Contains a security fix to stop a possible DoS using garbled
  compressed data packets which can be used to put gpg into an
  infinite loop. [bnc#884130] [CVE-2014-4617]
  * gpg: Avoid DoS due to garbled compressed data packets.
- further:
  * gpg: Screen keyserver responses to avoid importing unwanted
    keys from rogue servers.
  * gpg: The validity of user ids is now shown by default. To
    revert this add "list-options no-show-uid-validity" to gpg.conf
  * gpg: Print more specific reason codes with the INV_RECP status.
  * gpg: Allow loading of a cert only key to an OpenPGP card.
  * gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
    1.6.</changelog>
  <changelog author="tiwai@suse.de" date="1447934400">- Fix regression of "gpg --recv" due to keyserver import filter
  (bsc#955753,boo#952347):
  0001-gpg-Make-screening-of-keyserver-result-work-with-mul.patch
  0002-gpg-Add-kbnode_t-for-easier-backporting.patch
  0003-gpg-Fix-regression-due-to-the-keyserver-import-filte.patch</changelog>
  <changelog author="vcizek@suse.com" date="1447934401">- fix CVE-2015-1606 (bsc#918089)
  * Invalid memory read using a garbled keyring
  * 0001-gpg-Prevent-an-invalid-memory-read-using-a-garbled-k.patch
- fix CVE-2015-1607 (bsc#918090)
  * memcpy with overlapping ranges
  * 0001-Use-inline-functions-to-convert-buffer-data-to-scala.patch</changelog>
  <changelog author="jsegitz@novell.com" date="1467028800">- Added gnupg-init-trustdb.patch to get commit
  23191d7851eae2217ecdac6484349849a24fd94a: Need to init the
  trustdb for import. (bsc#986783)</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Added 0001-Do-not-install-cacert-and-other-root-certificates.patch
  to backport a patch from gnupg 2.1.14 to not install cacert and
  other root certificates which are not needed with Let's Encrypt
  (boo#1036736).</changelog>
  <changelog author="vcizek@suse.com" date="1528718400">- Sanitize the diagnostic output of the original file name in verbose
  mode (CVE-2018-12020, bsc#1096745)
  * the attacker could have crafted a file name that could inject
    terminal control sequences or fake a status message
  * add gnupg-CVE-2018-12020.patch</changelog>
</package>
<package pkgid="38a72ed22b591905e25b94c2d252f997b5ab68c5d8e75d75d263681fb8923871" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.0.24" rel="9.3.1"/>
  <changelog author="gregkh@opensuse.org" date="1332849600">- update to upstream 2.0.19
  * GPG now accepts a space separated fingerprint as a user ID.  This
    allows to copy and paste the fingerprint from the key listing.
  * GPG now uses the longest key ID available.  Removed support for the
    original HKP keyserver which is not anymore used by any site.
  * Rebuild the trustdb after changing the option --min-cert-level.
  * Ukrainian translation.
  * Honor option --cert-digest-algo when creating a cert.
  * Emit a DECRYPTION_INFO status line.
  * Improved detection of JPEG files.</changelog>
  <changelog author="vcizek@suse.com" date="1334750400">- Mention some of the changes in Greg's version update</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1357905600">- BuildRequires: libbz2-devel (support BZIP2 compression
  algorithm) (bnc#798175).</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1368187200">- update to 2.0.20
  * Decryption using smartcards keys &gt; 3072 bit does now work.
  * New meta option ignore-invalid-option to allow using the same
  option file by other GnuPG versions.
  * gpg: The hash algorithm is now printed for sig records in key listings.
  * gpg: Skip invalid keyblock packets during import to avoid a DoS.
  * gpg: Correctly handle ports from DNS SRV records.
  * keyserver: Improve use of SRV records
  * gpg-agent: Avoid tty corruption when killing pinentry.
  * scdaemon: Improve detection of card insertion and removal.
  * scdaemon: Rename option --disable-keypad to --disable-pinpad.
  * scdaemon: Better support for CCID readers.  Now, the internal CCID
  driver supports readers without the auto configuration feature.
  * scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and
  it supports variable length PIN input, and you specify
  - -enable-pinpad-varlen option.
  * scdaemon: New option --enable-pinpad-varlen.
  * scdaemon: Install into libexecdir to avoid accidental execution
  from the command line.
  * Assorted bug fixes.
- refresh gnupg-2.0.9-RSA_ES.patch
- verify gpg signature of source tarball</changelog>
  <changelog author="vcizek@suse.com" date="1368532800">- set safe umask before creating a plaintext file (bnc#780943)
  added gpg2-set_umask_before_open_outfile.patch
- select proper ciphers when running in FIPS mode (bnc#808958)
  added gnupg-detect_FIPS_mode.patch</changelog>
  <changelog author="coolo@suse.com" date="1371470400">- add gnupg-2.0.20-automake113.diff to fix build with automake 1.13</changelog>
  <changelog author="coolo@suse.com" date="1371470401">- revert usage of gpg-offline to avoid cycles</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376913600">- update to 2.0.21
  * gpg-agent: By default the users are now asked via the Pinentry
  whether they trust an X.509 root key.  To prohibit interactive
  marking of such keys, the new option --no-allow-mark-trusted may
  be used.
  * gpg-agent: The command KEYINFO has options to add info from
  sshcontrol.
  * The included ssh agent does now support ECDSA keys.
- now requires libgpg-error 1.11
- update gnupg-2.0.9-langinfo.patch for upstream whitespace changes
- drop gnupg-broken-curl-test.patch, no longer required</changelog>
  <changelog author="vcizek@suse.com" date="1379332800">- fix CVE-2013-4351 (bnc#840510)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1380974400">- update to 2.0.22 [bnc#844175]
  * Fixed possible infinite recursion in the compressed packet
    parser. [CVE-2013-4402]
  * Improved support for some card readers.
  * Prepared building with the forthcoming Libgcrypt 1.6.
  * Protect against rogue keyservers sending secret keys.
- remove gpg2-CVE-2013-4351.patch, committed upstream</changelog>
  <changelog author="vcizek@suse.com" date="1392379200">- install scdaemon to /usr/bin (bnc#863645)</changelog>
  <changelog author="vcizek@suse.com" date="1398772800">- add patch by Stephan Mueller which adds an option to enable
  legacy ciphers in FIPS mode
  * added gnupg-add_legacy_FIPS_mode_option.patch
  (part of bnc#856312)
- added BuildRequires: makeinfo (to build info pages from the
  patched gnupg.texi)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- update to 2.0.23:
  * gpg: Reject signatures made using the MD5 hash algorithm unless the
  new option --allow-weak-digest-algos or --pgp2 are given.
  * gpg: Do not create a trustdb file if --trust-model=always is used.
  * gpg: Only the major version number is by default included in the
  armored output.
  * gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the
  communication with the gpg-agent.
  * gpg: The format of the fallback key listing ("gpg KEYFILE") is now more
  aligned to the regular key listing ("gpg -k").
  * gpg: The option--show-session-key prints its output now before the
  decryption of the bulk message starts.
  * gpg: New %U expando for the photo viewer.
  * gpgsm: Improved handling of re-issued CA certificates.
  * scdaemon: Various fixes for pinpad equipped card readers.
  * Minor bug fixes.
- Packaging changes:
  * add gpgtar utility
  * update and use use source URL for tarball signing key
  * removed gnupg-2.0.9-RSA_ES.patch, applied upstream
  * updated for context changes:
    gnupg-add_legacy_FIPS_mode_option.patch
    gnupg-2.0.18-files-are-digests.patch
    gnupg-dont-fail-with-seahorse-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1403611200">- update to 2.0.24
  Contains a security fix to stop a possible DoS using garbled
  compressed data packets which can be used to put gpg into an
  infinite loop. [bnc#884130] [CVE-2014-4617]
  * gpg: Avoid DoS due to garbled compressed data packets.
- further:
  * gpg: Screen keyserver responses to avoid importing unwanted
    keys from rogue servers.
  * gpg: The validity of user ids is now shown by default. To
    revert this add "list-options no-show-uid-validity" to gpg.conf
  * gpg: Print more specific reason codes with the INV_RECP status.
  * gpg: Allow loading of a cert only key to an OpenPGP card.
  * gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
    1.6.</changelog>
  <changelog author="tiwai@suse.de" date="1447934400">- Fix regression of "gpg --recv" due to keyserver import filter
  (bsc#955753,boo#952347):
  0001-gpg-Make-screening-of-keyserver-result-work-with-mul.patch
  0002-gpg-Add-kbnode_t-for-easier-backporting.patch
  0003-gpg-Fix-regression-due-to-the-keyserver-import-filte.patch</changelog>
  <changelog author="vcizek@suse.com" date="1447934401">- fix CVE-2015-1606 (bsc#918089)
  * Invalid memory read using a garbled keyring
  * 0001-gpg-Prevent-an-invalid-memory-read-using-a-garbled-k.patch
- fix CVE-2015-1607 (bsc#918090)
  * memcpy with overlapping ranges
  * 0001-Use-inline-functions-to-convert-buffer-data-to-scala.patch</changelog>
  <changelog author="jsegitz@novell.com" date="1467028800">- Added gnupg-init-trustdb.patch to get commit
  23191d7851eae2217ecdac6484349849a24fd94a: Need to init the
  trustdb for import. (bsc#986783)</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Added 0001-Do-not-install-cacert-and-other-root-certificates.patch
  to backport a patch from gnupg 2.1.14 to not install cacert and
  other root certificates which are not needed with Let's Encrypt
  (boo#1036736).</changelog>
  <changelog author="vcizek@suse.com" date="1528718400">- Sanitize the diagnostic output of the original file name in verbose
  mode (CVE-2018-12020, bsc#1096745)
  * the attacker could have crafted a file name that could inject
    terminal control sequences or fake a status message
  * add gnupg-CVE-2018-12020.patch</changelog>
</package>
<package pkgid="e85e7fefcf82c5704d93b27488adff464450f4d3be5238b8a8321055f16ca158" name="graphite2" arch="src">
  <version epoch="0" ver="1.3.1" rel="7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial commit version 1.2.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to mention libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352721600">- Whitespace trying to figure out why spec file is interpreted as
  binary.</changelog>
  <changelog author="cfarrell@suse.com" date="1352808000">- license update: LGPL-2.1+ or GPL-2.0+ or MPL-1.1
  See License file (most source code notices concur)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354104000">- graphite2-arm.patch :Fix build in arm and possible other platforms, we should
  notuse -nodefaultlibs as a linker flag and let the system
  do its job automatically.
- freetype-devel should be freetype2-devel</changelog>
  <changelog author="dimstar@opensuse.org" date="1372420800">- Add baselibs.conf and provide libgraphite2-3-32bit, which is at
  this moment required by harfbuzz.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Use cmake macros for nice and tidy setup.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651201">- Version bump to 1.2.4:
  * Various bugfixes
  * Expanded testsuite
- Remove graphite2-arm.patch - applied upstream
- Add patches from debian:
  * soname.diff
  * no-specific-nunit-version.diff
- Run^Wdocument tests and generate documentation</changelog>
  <changelog author="tchvatal@suse.com" date="1390651202">- Enable the tests. They work on 13.1 but fail on Factory...</changelog>
  <changelog author="tchvatal@suse.com" date="1390737600">- Use rpath so the tests work.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996800">- Remove texlive dep to remove dep circle.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996801">- Remove harfbuzz dep. Breaks another buildcycle.
  This effectively means we are not running tests. No functional
  changes otherwise.</changelog>
  <changelog author="dmueller@suse.com" date="1413892800">- add link-gcc-shared.diff: link -lgcc_s to fix undefined symbols
  on various ARM architectures</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Remove unnecessary utf-8  characters from the spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1438948800">- Version bump to 1.3.0:
  * Various tweaks for the arabic fonts
- Added patches:
  * graphite-nonvoid-return.patch
  * graphite2-1.2.0-cmakepath.patch
- Removed patches:
  * no-specific-nunit-version.diff
  * soname.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Version bump to 1.3.1:
  * Deprecation warning: Full bidi support is about to be deprecated. Make
    contact if this impacts you.
  * Change compression block format slightly to conform to LZ4
  * Handle mono direction text with diacritics consistently. Fonts
    now see the direction they expect consistently and bidi now
    gives expected results.
  * Fixed lots of fuzz bugs
  * Coverity cleanups
  * Build now works for clang and/or asan and/or afl etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1457006400">- security update:
  * CVE-2016-1521, CVE-2016-1523, CVE-2016-1526
    [bsc#965803], [bsc#965807], [bsc#965810]</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-5436 [bsc#1035204]
    + graphite2-CVE-2017-5436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520942400">- security update:
  * CVE-2018-7999 [bsc#1084850]
    + graphite2-CVE-2018-7999.patch</changelog>
</package>
<package pkgid="0dee198de6eb51a446314c51caba18952c1cc29fcb37f39564824dd87d81b136" name="graphite2" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial commit version 1.2.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to mention libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352721600">- Whitespace trying to figure out why spec file is interpreted as
  binary.</changelog>
  <changelog author="cfarrell@suse.com" date="1352808000">- license update: LGPL-2.1+ or GPL-2.0+ or MPL-1.1
  See License file (most source code notices concur)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354104000">- graphite2-arm.patch :Fix build in arm and possible other platforms, we should
  notuse -nodefaultlibs as a linker flag and let the system
  do its job automatically.
- freetype-devel should be freetype2-devel</changelog>
  <changelog author="dimstar@opensuse.org" date="1372420800">- Add baselibs.conf and provide libgraphite2-3-32bit, which is at
  this moment required by harfbuzz.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Use cmake macros for nice and tidy setup.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651201">- Version bump to 1.2.4:
  * Various bugfixes
  * Expanded testsuite
- Remove graphite2-arm.patch - applied upstream
- Add patches from debian:
  * soname.diff
  * no-specific-nunit-version.diff
- Run^Wdocument tests and generate documentation</changelog>
  <changelog author="tchvatal@suse.com" date="1390651202">- Enable the tests. They work on 13.1 but fail on Factory...</changelog>
  <changelog author="tchvatal@suse.com" date="1390737600">- Use rpath so the tests work.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996800">- Remove texlive dep to remove dep circle.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996801">- Remove harfbuzz dep. Breaks another buildcycle.
  This effectively means we are not running tests. No functional
  changes otherwise.</changelog>
  <changelog author="dmueller@suse.com" date="1413892800">- add link-gcc-shared.diff: link -lgcc_s to fix undefined symbols
  on various ARM architectures</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Remove unnecessary utf-8  characters from the spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1438948800">- Version bump to 1.3.0:
  * Various tweaks for the arabic fonts
- Added patches:
  * graphite-nonvoid-return.patch
  * graphite2-1.2.0-cmakepath.patch
- Removed patches:
  * no-specific-nunit-version.diff
  * soname.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Version bump to 1.3.1:
  * Deprecation warning: Full bidi support is about to be deprecated. Make
    contact if this impacts you.
  * Change compression block format slightly to conform to LZ4
  * Handle mono direction text with diacritics consistently. Fonts
    now see the direction they expect consistently and bidi now
    gives expected results.
  * Fixed lots of fuzz bugs
  * Coverity cleanups
  * Build now works for clang and/or asan and/or afl etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1457006400">- security update:
  * CVE-2016-1521, CVE-2016-1523, CVE-2016-1526
    [bsc#965803], [bsc#965807], [bsc#965810]</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-5436 [bsc#1035204]
    + graphite2-CVE-2017-5436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520942400">- security update:
  * CVE-2018-7999 [bsc#1084850]
    + graphite2-CVE-2018-7999.patch</changelog>
</package>
<package pkgid="97c6775f8aaefa468aa410c49feec3de5048f4d550ddf60a07af79627c836c80" name="graphite2-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial commit version 1.2.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to mention libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352721600">- Whitespace trying to figure out why spec file is interpreted as
  binary.</changelog>
  <changelog author="cfarrell@suse.com" date="1352808000">- license update: LGPL-2.1+ or GPL-2.0+ or MPL-1.1
  See License file (most source code notices concur)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354104000">- graphite2-arm.patch :Fix build in arm and possible other platforms, we should
  notuse -nodefaultlibs as a linker flag and let the system
  do its job automatically.
- freetype-devel should be freetype2-devel</changelog>
  <changelog author="dimstar@opensuse.org" date="1372420800">- Add baselibs.conf and provide libgraphite2-3-32bit, which is at
  this moment required by harfbuzz.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Use cmake macros for nice and tidy setup.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651201">- Version bump to 1.2.4:
  * Various bugfixes
  * Expanded testsuite
- Remove graphite2-arm.patch - applied upstream
- Add patches from debian:
  * soname.diff
  * no-specific-nunit-version.diff
- Run^Wdocument tests and generate documentation</changelog>
  <changelog author="tchvatal@suse.com" date="1390651202">- Enable the tests. They work on 13.1 but fail on Factory...</changelog>
  <changelog author="tchvatal@suse.com" date="1390737600">- Use rpath so the tests work.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996800">- Remove texlive dep to remove dep circle.</changelog>
  <changelog author="tchvatal@suse.com" date="1390996801">- Remove harfbuzz dep. Breaks another buildcycle.
  This effectively means we are not running tests. No functional
  changes otherwise.</changelog>
  <changelog author="dmueller@suse.com" date="1413892800">- add link-gcc-shared.diff: link -lgcc_s to fix undefined symbols
  on various ARM architectures</changelog>
  <changelog author="fstrba@suse.com" date="1432036800">- Remove unnecessary utf-8  characters from the spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1438948800">- Version bump to 1.3.0:
  * Various tweaks for the arabic fonts
- Added patches:
  * graphite-nonvoid-return.patch
  * graphite2-1.2.0-cmakepath.patch
- Removed patches:
  * no-specific-nunit-version.diff
  * soname.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Version bump to 1.3.1:
  * Deprecation warning: Full bidi support is about to be deprecated. Make
    contact if this impacts you.
  * Change compression block format slightly to conform to LZ4
  * Handle mono direction text with diacritics consistently. Fonts
    now see the direction they expect consistently and bidi now
    gives expected results.
  * Fixed lots of fuzz bugs
  * Coverity cleanups
  * Build now works for clang and/or asan and/or afl etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1457006400">- security update:
  * CVE-2016-1521, CVE-2016-1523, CVE-2016-1526
    [bsc#965803], [bsc#965807], [bsc#965810]</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-5436 [bsc#1035204]
    + graphite2-CVE-2017-5436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520942400">- security update:
  * CVE-2018-7999 [bsc#1084850]
    + graphite2-CVE-2018-7999.patch</changelog>
</package>
<package pkgid="29145a8bf1b334b7c724e57e04a857e8104a4c49c4e563656f1f6e85fb231151" name="graphviz" arch="src">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
  <changelog author="trenn@suse.de" date="1540555200">- Build with gts support (bsc#1108978, bsc#1108976)</changelog>
</package>
<package pkgid="05360a938d314f65b96052b1a27e3167aa00d901d8511653697f2b31946d6273" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
  <changelog author="trenn@suse.de" date="1540555200">- Build with gts support (bsc#1108978, bsc#1108976)</changelog>
</package>
<package pkgid="a1f396b5e7690981ef706d89a083c1ab0b255809ffd10d4cc42489c80aed677c" name="graphviz" arch="src">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="cc0f54af8e6bb01f0007b7455d66269e2a03fb5d531a53c46514e86b450c107c" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="cde93bde0070381da60371a5a4eeeabfed10dfaeba8dc759064f394943dad911" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
  <changelog author="trenn@suse.de" date="1540555200">- Build with gts support (bsc#1108978, bsc#1108976)</changelog>
</package>
<package pkgid="c7345d8bb5632759c7e65f57c8b3c9ab4db3d37485466ba4f23ea713235ccde4" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
  <changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
  <changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
  <changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
  <changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
  <changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
  <changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="9766b4f14b3d0c5a54a20d65a3e64b27bc924116063f0b84857e81a6621abffd" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="2cd1aefbfd30c43961f657faa52d169ca5818da3e9fdb58e722297e097e56700" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="fcdb73c17d7595f3e2677c358f7463330edcd67594b0bf8110409878b7b12655" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="42476d0923ed6388765b9f61d3df327c9f7ab886b76a38ca860e1e948c7d0772" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="791857fcc6220e05b9fb605a474db65b8eb468f585ff40d397a4213dff43c62d" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="2b9b28861b49876a301e38c61255851fb3410c086afcb6e18c4d8e098ba3af74" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="d6a29bcc2b8dde42c693d9ca3269d26ee990894b8f1a9317d70f1cc853e8d08b" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="f979e4683d8570f13558c41ade4ed28b3eb330d92cf82e002edc3daa0509f1d3" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="8bd801f6af1f5b3b540645d9322e63b48a1fedbcdee8a79b38fb700ccdd80513" name="graphviz-gvedit" arch="src">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="38abdc17bec713296bc0d8f1d4f8b7a2ff2faded6e0af3fdf775cf984bed2eb8" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="b81080e34e503f3ab8cec05de733a26c0728cf3e3ae4739bd97c3b099eb43e6e" name="graphviz-gvedit" arch="src">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="4e7158f202cb4dc9cd9a4b9314e653609bab7a1c6a6e555fd9ff7e4466969ce4" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
  <changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="042983fe9f7fb71344f0a50f0129579f5db83c421c8279ee1a4a957535a72c01" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="4ca0ce0e774781dd832156f9a7e1663cb57ed79fe0d77114e4f7a084557ddba5" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="dcbfe8486526803077a070b2d22b68f8f2dbc9dcb4514b10cda44dc662bc5d1a" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="1d99a7d50b567b343cd999cbe0ee9cdb3c5e5f02be8b5469cb23c065acc51baa" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="b87b1da87426da4d405441ac2535ead75475656898624bead1e505e5b915f483" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="d22b65c53634cbd408d01b28a57e7c2acf3f418e846bcc7900d2abf757fe7240" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="dd078b1541e9225ec8b5d5f312bfb1417d502fdf28483a8ebfeca7547871e09a" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="928c09fb9468cc1496ec9968d5450967fbb97d42010a98a31c41e3dddf7ff612" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="76e5495cfcd5d670470d32724ceb293d93380a955890dfc2131d8981c765c0e9" name="graphviz-plugins" arch="src">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="133e73a56f7a5a5c8472d68bf81d33a2d775b2bc9f96523564ef2823716c1c2b" name="graphviz-plugins" arch="src">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="4b8f7da9549a3cb9b6826b6c418c9fd5b9e00cda26e347155e4c014b528e6e52" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="3681de3051b0550f0f53bff681ee16eb3172dbb4dc5b41352ad4028de2b3d991" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="d5df6129f1307f0e1ecee2c044459f1eb80fa5f1701103239f2eb5c306b9c08b" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="075a2ff4474e3c33ad4a44d36f664ae0c944a46cc283575eb6574d4676aeabf2" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="3067223b808a70e24734b8b2d0bbc0297b167095938ba55454881587faaef6cf" name="graphviz-smyrna" arch="src">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="ad69c7abe12faf871bf81dec7a40b0fca613299d37f130f80545de0370df5f68" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="d2f78d0dcb064e15b158e95024ddd34c96f69cd6f3e6530485283c37bdcf3288" name="graphviz-smyrna" arch="src">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="82b612a490a8d9853069e13196c0290901fb98f722ce5e28101b6d58548e8420" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.1"/>
  <changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="a53b4f22013d962f544fd3668a5dfda62ce62c69f69328644339e0050ba3749c" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="12.1"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="c62ae6ef7aafecb71b602f48b153d99602f81b415addbd993ba0f56bed4c0567" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.38.0" rel="9.3"/>
  <changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
  <changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
  <changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
  <changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
  <changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
  <changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
  <changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
  <changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
  <changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
  <changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>
</package>
<package pkgid="e7c070e9c11971a9ccdaf158e33a03ae514e2ff53cc3f9dfe68b5b2b0738f12d" name="growpart" arch="noarch">
  <version epoch="0" ver="0.30" rel="11.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
</package>
<package pkgid="3334a10c9be9fb633e6ef27d0b6c5052edce3bc1552e5c6f9f2037ca511c2a27" name="growpart" arch="src">
  <version epoch="0" ver="0.30" rel="11.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
</package>
<package pkgid="6765bbf59857ff6f936f89593f6c5d6395d7f9c22650173aba534154384e9914" name="growpart" arch="noarch">
  <version epoch="0" ver="0.30" rel="11.6.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="48c892d1d4b20ae332d5f7984bf310f319c8933e31631053727c2a70aece40fb" name="growpart" arch="src">
  <version epoch="0" ver="0.30" rel="11.6.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="f7bba6f8bfc14b844fac5290b4c27a887344b03a29ce81fa38a2e391bb0db3f7" name="growpart-rootgrow" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="11.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
</package>
<package pkgid="2506b35b2fd962062c0c001eff5a8e60d8c8070ac7f55ed313b0e6b412d7c0b6" name="growpart-rootgrow" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="11.6.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="5e99de215937c0b37ded93ea57800cdcb9310b0d0f42a8bcdca7e6084336cd5d" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="9a3a0a5f0199a4ca74fec16bbec944cf10d90b4961eb62ad15dc4f7dbc0d9bb8" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="3928f00509c2bf3a2724b49e69927f1074b71ed2aaa0562464683ea97a8b2d27" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="4e8b78f67a69e748d676cf5e1d9b12acaa3e955a4da9f7fee34939a9dbbc6269" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="244789f159e457545f5e5c7c19744297407750b1925ddfc7cb7c578603b365eb" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="e11bbf7fa58d309c59a19e051d420a71fa7962150198f058f4695e456170a96a" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="48f9301c46f72065b0233c35ce011f39313258a71b27f26ef7b14434ac7b44d3" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="3ae0403ac96701e874397e6c50942def640f6597a12a184cc0301f17f4343f62" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="e0b303e1f02e30c16f06f20d117794eb5704af29fd26d26db80746eaf33abe74" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="8069d1cdba415e82a1c1b1f744ecdbd89611d287b58bb1bfeba0305af4bf41b4" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="829ad084b4d97ce089e3395fa7fbd47e77257eeb966f08b8e64a88851473a3f6" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="fdd090a6ff240ead77ac6087f442517c8d4b3d2f13928a59a8de95c38325c8af" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="1e1c210844b7723b1c4bb06adae2ec48edf43a933b5e5c55756731247c8fd0e9" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="e8adef005f6061473af8244c99292b0a30dd5ba08dbd2ddc36778d24224c4903" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="fce0eb347bfedb638d6237f22bbe88137395921059a984045646775806178551" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="1fec8ddc2a714c8387dc1efdc45257ba10d84d26b849ca31356e1f8ff29fc33a" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="fcf77e90c131c1f1f896de17ed7bfc1effc05d008d827ee49ef9723d78cea49d" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="1f6bddeedfb121cff487e6b759895b03ff2c7e69ca60f5630670655e8f5a73b7" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="f116a940f35c6a249c35fbb19f1bbb6166b318760c9144a4324c8255c4b9ab71" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="4140e4905a70320c19953b13c37978b78c28017083b74d1a1c5df256f3921269" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="32fbfa68938eeed22e84590a5afb335cf62cf4797d46ad5ef0535b06d24df649" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="39039d9b1102d825507c84e0133bfdb12b8410d2cdc794521c5f2de29371b411" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="df94cfe69db0b4a743d0fffc8ed42b42f817f022b6b771698f0d7f7e02fae0cb" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="e35a9d18a00652a4462d696c2a678eb24166d738fa97406b6ddf58b56fafab22" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="80fa694b88c793a4523f77d7635b9c30483bad36f296ae449f19c13ed31a0e0a" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="9f2bde398105d8141a89fc24d1f723772ddfd6b18ceb6220ee53a5f0074f96ce" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="f73ffd5e2cedd073c9cae7c17727c0fa01632bef82ad33ed2580f9f59f2e9d74" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="2e890599fb5d4de74aadb0334b32846e7b9ff2ff88506ba1642d5f9c57222daa" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="851c7a24cea21aa553e11f913024f147f54a0c92e8acb7796c6236f8d8391787" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="a4f31fce5f7a8bf53e702ba985f779c3b2d7ea41d99c40bee801793f220de4c5" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="b92096569cdca04ac3a68e933f9b44a783f40468e5b7e7915962a88b2bcf939d" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="daed1078ab89bd34e7388c0e8eb72c80ffea09ae4f2b6e4647ea47e3c6be95b9" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="ab110a05016919784046cdb219c874dbadda14f2409a19a84b03a8e226d5a92f" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="fd1cb2face4d421380847ec031c7aa6194aadc565d0ba379ce5ce4bc86f62599" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="6602d27c5cede8c54b7e95bc5ebbf7790dfa987dd62d1fee505cd192b513cc95" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="ecc6ec12f34d6defa6dff945ff2752f251cbbbfc6b98f5e50cbc3b6ac2d49806" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="1070920324f337e5df7bbd0ff9b0cbad784ddbe13a139253ae75f448b44d4014" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="39b1cf69880d4724f298c33add12f269012fcf514d74ef17d61b6874bb14e395" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="a58115ae57de6badcc256ab748f25791cf3d34657429a32dc3b323c01fa82a6c" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="213884710a1728d689df9557e680cdd554cbed4528ebd8e6489f3b702db03245" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="b8a2b648635dfc038e05287dd770b864f1ea83aad80985a0906f4e3d490f35cb" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="0ba6a786d150c23e92b168dc80ed347c96f16c02fda695e3ff377e91008f39d3" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="ebd90f094bcfffc79a27d5d30b87902306c9bf6a53d2a63913221d46cd422bbe" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="10.2"/>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
</package>
<package pkgid="940190d5c7de90b162af94f779fe7c16f4da293cf650fefea3a7ae68b2901203" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="13.1"/>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
</package>
<package pkgid="9a43818b323a0758adff98f7521f2aec33f781c79e4fd419caf2be108fef9801" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="16.1"/>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
</package>
<package pkgid="5ac8c75ed6770dea34b4f3de45382a57eb3903949d2f997bb715c17a03278563" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="20.1"/>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419, bsc#1092344)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
- Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1539000000">- Fix DNS device path parsing for efinet device (bsc#1105457)
  * modified 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="d2abb7234a3e520e005d4c0517aa2f7e1d47718e1c6aa4e8bc45ce73f90c4532" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="4.1"/>
  <changelog author="mchang@suse.com" date="1479729600">- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded
  to support booting from lvm volume (bsc#1004324)</changelog>
  <changelog author="mchang@suse.com" date="1481889600">- Ensure that the path start with / and has no // (bsc#1015599)
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch</changelog>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
</package>
<package pkgid="211e29f031bb20fdcc17637eecc249ffc4c0e0a3c2ba8f4dc2142057446eb6c3" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="7.1"/>
  <changelog author="agraf@suse.com" date="1485950400">- Add support for BLT only EFI GOP adapters (FATE#322332)
  * grub2-efi-gop-add-blt.patch</changelog>
  <changelog author="mchang@suse.com" date="1486641600">- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
  * 0001-Fix-fwpath-in-efi-netboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1487332800">- New upstream version 2.02~rc1 (fate#322102)
- Drop upstream patches
  * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
  * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
  * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch
  * 0001-unix-password-Fix-file-descriptor-leak.patch
  * 0002-linux-getroot-fix-descriptor-leak.patch
  * 0003-util-grub-mount-fix-descriptor-leak.patch
  * 0004-linux-ofpath-fix-descriptor-leak.patch
  * 0005-grub-fstest-fix-descriptor-leak.patch
  * 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
  * 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
  * 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
  * 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
  * 0005-i386-fix-TSC-calibration-using-PIT.patch
  * 0001-efi-really-mark-memory-of-unknown-type-as-reserved.patch
  * 0002-Translate-UEFI-persistent-memory-type.patch
  * 0003-lsefimmap-support-persistent-memory-and-other-UEFI-2.patch
  * 0001-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch
  * 0002-disk-cryptodisk-Add-missing-error-check.patch
  * 0003-crypto-restrict-cipher-block-size-to-power-of-2.patch
  * 0004-cryptodisk-strip-parenthesis-from-backing-device-nam.patch
  * 0005-cryptodisk-teach-grub_cryptodisk_insert-about-partit.patch
  * 0006-do-not-emit-cryptomount-without-crypto-UUID.patch
  * 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch
  * 0002-grub-core-disk-lzopio.c-fix-double-free-in-error-pat.patch
  * 0003-fix-double-free-in-grub_net_recv_tcp_packet.patch
  * 0004-arm64-setjmp-Add-missing-move-for-arg1-0-case.patch
  * 0005-tftp-fix-memory-leaks-in-open.patch
  * 0006-Remove-the-variable-oldname-which-is-attempting-to-f.patch
  * 0007-arp-icmp-Fix-handling-in-case-of-oversized-or-invali.patch
  * 0001-Import-xen-headers-directly-into-GRUB.patch
  * 0002-Adapt-build-system-to-use-imported-xen-headers.patch
  * 0003-xen-relocator-Use-local-symbol-to-ensure-that-code-i.patch
  * 0001-xen-make-xen-loader-callable-multiple-times.patch
  * 0002-xen-avoid-memleaks-on-error.patch
  * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
  * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
  * 0005-xen-synchronize-xen-header.patch
  * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
  * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
  * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
  * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
  * 0010-xen-modify-page-table-construction.patch
  * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
  * ppc64le.patch
  * libgcc-prereq.patch
  * libgcc.patch
  * grub2-ppc64-qemu.patch
  * biendian.patch
  * ppc64_opt.patch
  * grub2-10_linux-avoid-multi-device-root-kernel-argument.patch
  * 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
  * 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
  * grub2-xfs-Add-helper-for-inode-size.patch
  * grub2-xfs-Fix-termination-loop-for-directory-iteration.patch
  * grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch
  * grub2-xfs-V5-filesystem-format-support.patch
  * 0001-efinet-Check-for-immediate-completition.patch
  * 0001-efinet-enable-hardware-filters-when-opening-interfac.patch
  * 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch
  * grub2-xen-legacy-config-device-name.patch
  * grub2-getroot-support-NVMe-device-names.patch
  * grub2-netboot-hang.patch
  * grub2-btrfs-fix-incorrect-address-reference.patch
  * aarch64-reloc.patch
  * fix-overflows-in-grub_password_get-and-grub_user_get.patch
  * grub2-xen-fix-bzImage-payload-length.patch
  * 0001-increase-network-try-interval-gradually.patch
  * 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch
  * btrfs-fix_get_root_key_comparison_failures_due_to_endianness.patch
  * grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
  * 0001-Add-bootargs-parser-for-open-firmware.patch
  * grub2-arm64-Reduce-timer-event-frequency-by-10.patch
  * grub2-arm64-set-correct-length.patch
  * grub2-arm64-setjmp-Add-missing-license-macro.patch
  * grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch
  * grub2-arm64-bootaa64-fix-1.patch
  * grub2-arm64-bootaa64-fix-2.patch
  * grub2-arm64-Use-cpu-timer-for-timekeeping.patch
  * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
  * 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch
  * grub2-efi-check-path-non-null-before-grub_strrchr.patch
  * grub2-mkstandalone-out-of-bound-access-to-tar-header-.patch
  * grub2-efidisk-Respect-block_io_protocol-buffer-alignment.patch
  * grub2-arm64-Add-support-for-relocations-needed-for-linaro-.patch
  * grub2-XFS-Fix-wrong-alignment-treatment.patch
  * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
  * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
  * 0001-Fix-fwpath-in-efi-netboot.patch
  * grub2-net-icmp6-fix-no-respond-to-neighbor-solicit-message.patch
  * grub2-net-send-router-solicitation-for-ipv6-address-autoconf.patch
  * grub2-emu-hostfs-Drop-unnecessary-feature-test-macros.patch
- Rediff
  * use-grub2-as-a-package-name.patch
  * grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
  * grub2-fix-menu-in-xen-host-server.patch
  * grub2-secureboot-chainloader.patch
  * grub2-s390x-02-kexec-module-added-to-emu.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-mkconfig-aarch64.patch
  * grub2-btrfs-04-grub2-install.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-efi-xen-chainload.patch
  * grub2-ppc64-cas-reboot-support.patch
  * 0002-Add-Virtual-LAN-support.patch
  * grub2-emu-4-all.patch
  * grub2-mkconfig-arm.patch
- Renew
  * grub2-efi-HP-workaround.patch
- Replaced UEFI netboot patch
  * grub2-efinet-ipv6-dhcpv6.patch
  * grub2-efinet-ipv6-dhcpv6-use-mac-device.patch
  * grub2-bootp6-dns.patch
  * grub2-efinet-httpboot.patch
- New UEFI netboot patch
  * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0004-efinet-UEFI-IPv6-PXE-support.patch
  * 0005-grub.texi-Add-net_bootp6-doument.patch
  * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  * 0007-efinet-Setting-network-from-UEFI-device-path.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
- Fix compilation with new glibc
  * fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
- Remove unused patches
  * grub2-enable-theme-for-terminal-window.patch
  * 0001-script-provide-overridable-root-by-subvol.patch
  * 0002-script-create-menus-for-btrfs-snapshot.patch
- Drop workarounds for gdb_grub and grub.chrp, they are now installed under
  fixed name
- Do not patch docs/Makefile.in, it is regenerated anyway
  * rename-grub-info-file-to-grub2.patch
- Use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due
  to compiler warning)
  * grub2-secureboot-add-linuxefi.patch
- Replace grub2-use-DejaVuSansMono-for-starfield-theme.patch with
  grub2-use-Unifont-for-starfield-theme-terminal.patch - use Unifont
  font for terminal window
- Remove patch-not-applied filter.
  * grub2.rpmlintrc</changelog>
  <changelog author="mchang@suse.com" date="1488456000">- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
  * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1488542400">- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting
  (bsc#900418) (bsc#951748)
  * grub2-efi-xen-cfg-unquote.patch
- Fix linuxefi erroneously initialize linux's boot_params with non-zero
  values. (bsc#1025563)
  * grub2-linuxefi-fix-boot-params.patch
- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has
  regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)</changelog>
  <changelog author="mchang@suse.com" date="1488801600">- TPM Support (FATE#315831)
  * 0001-tpm-Core-TPM-support.patch
  * 0002-tpm-Measure-kernel-initrd.patch
  * 0003-tpm-Add-BIOS-boot-measurement.patch
  * 0004-tpm-Rework-linux-command.patch
  * 0005-tpm-Rework-linux16-command.patch
  * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  * 0007-tpm-Measure-the-kernel-commandline.patch
  * 0008-tpm-Measure-commands.patch
  * 0009-tpm-Measure-multiboot-images-and-modules.patch
  * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  * 0011-tpm-Fix-build-error.patch
  * 0012-tpm-Build-tpm-as-module.patch
- grub2.spec : Add grub-tpm.efi for Secure Boot</changelog>
  <changelog author="arvidjaar@gmail.com" date="1489665600">- new upstream version 2.02~rc2
  * rediff
  - use-grub2-as-a-package-name.patch
  - grub2-linguas.sh-no-rsync.patch
  * drop upstream patches
  - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch</changelog>
  <changelog author="mchang@suse.com" date="1489752000">- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy
  (bsc#1029187)</changelog>
  <changelog author="mchang@suse.com" date="1490011200">- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="arvidjaar@gmail.com" date="1490529600">- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry
  in additional environment block (boo#1031025)</changelog>
  <changelog author="mchang@suse.com" date="1491480000">- Downgrade os-prober dependency to Recommends (boo#898610) (fate#323231)</changelog>
  <changelog author="mchang@suse.com" date="1493121600">- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
  * Add grub2-btrfs-09-get-default-subvolume.patch
  * grub2-xen-pv-firmware.cfg : search path in default subvolume</changelog>
  <changelog author="arvidjaar@gmail.com" date="1493294400">- new upstream version 2.02
  * rediff
  - use-grub2-as-a-package-name.patch
- update translations</changelog>
  <changelog author="mchang@suse.com" date="1496318400">- Support LVM physical volume created without metadatacopies (bsc#1027526)
  * grub2-diskfilter-support-pv-without-metadatacopies.patch
- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
  * grub2-efi-uga-64bit-fb.patch</changelog>
  <changelog author="mchang@suse.com" date="1506254400">- From mlatimer@suse.com:
- Use /boot/&lt;arch&gt;/loader/linux to determine if install media
  is SUSE instead of /contents file (bsc#1054453)
- Use the pvops-enabled default kernel if the traditional xen
  pv kernel and initrd are not found (bsc#1054453)</changelog>
  <changelog author="mchang@suse.com" date="1506427200">- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure
  in booting on some bogus firmware. To use the TPM image you have to use
  suse-enable-tpm option of grub2-install (bsc#1052401)
  * 0013-tpm-i386-pc-diskboot-img.patch</changelog>
  <changelog author="mchang@suse.com" date="1507896000">- From agraf@suse.com:
- Fix reboot in UEFI environments (bsc#1047331)
  * Add grub2-efi-Move-grub_reboot-into-kernel.patch
  * Update grub2-efi-Free-malloc-regions-on-exit.patch to upstream
    reviewed commit which is also included in openSUSE</changelog>
  <changelog author="mchang@suse.com" date="1512734400">-  Filter out autofs and securityfs from /proc/self/mountinfo to speed
  up nfsroot test in large number of autofs mounts (bsc#1069094)
  * modified grub2-pass-corret-root-for-nfsroot.patch</changelog>
  <changelog author="mchang@suse.com" date="1516881600">- check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
</package>
<package pkgid="67b8774823cb228a45573bd21eb5bbed93f05fddc20aa84cb7c958b68d0ae921" name="gsoap" arch="src">
  <version epoch="0" ver="2.8.46" rel="3.1"/>
  <changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
  <changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
  <changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
  <changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
  <changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
  <changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
  <changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
  <changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
  <changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>
</package>
<package pkgid="40c66fecab0f0dd24c6b373bb76c7fb82a370f55aa0041f4a0dbb089c6cac1fe" name="gsoap-devel" arch="x86_64">
  <version epoch="0" ver="2.8.46" rel="3.1"/>
  <changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
  <changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
  <changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
  <changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
  <changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
  <changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
  <changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
  <changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
  <changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>
</package>
<package pkgid="48c50ce7d3edd367df2beaccf3e1a82bdd1cb74a45a0d8b6a91606b6906b2ff2" name="gsoap-doc" arch="noarch">
  <version epoch="0" ver="2.8.46" rel="3.1"/>
  <changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
  <changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
  <changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
  <changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
  <changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
  <changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
  <changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
  <changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
  <changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
  <changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
  <changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>
</package>
<package pkgid="b955425e31e0ae04f57874284cf74e0bb8214dc940300bb85e58768131a97ffc" name="gtg" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="11.5.1"/>
  <changelog author="awafaa@opensuse.org" date="1239019200">- Update to version 0.1.1:
  + New features:
  - New icon
  - Quickadd now accepts attributes
  - http:// links now open in the browser
  - Shortcut to show/hide sidebar (F9)
  - Some UI love for the sidebar and the tag icons, shamelessy
    copied from f-spot
  - Hotkeys goodness
  - Edit buttons
  + Bugs fixed:
  - Calendar open at the correct date
  - TaskSerial refactorization
  - Tooltips on buttons
  - First unit tests
  - Error, no crash if the XML file cannot be read
  - Fix lp#339383 (delete subtask when deleting first char)
  - Escape title in the treeview: lp#339874
  - Focus in the editor: lp#339269, lp#339195, lp#339389
  - lp#339269: Quickadd has the focus on launch
  - lp#339583, lp#336314: patches delete key and enter key to
    confirm a delete
  - Typos: lp#339268 lp#339492</changelog>
  <changelog author="awafaa@opensuse.org" date="1247140800">- Update to version 0.1.2:
  + Available in 18 languages, with 12 languages being more than
    99% translated
  + Shadows around the listview widgets
  + Fixes package dependencies
  + Tooltips for button
  + Automatically select title in task editor
  + Crash on startup with non empty LANGUAGE envvar
  + Use GNOME settings for toolbar
  + Better tag markup handling
  + No more multiple instances
  + HTTP link parsing
  + Update README
  + Update XML files sooner
  + Remember color
  + URLs can now include ';' characters. Fixes lp#360969
  + Added support for opening subtasks and links with the keyboard:
    Fixes lp#369272
  + Add polish translation
  + Title for newly created task is now selected to allow easy editing
  + Fixed some bugs in the task editor
  + lp#326388, lp#374745, lp#374745</changelog>
  <changelog author="awafaa@opensuse.org" date="1260792000">- Update to version 0.2.0:
  + Bugs fixes from 0.1.9
- Changes from version 0.1.9:
  + Support non-exact ("fuzzy") due dates: 'now', 'soon', and
    'later'
  + Fixes a bug with gtk stock strings being marked as translatable
    (lp#490231)
  + When a task is deleted, all subtask are deleted as well
  + Groups for tags and subtags
  + GNOME bugzilla plugin
  + Handle tasks spatially (remember position &amp; size)
  + Opened tasks on quit are reopened on start
  + Remove the "File" menu. We have no files, we have tasks!
  + Improve compatibility with non GNU systems
  + Close date selector widget on single click
  + The toolbar can now be hidden
  + Empty new tasks are deleted when editor is closed
  + Lot of bug fixed in the editor while playing with subtasks
  + Works well with the "text besides icon" GNOME option
  + Merge RTM plugin branch
  + i18n: fixed window title in GTG/taskbrowser/browser.py
  + Add XDG_CACHE redefinition in script/debug.sh
  + Remove unsued get_closed_date
  + Added filtering capabilities
  - Filter callbacks were added to the task browser
  - Filters were also added to the requester
  + lp#406851, incorrect behaviour marking a dismissed task as done
  + Added accelerators to the task editor
  + Plugin for integration with the Hamster Time Tracker
  + Add plugin engine
  + When GTG is already running, use DBUS to raise existing
    instance rather than failing silently
  + Refactorization and PEP8ification work
  + New keyboard bindings for 'Mark as done' and 'Dismiss' actions
  + New keyboard bindings and accelerators
  + DBus interface
  + Remove the 'Delete' button from the toolbar
  + Fix a spelling mistake in the manpage
  + Allow quickadd of capitalized date
  + Added tomboy plugin
  + Added export function with templates</changelog>
  <changelog author="vuntz@opensuse.org" date="1263902400">- Cleanup packaging for integration in Factory.</changelog>
  <changelog author="awafaa@opensuse.org" date="1265112000">- Update to version 0.2.1
  + Schedule for context menu
  + Improved export feature
  + Restore closed tasks filtering by selected tag, fixes
    bug lp#498857
  + Temporary fix allowing to reset tag color
  + Added the ability to add a tag from the right click menu in
    the task browser
  + Better explanation of the "Work view" concept in documentation
  + Multiple selection
  + API clarifications
  + Cut &amp; Paste improvements
  + Notification area plugin improvements
  + Icons reflect action availability
  + Misc. editor bug fixes
  + Misc. tag list bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1267444800">- Update to version 0.2.2:
  + Autostart on login
  + Preferences dialog
  + Send task by mail plugin
  + Import_json plugin
  + lp#520427: Improve RTM plugin: don't sync tasks from archived
    lists
  + Automatic cleanup of closed task, plugin
  + Allow to change dismissed date of tasks
  + Docky applet support
  + lp#502111: Allow to change closed date of tasks
  + notification area plugin updated to support appindicate
  + gtg_new task now supports command switches
  + lp#511651: white space around title
  + Expanded CLI to gtg to support task descriptions
  + Added a guide to plugins
  + RTM plugin tags synchronization
  + Evolution plugin
  + Tomboy support
  + Dbus autostart
  + Notification area bug fixes
- BuildRequire dbus-1 for directory ownership.</changelog>
  <changelog author="dimstar@opensuse.org" date="1267617600">- Update to version 0.2.3:
  + Removal of disabled widgets.</changelog>
  <changelog author="vuntz@opensuse.org" date="1275652800">- Fix python-xdg Requires (it was python-pyxdg).</changelog>
  <changelog author="dimstar@opensuse.org" date="1277121600">- Update to version 0.2.4:
  + Several bugfixes and polishing.</changelog>
  <changelog author="vuntz@opensuse.org" date="1297512000">- Call relevant macros in %post/%postun:
  + %desktop_database_post/postun because the package ships at
    least one desktop file.
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1301486400">- Add: gtg-hamster-plugin-not-starting-tracking-tasks.patch: After
  activating the Hamster (Time Tracking) Plugin in GTG, nothing
  happens (bnc#683748).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1317038400">- Fixed typo in gtg.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1322827200">- Update to version 0.2.5:
  + Ability to downgrade data from development, future GTG 0.3 code
- Update license tag to spdx identifier (GPL-3.0+)</changelog>
  <changelog author="dimstar@opensuse.org" date="1329307200">- Update to version 0.2.9:
  + Big refractorization of code, now using liblarch
  + Extended backend system to support multiple backends
  + Backend GUI configuration
  + Backends:
  - Added Mantis Bug Tracker backend
  - Added Tomboy/Gnote backend
  - Added Launchpad backend
  - Added Twitter/Identica backend
  + Graphical crash handler
  + Command line tool based on DBus interface of GTG
  + Added search feature
  + Rewritten notification area plugin with showing only 10 most
    doable tasks from Workview
  + Setting start/due date by a right click menu in the task
    browser
  + Right click behaviour in the task treeview is now consistant
    with other GNOME applications
  + Rework of deleting dialog
  + Previewing task content (gmail-like-ui) [lp#384049]
  + Attaching file to a task by drag-and-dropping it on the task or
    writing file:// URI
  + Added script for anonymizing task files
  + "Sexy" export template
  + DBus API is now CamelCase
  + Fuzzy date "Later" was renamed to "Someday"
  + Daily backup of gtg_tasks.xml
  + Save perferences, window positions and statuses immediately
    after a change
  + Fixed crash traceback when pressing 'delete' key
  + Fixed url autolinking for http(s) schemes
  + Underscore characters in tasks not treated as accelerators
    [lp#676088]
  + Fixed several bugs about hamster integration
  + Added link to web documentation in Help menu
  + Fixed bug with data consistency lp#579189 (empty tags.xml)
  + Added samba bugzilla to the bugzilla plugin
  + Fixed lp#532392, a start date is later than a due date
  + support for gtg:// URIs
  + Fixed lp#584667, indicating missing plugin dependencies
  + Add a new tag dialog keeps the previous value
  + Added keyword bko for recognizing and linking KDE bugs
  + Several usability improvements
  + Several code refratorings
- Drop gtg-hamster-plugin-not-starting-tracking-tasks.patch: GTG
  received a complete rewrite, thus the patch no longer applies.
- Add python-liblarch and python-liblarch_gtk Requires, following
  upstream code changes.
- Remove obsolete openSUSE Version checkes (up to 11.3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1352289600">- Update to version 0.3:
  + Performance: GTG has recovered its youth and can handle your
    many tasks way faster than before!
  + Data backup: GTG keeps several copies of your data, and it's
    now able to restore the most recent backup automatically if
    your data are corrupted.
  + Help: GTG now has many help pages providing useful
    documentation for GTG.
  + UI: we've improved our UI in several ways. The most notable
    will probably be the new tag editor, which provides an easier
    way to customize and edit tag's properties such as colors,
    icon, etc.
  + Stability: many bugs causing crashes were fixed
  + Various other fixes:
  - Updated and improved plugins: notification area icon, urgency
    color, export, ...
  - Improved Quick Add Toolbar, with more features and flags for
    you geeks.
  - Improved command line clients
  - Saner handling of due dates constraints.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1359201600">- Add gtg-Correct-handling-of-liblarch-API-1.0.patch, gtg now
  requires a minimum of version 1,2 of python-liblarch. It not
  really needed, but users will get an informative reason as to why
  gtg does not run.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.3.1:
  + Added command "gtcli overview".
  + Pep8ification of code.
  + System level global shortcut key for quick adding task.
  + Refactor Bugzilla plugin.
  + Switch from external configobj to Python's ConfigParser.
  + Bugs fixed: lp#487582, lp#487585, lp#816356, lp#1024473,
    lp#1029342, lp#1032745, lp#1039651, lp#1043457, lp#1047753,
    lp#1062659, lp#1073607, lp#1076029, lp#1079143, lp#1090301,
    lp#1094307, lp#1095390, lp#1096622, lp#1102453, lp#1141582,
    lp#1193678, lp#1218093, lp#1236066, lp#1242083, lp#1242279,
    lp#1242384.
  + Updated translations.
- Drop gtg-Correct-handling-of-liblarch-API-1.0.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add gtg.appdata.xml: allow GTG to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).</changelog>
  <changelog author="fcrozat@suse.com" date="1431950400">- Update url field in specfile.</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Add gtg-fix-pynotify-crash.patch and python-notify Requires to
  fix a crashing due to the lack of installed python-notify
  (lp#1264846) bnc#1042118)</changelog>
</package>
<package pkgid="e773ccbbadbdf9cee2ff8cba48cecf5ceb2d0ad50f78f29bd78709e658a7f389" name="gtg" arch="src">
  <version epoch="0" ver="0.3.1" rel="11.5.1"/>
  <changelog author="awafaa@opensuse.org" date="1239019200">- Update to version 0.1.1:
  + New features:
  - New icon
  - Quickadd now accepts attributes
  - http:// links now open in the browser
  - Shortcut to show/hide sidebar (F9)
  - Some UI love for the sidebar and the tag icons, shamelessy
    copied from f-spot
  - Hotkeys goodness
  - Edit buttons
  + Bugs fixed:
  - Calendar open at the correct date
  - TaskSerial refactorization
  - Tooltips on buttons
  - First unit tests
  - Error, no crash if the XML file cannot be read
  - Fix lp#339383 (delete subtask when deleting first char)
  - Escape title in the treeview: lp#339874
  - Focus in the editor: lp#339269, lp#339195, lp#339389
  - lp#339269: Quickadd has the focus on launch
  - lp#339583, lp#336314: patches delete key and enter key to
    confirm a delete
  - Typos: lp#339268 lp#339492</changelog>
  <changelog author="awafaa@opensuse.org" date="1247140800">- Update to version 0.1.2:
  + Available in 18 languages, with 12 languages being more than
    99% translated
  + Shadows around the listview widgets
  + Fixes package dependencies
  + Tooltips for button
  + Automatically select title in task editor
  + Crash on startup with non empty LANGUAGE envvar
  + Use GNOME settings for toolbar
  + Better tag markup handling
  + No more multiple instances
  + HTTP link parsing
  + Update README
  + Update XML files sooner
  + Remember color
  + URLs can now include ';' characters. Fixes lp#360969
  + Added support for opening subtasks and links with the keyboard:
    Fixes lp#369272
  + Add polish translation
  + Title for newly created task is now selected to allow easy editing
  + Fixed some bugs in the task editor
  + lp#326388, lp#374745, lp#374745</changelog>
  <changelog author="awafaa@opensuse.org" date="1260792000">- Update to version 0.2.0:
  + Bugs fixes from 0.1.9
- Changes from version 0.1.9:
  + Support non-exact ("fuzzy") due dates: 'now', 'soon', and
    'later'
  + Fixes a bug with gtk stock strings being marked as translatable
    (lp#490231)
  + When a task is deleted, all subtask are deleted as well
  + Groups for tags and subtags
  + GNOME bugzilla plugin
  + Handle tasks spatially (remember position &amp; size)
  + Opened tasks on quit are reopened on start
  + Remove the "File" menu. We have no files, we have tasks!
  + Improve compatibility with non GNU systems
  + Close date selector widget on single click
  + The toolbar can now be hidden
  + Empty new tasks are deleted when editor is closed
  + Lot of bug fixed in the editor while playing with subtasks
  + Works well with the "text besides icon" GNOME option
  + Merge RTM plugin branch
  + i18n: fixed window title in GTG/taskbrowser/browser.py
  + Add XDG_CACHE redefinition in script/debug.sh
  + Remove unsued get_closed_date
  + Added filtering capabilities
  - Filter callbacks were added to the task browser
  - Filters were also added to the requester
  + lp#406851, incorrect behaviour marking a dismissed task as done
  + Added accelerators to the task editor
  + Plugin for integration with the Hamster Time Tracker
  + Add plugin engine
  + When GTG is already running, use DBUS to raise existing
    instance rather than failing silently
  + Refactorization and PEP8ification work
  + New keyboard bindings for 'Mark as done' and 'Dismiss' actions
  + New keyboard bindings and accelerators
  + DBus interface
  + Remove the 'Delete' button from the toolbar
  + Fix a spelling mistake in the manpage
  + Allow quickadd of capitalized date
  + Added tomboy plugin
  + Added export function with templates</changelog>
  <changelog author="vuntz@opensuse.org" date="1263902400">- Cleanup packaging for integration in Factory.</changelog>
  <changelog author="awafaa@opensuse.org" date="1265112000">- Update to version 0.2.1
  + Schedule for context menu
  + Improved export feature
  + Restore closed tasks filtering by selected tag, fixes
    bug lp#498857
  + Temporary fix allowing to reset tag color
  + Added the ability to add a tag from the right click menu in
    the task browser
  + Better explanation of the "Work view" concept in documentation
  + Multiple selection
  + API clarifications
  + Cut &amp; Paste improvements
  + Notification area plugin improvements
  + Icons reflect action availability
  + Misc. editor bug fixes
  + Misc. tag list bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1267444800">- Update to version 0.2.2:
  + Autostart on login
  + Preferences dialog
  + Send task by mail plugin
  + Import_json plugin
  + lp#520427: Improve RTM plugin: don't sync tasks from archived
    lists
  + Automatic cleanup of closed task, plugin
  + Allow to change dismissed date of tasks
  + Docky applet support
  + lp#502111: Allow to change closed date of tasks
  + notification area plugin updated to support appindicate
  + gtg_new task now supports command switches
  + lp#511651: white space around title
  + Expanded CLI to gtg to support task descriptions
  + Added a guide to plugins
  + RTM plugin tags synchronization
  + Evolution plugin
  + Tomboy support
  + Dbus autostart
  + Notification area bug fixes
- BuildRequire dbus-1 for directory ownership.</changelog>
  <changelog author="dimstar@opensuse.org" date="1267617600">- Update to version 0.2.3:
  + Removal of disabled widgets.</changelog>
  <changelog author="vuntz@opensuse.org" date="1275652800">- Fix python-xdg Requires (it was python-pyxdg).</changelog>
  <changelog author="dimstar@opensuse.org" date="1277121600">- Update to version 0.2.4:
  + Several bugfixes and polishing.</changelog>
  <changelog author="vuntz@opensuse.org" date="1297512000">- Call relevant macros in %post/%postun:
  + %desktop_database_post/postun because the package ships at
    least one desktop file.
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1301486400">- Add: gtg-hamster-plugin-not-starting-tracking-tasks.patch: After
  activating the Hamster (Time Tracking) Plugin in GTG, nothing
  happens (bnc#683748).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1317038400">- Fixed typo in gtg.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1322827200">- Update to version 0.2.5:
  + Ability to downgrade data from development, future GTG 0.3 code
- Update license tag to spdx identifier (GPL-3.0+)</changelog>
  <changelog author="dimstar@opensuse.org" date="1329307200">- Update to version 0.2.9:
  + Big refractorization of code, now using liblarch
  + Extended backend system to support multiple backends
  + Backend GUI configuration
  + Backends:
  - Added Mantis Bug Tracker backend
  - Added Tomboy/Gnote backend
  - Added Launchpad backend
  - Added Twitter/Identica backend
  + Graphical crash handler
  + Command line tool based on DBus interface of GTG
  + Added search feature
  + Rewritten notification area plugin with showing only 10 most
    doable tasks from Workview
  + Setting start/due date by a right click menu in the task
    browser
  + Right click behaviour in the task treeview is now consistant
    with other GNOME applications
  + Rework of deleting dialog
  + Previewing task content (gmail-like-ui) [lp#384049]
  + Attaching file to a task by drag-and-dropping it on the task or
    writing file:// URI
  + Added script for anonymizing task files
  + "Sexy" export template
  + DBus API is now CamelCase
  + Fuzzy date "Later" was renamed to "Someday"
  + Daily backup of gtg_tasks.xml
  + Save perferences, window positions and statuses immediately
    after a change
  + Fixed crash traceback when pressing 'delete' key
  + Fixed url autolinking for http(s) schemes
  + Underscore characters in tasks not treated as accelerators
    [lp#676088]
  + Fixed several bugs about hamster integration
  + Added link to web documentation in Help menu
  + Fixed bug with data consistency lp#579189 (empty tags.xml)
  + Added samba bugzilla to the bugzilla plugin
  + Fixed lp#532392, a start date is later than a due date
  + support for gtg:// URIs
  + Fixed lp#584667, indicating missing plugin dependencies
  + Add a new tag dialog keeps the previous value
  + Added keyword bko for recognizing and linking KDE bugs
  + Several usability improvements
  + Several code refratorings
- Drop gtg-hamster-plugin-not-starting-tracking-tasks.patch: GTG
  received a complete rewrite, thus the patch no longer applies.
- Add python-liblarch and python-liblarch_gtk Requires, following
  upstream code changes.
- Remove obsolete openSUSE Version checkes (up to 11.3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1352289600">- Update to version 0.3:
  + Performance: GTG has recovered its youth and can handle your
    many tasks way faster than before!
  + Data backup: GTG keeps several copies of your data, and it's
    now able to restore the most recent backup automatically if
    your data are corrupted.
  + Help: GTG now has many help pages providing useful
    documentation for GTG.
  + UI: we've improved our UI in several ways. The most notable
    will probably be the new tag editor, which provides an easier
    way to customize and edit tag's properties such as colors,
    icon, etc.
  + Stability: many bugs causing crashes were fixed
  + Various other fixes:
  - Updated and improved plugins: notification area icon, urgency
    color, export, ...
  - Improved Quick Add Toolbar, with more features and flags for
    you geeks.
  - Improved command line clients
  - Saner handling of due dates constraints.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1359201600">- Add gtg-Correct-handling-of-liblarch-API-1.0.patch, gtg now
  requires a minimum of version 1,2 of python-liblarch. It not
  really needed, but users will get an informative reason as to why
  gtg does not run.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.3.1:
  + Added command "gtcli overview".
  + Pep8ification of code.
  + System level global shortcut key for quick adding task.
  + Refactor Bugzilla plugin.
  + Switch from external configobj to Python's ConfigParser.
  + Bugs fixed: lp#487582, lp#487585, lp#816356, lp#1024473,
    lp#1029342, lp#1032745, lp#1039651, lp#1043457, lp#1047753,
    lp#1062659, lp#1073607, lp#1076029, lp#1079143, lp#1090301,
    lp#1094307, lp#1095390, lp#1096622, lp#1102453, lp#1141582,
    lp#1193678, lp#1218093, lp#1236066, lp#1242083, lp#1242279,
    lp#1242384.
  + Updated translations.
- Drop gtg-Correct-handling-of-liblarch-API-1.0.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add gtg.appdata.xml: allow GTG to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).</changelog>
  <changelog author="fcrozat@suse.com" date="1431950400">- Update url field in specfile.</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Add gtg-fix-pynotify-crash.patch and python-notify Requires to
  fix a crashing due to the lack of installed python-notify
  (lp#1264846) bnc#1042118)</changelog>
</package>
<package pkgid="fc6d3b5a16f44a8f4cb46ee8eec9546058129328e4410ebce051911906d7975a" name="gtg-lang" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="11.5.1"/>
  <changelog author="awafaa@opensuse.org" date="1239019200">- Update to version 0.1.1:
  + New features:
  - New icon
  - Quickadd now accepts attributes
  - http:// links now open in the browser
  - Shortcut to show/hide sidebar (F9)
  - Some UI love for the sidebar and the tag icons, shamelessy
    copied from f-spot
  - Hotkeys goodness
  - Edit buttons
  + Bugs fixed:
  - Calendar open at the correct date
  - TaskSerial refactorization
  - Tooltips on buttons
  - First unit tests
  - Error, no crash if the XML file cannot be read
  - Fix lp#339383 (delete subtask when deleting first char)
  - Escape title in the treeview: lp#339874
  - Focus in the editor: lp#339269, lp#339195, lp#339389
  - lp#339269: Quickadd has the focus on launch
  - lp#339583, lp#336314: patches delete key and enter key to
    confirm a delete
  - Typos: lp#339268 lp#339492</changelog>
  <changelog author="awafaa@opensuse.org" date="1247140800">- Update to version 0.1.2:
  + Available in 18 languages, with 12 languages being more than
    99% translated
  + Shadows around the listview widgets
  + Fixes package dependencies
  + Tooltips for button
  + Automatically select title in task editor
  + Crash on startup with non empty LANGUAGE envvar
  + Use GNOME settings for toolbar
  + Better tag markup handling
  + No more multiple instances
  + HTTP link parsing
  + Update README
  + Update XML files sooner
  + Remember color
  + URLs can now include ';' characters. Fixes lp#360969
  + Added support for opening subtasks and links with the keyboard:
    Fixes lp#369272
  + Add polish translation
  + Title for newly created task is now selected to allow easy editing
  + Fixed some bugs in the task editor
  + lp#326388, lp#374745, lp#374745</changelog>
  <changelog author="awafaa@opensuse.org" date="1260792000">- Update to version 0.2.0:
  + Bugs fixes from 0.1.9
- Changes from version 0.1.9:
  + Support non-exact ("fuzzy") due dates: 'now', 'soon', and
    'later'
  + Fixes a bug with gtk stock strings being marked as translatable
    (lp#490231)
  + When a task is deleted, all subtask are deleted as well
  + Groups for tags and subtags
  + GNOME bugzilla plugin
  + Handle tasks spatially (remember position &amp; size)
  + Opened tasks on quit are reopened on start
  + Remove the "File" menu. We have no files, we have tasks!
  + Improve compatibility with non GNU systems
  + Close date selector widget on single click
  + The toolbar can now be hidden
  + Empty new tasks are deleted when editor is closed
  + Lot of bug fixed in the editor while playing with subtasks
  + Works well with the "text besides icon" GNOME option
  + Merge RTM plugin branch
  + i18n: fixed window title in GTG/taskbrowser/browser.py
  + Add XDG_CACHE redefinition in script/debug.sh
  + Remove unsued get_closed_date
  + Added filtering capabilities
  - Filter callbacks were added to the task browser
  - Filters were also added to the requester
  + lp#406851, incorrect behaviour marking a dismissed task as done
  + Added accelerators to the task editor
  + Plugin for integration with the Hamster Time Tracker
  + Add plugin engine
  + When GTG is already running, use DBUS to raise existing
    instance rather than failing silently
  + Refactorization and PEP8ification work
  + New keyboard bindings for 'Mark as done' and 'Dismiss' actions
  + New keyboard bindings and accelerators
  + DBus interface
  + Remove the 'Delete' button from the toolbar
  + Fix a spelling mistake in the manpage
  + Allow quickadd of capitalized date
  + Added tomboy plugin
  + Added export function with templates</changelog>
  <changelog author="vuntz@opensuse.org" date="1263902400">- Cleanup packaging for integration in Factory.</changelog>
  <changelog author="awafaa@opensuse.org" date="1265112000">- Update to version 0.2.1
  + Schedule for context menu
  + Improved export feature
  + Restore closed tasks filtering by selected tag, fixes
    bug lp#498857
  + Temporary fix allowing to reset tag color
  + Added the ability to add a tag from the right click menu in
    the task browser
  + Better explanation of the "Work view" concept in documentation
  + Multiple selection
  + API clarifications
  + Cut &amp; Paste improvements
  + Notification area plugin improvements
  + Icons reflect action availability
  + Misc. editor bug fixes
  + Misc. tag list bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1267444800">- Update to version 0.2.2:
  + Autostart on login
  + Preferences dialog
  + Send task by mail plugin
  + Import_json plugin
  + lp#520427: Improve RTM plugin: don't sync tasks from archived
    lists
  + Automatic cleanup of closed task, plugin
  + Allow to change dismissed date of tasks
  + Docky applet support
  + lp#502111: Allow to change closed date of tasks
  + notification area plugin updated to support appindicate
  + gtg_new task now supports command switches
  + lp#511651: white space around title
  + Expanded CLI to gtg to support task descriptions
  + Added a guide to plugins
  + RTM plugin tags synchronization
  + Evolution plugin
  + Tomboy support
  + Dbus autostart
  + Notification area bug fixes
- BuildRequire dbus-1 for directory ownership.</changelog>
  <changelog author="dimstar@opensuse.org" date="1267617600">- Update to version 0.2.3:
  + Removal of disabled widgets.</changelog>
  <changelog author="vuntz@opensuse.org" date="1275652800">- Fix python-xdg Requires (it was python-pyxdg).</changelog>
  <changelog author="dimstar@opensuse.org" date="1277121600">- Update to version 0.2.4:
  + Several bugfixes and polishing.</changelog>
  <changelog author="vuntz@opensuse.org" date="1297512000">- Call relevant macros in %post/%postun:
  + %desktop_database_post/postun because the package ships at
    least one desktop file.
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.
- Change Requires of lang subpackage to Recommends, since the
  english documentation is not there anymore.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1301486400">- Add: gtg-hamster-plugin-not-starting-tracking-tasks.patch: After
  activating the Hamster (Time Tracking) Plugin in GTG, nothing
  happens (bnc#683748).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1317038400">- Fixed typo in gtg.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1322827200">- Update to version 0.2.5:
  + Ability to downgrade data from development, future GTG 0.3 code
- Update license tag to spdx identifier (GPL-3.0+)</changelog>
  <changelog author="dimstar@opensuse.org" date="1329307200">- Update to version 0.2.9:
  + Big refractorization of code, now using liblarch
  + Extended backend system to support multiple backends
  + Backend GUI configuration
  + Backends:
  - Added Mantis Bug Tracker backend
  - Added Tomboy/Gnote backend
  - Added Launchpad backend
  - Added Twitter/Identica backend
  + Graphical crash handler
  + Command line tool based on DBus interface of GTG
  + Added search feature
  + Rewritten notification area plugin with showing only 10 most
    doable tasks from Workview
  + Setting start/due date by a right click menu in the task
    browser
  + Right click behaviour in the task treeview is now consistant
    with other GNOME applications
  + Rework of deleting dialog
  + Previewing task content (gmail-like-ui) [lp#384049]
  + Attaching file to a task by drag-and-dropping it on the task or
    writing file:// URI
  + Added script for anonymizing task files
  + "Sexy" export template
  + DBus API is now CamelCase
  + Fuzzy date "Later" was renamed to "Someday"
  + Daily backup of gtg_tasks.xml
  + Save perferences, window positions and statuses immediately
    after a change
  + Fixed crash traceback when pressing 'delete' key
  + Fixed url autolinking for http(s) schemes
  + Underscore characters in tasks not treated as accelerators
    [lp#676088]
  + Fixed several bugs about hamster integration
  + Added link to web documentation in Help menu
  + Fixed bug with data consistency lp#579189 (empty tags.xml)
  + Added samba bugzilla to the bugzilla plugin
  + Fixed lp#532392, a start date is later than a due date
  + support for gtg:// URIs
  + Fixed lp#584667, indicating missing plugin dependencies
  + Add a new tag dialog keeps the previous value
  + Added keyword bko for recognizing and linking KDE bugs
  + Several usability improvements
  + Several code refratorings
- Drop gtg-hamster-plugin-not-starting-tracking-tasks.patch: GTG
  received a complete rewrite, thus the patch no longer applies.
- Add python-liblarch and python-liblarch_gtk Requires, following
  upstream code changes.
- Remove obsolete openSUSE Version checkes (up to 11.3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1352289600">- Update to version 0.3:
  + Performance: GTG has recovered its youth and can handle your
    many tasks way faster than before!
  + Data backup: GTG keeps several copies of your data, and it's
    now able to restore the most recent backup automatically if
    your data are corrupted.
  + Help: GTG now has many help pages providing useful
    documentation for GTG.
  + UI: we've improved our UI in several ways. The most notable
    will probably be the new tag editor, which provides an easier
    way to customize and edit tag's properties such as colors,
    icon, etc.
  + Stability: many bugs causing crashes were fixed
  + Various other fixes:
  - Updated and improved plugins: notification area icon, urgency
    color, export, ...
  - Improved Quick Add Toolbar, with more features and flags for
    you geeks.
  - Improved command line clients
  - Saner handling of due dates constraints.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1359201600">- Add gtg-Correct-handling-of-liblarch-API-1.0.patch, gtg now
  requires a minimum of version 1,2 of python-liblarch. It not
  really needed, but users will get an informative reason as to why
  gtg does not run.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 0.3.1:
  + Added command "gtcli overview".
  + Pep8ification of code.
  + System level global shortcut key for quick adding task.
  + Refactor Bugzilla plugin.
  + Switch from external configobj to Python's ConfigParser.
  + Bugs fixed: lp#487582, lp#487585, lp#816356, lp#1024473,
    lp#1029342, lp#1032745, lp#1039651, lp#1043457, lp#1047753,
    lp#1062659, lp#1073607, lp#1076029, lp#1079143, lp#1090301,
    lp#1094307, lp#1095390, lp#1096622, lp#1102453, lp#1141582,
    lp#1193678, lp#1218093, lp#1236066, lp#1242083, lp#1242279,
    lp#1242384.
  + Updated translations.
- Drop gtg-Correct-handling-of-liblarch-API-1.0.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413720000">- Add gtg.appdata.xml: allow GTG to show up as an application in
  gnome-software (installation will abort when upstream ships the
  file).</changelog>
  <changelog author="fcrozat@suse.com" date="1431950400">- Update url field in specfile.</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Add gtg-fix-pynotify-crash.patch and python-notify Requires to
  fix a crashing due to the lack of installed python-notify
  (lp#1264846) bnc#1042118)</changelog>
</package>
<package pkgid="7bf04c6fd397771ec065bb0e0e40ecbb6810e73b8ab6001f93252f238a4f993e" name="gthumb" arch="src">
  <version epoch="0" ver="3.4.2" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1360411200">- Update to version 3.1.3:
  + New features and user visible changes:
  - Fixed uploading to Facebook and all other web services.
  - Added ability to import photos from Facebook.
  - Save and restore the thumbnail list size.
  - Selections: Pressing control-n (with n in 1,2,3) again goes
    back to the previous view.
  - Monitor all the expanded locations in the folder tree.
  - Show a progress dialog for long saving operations.
  - Added keybindings to delete files in catalog view:
    control+delete moves to trash; shift+delete deletes from
    disk.
  - Allow to delete the tags from the default tag list.
  + Bugs fixed:
  - Web album export produces invalid HTML. (bgo#691123).
  - Fixed thumbnail generation for rotated images.
  - Fixed the thumbnail style in gtk 3.6.
  - Video viewer: fixed progress bar for gtk 3.6.
  - webp: fixed build for Big-Endian systems. (#bgo#691309).
  + Internal code changes:
  - Ported to GStreamer 1.0.
  - Ported to libsecret.
  + Updated translations.
- Add itstool, pkgconfig(gstreamer-1.0),
  pkgconfig(gstreamer-plugins-base-1.0) and pkgconfig(libsecret-1)
  BuildRequires, new dependencys due to upstream port to GST-1.0 and
  libsecret.
- Drop pkgconfig(gstreamer-0.10),
  pkgconfig(gstreamer-interfaces-0.10) and
  pkgconfig(gnome-keyring-1) BuildRequires, following above port.
- Drop gthumb-bigendian-typo.patch, fixed upstream.
- Drop obsolete --disable-scrollkeeper configure option.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363435200">- Update to version 3.1.4:
  + Fixed creation of blur thumbnails for jpeg images
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364472000">- Update to version 3.2.0:
  + Added ability load xcf images.
  + Always use a dark background in the image viewer.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.2.1:
  + Facebook: fixed authentication.
  + Slideshow: fixed audio playback.
  + Filter-bar: fixed the spin button width for the file size
    control.
  + Bookmarks: fixed ability to modify the bookmarks.
  + Image viewer: allow to use button 2 to drag the image.
  + Fixed unrecognized configure option --disable-libjson-glib
    (bgo#696783).</changelog>
  <changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 3.2.2:
  + Resize, Convert: correctly set the destination folder.
  + Fixed the file list style with Gtk+ 3.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1373457600">- Update to version 3.2.3:
  + Flickr: allow to use a facebook or google account (bgo#703534).
  + Thumbnail list: images drawn with wrong offset (bgo#702538).
  + Fixed the video player stopping after saving a screenshot.
  + Fixed saving of TGA images.
  + Fixed the size of the toolbar in fullscreen mode.
  + Show the cursor again after stopping the slideshow.
  + Web services: do not delete the previous account when creating
    a new one.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1379851200">- Add pkgconfig(webkit2gtk-3.0) BuildRequires in order to build web
  services support.</changelog>
  <changelog author="firebird209@gmail.com" date="1382011200">- Update to version 3.2.4:
  + Fixed error when rotating jpeg images (bgo#709698).
  + Fixed broken window layout with gtk+ 3.10 (bgo#708800,
    bnc#846626).
  + Fixed crash when opening the preferences dialog.
  + Find duplicates: fixed crash when using a predefined directory
    (bgo#706697).
  + Fixed crash when attempting to play a video under special
    circumstances (bgo#706343).
  + Fixed crash when copying or moving files (bgo#705877).
  + Updated translations.
- Add pkgconfig(gstreamer-video-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1382356800">- Add gthumb-launch-help.patch: Fix help not being found
  (bnc#846900).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 3.2.5:
  + Media viewer: fixed progress bar behaviour in gtk+ 3.10.
  + Empty file format options dialog after canceling it once
    (bgo#711788).
  + Fixed endless image reloading for some images.
  + Fixed display of the manual.
  + Default parameters for image resizing are misleading
    (bgo#710479).
- Drop gthumb-launch-help.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 3.3.1:
  + New features and user visible changes:
  - Use a GtkHeaderBar instead of a menu and a toolbar.
  - Use the dark theme.
  - Better raw image support, using libraw instead of libopenraw.
  - Image viewer: show a frame around the image; use an overview
    window to scroll the image instead of the scrollbars; better
    quality for zoomed out images.
  - Faster image loader for big images.
  - Media player: hide the mediabar after a timeout.
  - Filterbar: added buttons to view the selections.
  - File properties: show only the basic properties, allow to
    show all of them.
  - Image tools: use a grid layout for the buttons.
  - Use a separate dialog for the file tool options.
  - Use symbolic icons everywhere.
  - Added a custom tiff loader.
  - Add a rating-based filter.
  - App menu: removed 'keyboard shortcuts'.
  - Histogram view: save and restore the scale type.
  + Bugs fixed:
  - Help: fix calling help from withing the application
    (bgo#710573).
  - Fixed saving of TGA files.
  - Fixed the video player stopping after saving a screenshot.
  - Rotating image destroys XMP and IPTC metadata (bgo#719622).
  - Command line ignored for the second window (bgo#712716).
  - Empty Options dialog after Canceling it once (bgo#711788).
  - Buttons with label toolbutton1 and toolbutton2 in Bookmark
    window (bgo#711777).
  - Default parameters for image resizing are misleading
    (bgo#710479).
  - Fixed broken window layout with gtk+ 3.10 (bgo#708800).
  - Find duplicates: fixed crash when using a predefined
    directory (bgo#706697).
  - gThumb crashes when attempting to play a video (bgo#706343).
  - Flickr: allow to use a facebook or google account
    (bgo#703534).
  - Thumbnail list: images drawn with wrong offset (bgo#702538).
  - Facebook: fixed authentication.
  - configure: fixed unrecognized option --disable-libjson-glib
    (bgo#696783).
  - Removed the use of many deprecated functions.
  + Updated manual translations.
  + Updated translations.
- Exchange pkgconfig(libopenraw-1.0) for pkgconfig(libraw)
  BuildRequires, and pass --enable-libraw instead of
  - -enable-libopenraw to configure, following upstream change.
- Drop obsolete conditionals from post/postun.</changelog>
  <changelog author="zaitor@opensuse.org" date="1407585600">- Update to version 3.3.2:
  + Bugs fixed:
  - Allow the user to edit tags using the contextual menu also
    (bgo#728467).
  - Special directories: added DOWNLOAD, removed DESKTOP
    (bgo#728445, bgo#728446).
  - Web album: fixed thumbnail size (bgo#727775).
  - Desktop background: use the stretched option in some cases
    (bgo#726708).
  - Make copy and paste in same folder equivalent to duplicating
    (bgo#722726).
  - Can view tiff files, but can not print (bgo#726260).
  - image viewer: use a smaller frame border (bgo#726091).
  - Extra image appears in image viewer (bgo#722631).
  - Added AppData file for GNOME Software Center (bgo#722770).
  - Ctrl+P doesn't work (bgo#722707).
  - Script editor: help buttons don't work (bgo#722925).
  - Toolbox: Fix the undo and the redo symbols in RTL
    (bgo#723542).
  - Sharpen: Fix the undo symbols in RTL (bgo#723542).
  - Rotate image: Fix the undo symbols in RTL (bgo#723542).
  - Adjust colors: Fix the undo symbols in RTL (bgo#723542).
  - Updated obsolete info in license text (bgo#721455).
  - gThumb doesn't honour privacy settings (bgo#722349).
  - Remove unnecessary gdkx.h include from gth-screensaver
    (bgo#597594).
  - Use unity-control-center if in Unity (bgo#722233).
  - Fix build failing without libtiff installed (bgo#722183).
  - Cannot Save As with uppercase .JPG (bgo#721281).
  + Updated translations.
- Add gthumb-new-icon-for-gear-menu.patch, use the new icon with
  GNOME 3.13 and newer.
- Add gthumb-fix-forbidden-flicker-upload.patch, fix forbidden when
  trying to upload to flicker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Add gthumb-webkit2gtk.patch: Support building against
  webkit2gtk-3.0 and webkit2gtk-4.0.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for 13.2
  and newer.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1458129600">- Update to version 3.4.2 (boo#967731):
  + Sort catalogs first by name then by date, instead of doing
    the opposite.
  + Bugs fixed: bgo#760050, bgo#759787, bgo#759727, bgo#759631,
    bgo#750142.
  + Updated translations.</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="7bf17d0eb98f7205fd4a09a5ab7fe90bbaebd1f360b0e0be8219cb8d91c3f797" name="gthumb" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1360411200">- Update to version 3.1.3:
  + New features and user visible changes:
  - Fixed uploading to Facebook and all other web services.
  - Added ability to import photos from Facebook.
  - Save and restore the thumbnail list size.
  - Selections: Pressing control-n (with n in 1,2,3) again goes
    back to the previous view.
  - Monitor all the expanded locations in the folder tree.
  - Show a progress dialog for long saving operations.
  - Added keybindings to delete files in catalog view:
    control+delete moves to trash; shift+delete deletes from
    disk.
  - Allow to delete the tags from the default tag list.
  + Bugs fixed:
  - Web album export produces invalid HTML. (bgo#691123).
  - Fixed thumbnail generation for rotated images.
  - Fixed the thumbnail style in gtk 3.6.
  - Video viewer: fixed progress bar for gtk 3.6.
  - webp: fixed build for Big-Endian systems. (#bgo#691309).
  + Internal code changes:
  - Ported to GStreamer 1.0.
  - Ported to libsecret.
  + Updated translations.
- Add itstool, pkgconfig(gstreamer-1.0),
  pkgconfig(gstreamer-plugins-base-1.0) and pkgconfig(libsecret-1)
  BuildRequires, new dependencys due to upstream port to GST-1.0 and
  libsecret.
- Drop pkgconfig(gstreamer-0.10),
  pkgconfig(gstreamer-interfaces-0.10) and
  pkgconfig(gnome-keyring-1) BuildRequires, following above port.
- Drop gthumb-bigendian-typo.patch, fixed upstream.
- Drop obsolete --disable-scrollkeeper configure option.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363435200">- Update to version 3.1.4:
  + Fixed creation of blur thumbnails for jpeg images
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364472000">- Update to version 3.2.0:
  + Added ability load xcf images.
  + Always use a dark background in the image viewer.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.2.1:
  + Facebook: fixed authentication.
  + Slideshow: fixed audio playback.
  + Filter-bar: fixed the spin button width for the file size
    control.
  + Bookmarks: fixed ability to modify the bookmarks.
  + Image viewer: allow to use button 2 to drag the image.
  + Fixed unrecognized configure option --disable-libjson-glib
    (bgo#696783).</changelog>
  <changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 3.2.2:
  + Resize, Convert: correctly set the destination folder.
  + Fixed the file list style with Gtk+ 3.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1373457600">- Update to version 3.2.3:
  + Flickr: allow to use a facebook or google account (bgo#703534).
  + Thumbnail list: images drawn with wrong offset (bgo#702538).
  + Fixed the video player stopping after saving a screenshot.
  + Fixed saving of TGA images.
  + Fixed the size of the toolbar in fullscreen mode.
  + Show the cursor again after stopping the slideshow.
  + Web services: do not delete the previous account when creating
    a new one.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1379851200">- Add pkgconfig(webkit2gtk-3.0) BuildRequires in order to build web
  services support.</changelog>
  <changelog author="firebird209@gmail.com" date="1382011200">- Update to version 3.2.4:
  + Fixed error when rotating jpeg images (bgo#709698).
  + Fixed broken window layout with gtk+ 3.10 (bgo#708800,
    bnc#846626).
  + Fixed crash when opening the preferences dialog.
  + Find duplicates: fixed crash when using a predefined directory
    (bgo#706697).
  + Fixed crash when attempting to play a video under special
    circumstances (bgo#706343).
  + Fixed crash when copying or moving files (bgo#705877).
  + Updated translations.
- Add pkgconfig(gstreamer-video-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1382356800">- Add gthumb-launch-help.patch: Fix help not being found
  (bnc#846900).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 3.2.5:
  + Media viewer: fixed progress bar behaviour in gtk+ 3.10.
  + Empty file format options dialog after canceling it once
    (bgo#711788).
  + Fixed endless image reloading for some images.
  + Fixed display of the manual.
  + Default parameters for image resizing are misleading
    (bgo#710479).
- Drop gthumb-launch-help.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 3.3.1:
  + New features and user visible changes:
  - Use a GtkHeaderBar instead of a menu and a toolbar.
  - Use the dark theme.
  - Better raw image support, using libraw instead of libopenraw.
  - Image viewer: show a frame around the image; use an overview
    window to scroll the image instead of the scrollbars; better
    quality for zoomed out images.
  - Faster image loader for big images.
  - Media player: hide the mediabar after a timeout.
  - Filterbar: added buttons to view the selections.
  - File properties: show only the basic properties, allow to
    show all of them.
  - Image tools: use a grid layout for the buttons.
  - Use a separate dialog for the file tool options.
  - Use symbolic icons everywhere.
  - Added a custom tiff loader.
  - Add a rating-based filter.
  - App menu: removed 'keyboard shortcuts'.
  - Histogram view: save and restore the scale type.
  + Bugs fixed:
  - Help: fix calling help from withing the application
    (bgo#710573).
  - Fixed saving of TGA files.
  - Fixed the video player stopping after saving a screenshot.
  - Rotating image destroys XMP and IPTC metadata (bgo#719622).
  - Command line ignored for the second window (bgo#712716).
  - Empty Options dialog after Canceling it once (bgo#711788).
  - Buttons with label toolbutton1 and toolbutton2 in Bookmark
    window (bgo#711777).
  - Default parameters for image resizing are misleading
    (bgo#710479).
  - Fixed broken window layout with gtk+ 3.10 (bgo#708800).
  - Find duplicates: fixed crash when using a predefined
    directory (bgo#706697).
  - gThumb crashes when attempting to play a video (bgo#706343).
  - Flickr: allow to use a facebook or google account
    (bgo#703534).
  - Thumbnail list: images drawn with wrong offset (bgo#702538).
  - Facebook: fixed authentication.
  - configure: fixed unrecognized option --disable-libjson-glib
    (bgo#696783).
  - Removed the use of many deprecated functions.
  + Updated manual translations.
  + Updated translations.
- Exchange pkgconfig(libopenraw-1.0) for pkgconfig(libraw)
  BuildRequires, and pass --enable-libraw instead of
  - -enable-libopenraw to configure, following upstream change.
- Drop obsolete conditionals from post/postun.</changelog>
  <changelog author="zaitor@opensuse.org" date="1407585600">- Update to version 3.3.2:
  + Bugs fixed:
  - Allow the user to edit tags using the contextual menu also
    (bgo#728467).
  - Special directories: added DOWNLOAD, removed DESKTOP
    (bgo#728445, bgo#728446).
  - Web album: fixed thumbnail size (bgo#727775).
  - Desktop background: use the stretched option in some cases
    (bgo#726708).
  - Make copy and paste in same folder equivalent to duplicating
    (bgo#722726).
  - Can view tiff files, but can not print (bgo#726260).
  - image viewer: use a smaller frame border (bgo#726091).
  - Extra image appears in image viewer (bgo#722631).
  - Added AppData file for GNOME Software Center (bgo#722770).
  - Ctrl+P doesn't work (bgo#722707).
  - Script editor: help buttons don't work (bgo#722925).
  - Toolbox: Fix the undo and the redo symbols in RTL
    (bgo#723542).
  - Sharpen: Fix the undo symbols in RTL (bgo#723542).
  - Rotate image: Fix the undo symbols in RTL (bgo#723542).
  - Adjust colors: Fix the undo symbols in RTL (bgo#723542).
  - Updated obsolete info in license text (bgo#721455).
  - gThumb doesn't honour privacy settings (bgo#722349).
  - Remove unnecessary gdkx.h include from gth-screensaver
    (bgo#597594).
  - Use unity-control-center if in Unity (bgo#722233).
  - Fix build failing without libtiff installed (bgo#722183).
  - Cannot Save As with uppercase .JPG (bgo#721281).
  + Updated translations.
- Add gthumb-new-icon-for-gear-menu.patch, use the new icon with
  GNOME 3.13 and newer.
- Add gthumb-fix-forbidden-flicker-upload.patch, fix forbidden when
  trying to upload to flicker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Add gthumb-webkit2gtk.patch: Support building against
  webkit2gtk-3.0 and webkit2gtk-4.0.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for 13.2
  and newer.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1458129600">- Update to version 3.4.2 (boo#967731):
  + Sort catalogs first by name then by date, instead of doing
    the opposite.
  + Bugs fixed: bgo#760050, bgo#759787, bgo#759727, bgo#759631,
    bgo#750142.
  + Updated translations.</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="38c15a9ee1b4a4b346f4593773adfe0215ae05ab06b14a2eaa5d37913d21b2e9" name="gthumb-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1360411200">- Update to version 3.1.3:
  + New features and user visible changes:
  - Fixed uploading to Facebook and all other web services.
  - Added ability to import photos from Facebook.
  - Save and restore the thumbnail list size.
  - Selections: Pressing control-n (with n in 1,2,3) again goes
    back to the previous view.
  - Monitor all the expanded locations in the folder tree.
  - Show a progress dialog for long saving operations.
  - Added keybindings to delete files in catalog view:
    control+delete moves to trash; shift+delete deletes from
    disk.
  - Allow to delete the tags from the default tag list.
  + Bugs fixed:
  - Web album export produces invalid HTML. (bgo#691123).
  - Fixed thumbnail generation for rotated images.
  - Fixed the thumbnail style in gtk 3.6.
  - Video viewer: fixed progress bar for gtk 3.6.
  - webp: fixed build for Big-Endian systems. (#bgo#691309).
  + Internal code changes:
  - Ported to GStreamer 1.0.
  - Ported to libsecret.
  + Updated translations.
- Add itstool, pkgconfig(gstreamer-1.0),
  pkgconfig(gstreamer-plugins-base-1.0) and pkgconfig(libsecret-1)
  BuildRequires, new dependencys due to upstream port to GST-1.0 and
  libsecret.
- Drop pkgconfig(gstreamer-0.10),
  pkgconfig(gstreamer-interfaces-0.10) and
  pkgconfig(gnome-keyring-1) BuildRequires, following above port.
- Drop gthumb-bigendian-typo.patch, fixed upstream.
- Drop obsolete --disable-scrollkeeper configure option.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363435200">- Update to version 3.1.4:
  + Fixed creation of blur thumbnails for jpeg images
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364472000">- Update to version 3.2.0:
  + Added ability load xcf images.
  + Always use a dark background in the image viewer.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.2.1:
  + Facebook: fixed authentication.
  + Slideshow: fixed audio playback.
  + Filter-bar: fixed the spin button width for the file size
    control.
  + Bookmarks: fixed ability to modify the bookmarks.
  + Image viewer: allow to use button 2 to drag the image.
  + Fixed unrecognized configure option --disable-libjson-glib
    (bgo#696783).</changelog>
  <changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 3.2.2:
  + Resize, Convert: correctly set the destination folder.
  + Fixed the file list style with Gtk+ 3.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1373457600">- Update to version 3.2.3:
  + Flickr: allow to use a facebook or google account (bgo#703534).
  + Thumbnail list: images drawn with wrong offset (bgo#702538).
  + Fixed the video player stopping after saving a screenshot.
  + Fixed saving of TGA images.
  + Fixed the size of the toolbar in fullscreen mode.
  + Show the cursor again after stopping the slideshow.
  + Web services: do not delete the previous account when creating
    a new one.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1379851200">- Add pkgconfig(webkit2gtk-3.0) BuildRequires in order to build web
  services support.</changelog>
  <changelog author="firebird209@gmail.com" date="1382011200">- Update to version 3.2.4:
  + Fixed error when rotating jpeg images (bgo#709698).
  + Fixed broken window layout with gtk+ 3.10 (bgo#708800,
    bnc#846626).
  + Fixed crash when opening the preferences dialog.
  + Find duplicates: fixed crash when using a predefined directory
    (bgo#706697).
  + Fixed crash when attempting to play a video under special
    circumstances (bgo#706343).
  + Fixed crash when copying or moving files (bgo#705877).
  + Updated translations.
- Add pkgconfig(gstreamer-video-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1382356800">- Add gthumb-launch-help.patch: Fix help not being found
  (bnc#846900).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 3.2.5:
  + Media viewer: fixed progress bar behaviour in gtk+ 3.10.
  + Empty file format options dialog after canceling it once
    (bgo#711788).
  + Fixed endless image reloading for some images.
  + Fixed display of the manual.
  + Default parameters for image resizing are misleading
    (bgo#710479).
- Drop gthumb-launch-help.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 3.3.1:
  + New features and user visible changes:
  - Use a GtkHeaderBar instead of a menu and a toolbar.
  - Use the dark theme.
  - Better raw image support, using libraw instead of libopenraw.
  - Image viewer: show a frame around the image; use an overview
    window to scroll the image instead of the scrollbars; better
    quality for zoomed out images.
  - Faster image loader for big images.
  - Media player: hide the mediabar after a timeout.
  - Filterbar: added buttons to view the selections.
  - File properties: show only the basic properties, allow to
    show all of them.
  - Image tools: use a grid layout for the buttons.
  - Use a separate dialog for the file tool options.
  - Use symbolic icons everywhere.
  - Added a custom tiff loader.
  - Add a rating-based filter.
  - App menu: removed 'keyboard shortcuts'.
  - Histogram view: save and restore the scale type.
  + Bugs fixed:
  - Help: fix calling help from withing the application
    (bgo#710573).
  - Fixed saving of TGA files.
  - Fixed the video player stopping after saving a screenshot.
  - Rotating image destroys XMP and IPTC metadata (bgo#719622).
  - Command line ignored for the second window (bgo#712716).
  - Empty Options dialog after Canceling it once (bgo#711788).
  - Buttons with label toolbutton1 and toolbutton2 in Bookmark
    window (bgo#711777).
  - Default parameters for image resizing are misleading
    (bgo#710479).
  - Fixed broken window layout with gtk+ 3.10 (bgo#708800).
  - Find duplicates: fixed crash when using a predefined
    directory (bgo#706697).
  - gThumb crashes when attempting to play a video (bgo#706343).
  - Flickr: allow to use a facebook or google account
    (bgo#703534).
  - Thumbnail list: images drawn with wrong offset (bgo#702538).
  - Facebook: fixed authentication.
  - configure: fixed unrecognized option --disable-libjson-glib
    (bgo#696783).
  - Removed the use of many deprecated functions.
  + Updated manual translations.
  + Updated translations.
- Exchange pkgconfig(libopenraw-1.0) for pkgconfig(libraw)
  BuildRequires, and pass --enable-libraw instead of
  - -enable-libopenraw to configure, following upstream change.
- Drop obsolete conditionals from post/postun.</changelog>
  <changelog author="zaitor@opensuse.org" date="1407585600">- Update to version 3.3.2:
  + Bugs fixed:
  - Allow the user to edit tags using the contextual menu also
    (bgo#728467).
  - Special directories: added DOWNLOAD, removed DESKTOP
    (bgo#728445, bgo#728446).
  - Web album: fixed thumbnail size (bgo#727775).
  - Desktop background: use the stretched option in some cases
    (bgo#726708).
  - Make copy and paste in same folder equivalent to duplicating
    (bgo#722726).
  - Can view tiff files, but can not print (bgo#726260).
  - image viewer: use a smaller frame border (bgo#726091).
  - Extra image appears in image viewer (bgo#722631).
  - Added AppData file for GNOME Software Center (bgo#722770).
  - Ctrl+P doesn't work (bgo#722707).
  - Script editor: help buttons don't work (bgo#722925).
  - Toolbox: Fix the undo and the redo symbols in RTL
    (bgo#723542).
  - Sharpen: Fix the undo symbols in RTL (bgo#723542).
  - Rotate image: Fix the undo symbols in RTL (bgo#723542).
  - Adjust colors: Fix the undo symbols in RTL (bgo#723542).
  - Updated obsolete info in license text (bgo#721455).
  - gThumb doesn't honour privacy settings (bgo#722349).
  - Remove unnecessary gdkx.h include from gth-screensaver
    (bgo#597594).
  - Use unity-control-center if in Unity (bgo#722233).
  - Fix build failing without libtiff installed (bgo#722183).
  - Cannot Save As with uppercase .JPG (bgo#721281).
  + Updated translations.
- Add gthumb-new-icon-for-gear-menu.patch, use the new icon with
  GNOME 3.13 and newer.
- Add gthumb-fix-forbidden-flicker-upload.patch, fix forbidden when
  trying to upload to flicker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Add gthumb-webkit2gtk.patch: Support building against
  webkit2gtk-3.0 and webkit2gtk-4.0.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for 13.2
  and newer.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1458129600">- Update to version 3.4.2 (boo#967731):
  + Sort catalogs first by name then by date, instead of doing
    the opposite.
  + Bugs fixed: bgo#760050, bgo#759787, bgo#759727, bgo#759631,
    bgo#750142.
  + Updated translations.</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="190383b39aafaf9d58156084320be4c593e1aae4c3c46e626c74dcb2b73f133f" name="gthumb-lang" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1360411200">- Update to version 3.1.3:
  + New features and user visible changes:
  - Fixed uploading to Facebook and all other web services.
  - Added ability to import photos from Facebook.
  - Save and restore the thumbnail list size.
  - Selections: Pressing control-n (with n in 1,2,3) again goes
    back to the previous view.
  - Monitor all the expanded locations in the folder tree.
  - Show a progress dialog for long saving operations.
  - Added keybindings to delete files in catalog view:
    control+delete moves to trash; shift+delete deletes from
    disk.
  - Allow to delete the tags from the default tag list.
  + Bugs fixed:
  - Web album export produces invalid HTML. (bgo#691123).
  - Fixed thumbnail generation for rotated images.
  - Fixed the thumbnail style in gtk 3.6.
  - Video viewer: fixed progress bar for gtk 3.6.
  - webp: fixed build for Big-Endian systems. (#bgo#691309).
  + Internal code changes:
  - Ported to GStreamer 1.0.
  - Ported to libsecret.
  + Updated translations.
- Add itstool, pkgconfig(gstreamer-1.0),
  pkgconfig(gstreamer-plugins-base-1.0) and pkgconfig(libsecret-1)
  BuildRequires, new dependencys due to upstream port to GST-1.0 and
  libsecret.
- Drop pkgconfig(gstreamer-0.10),
  pkgconfig(gstreamer-interfaces-0.10) and
  pkgconfig(gnome-keyring-1) BuildRequires, following above port.
- Drop gthumb-bigendian-typo.patch, fixed upstream.
- Drop obsolete --disable-scrollkeeper configure option.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363435200">- Update to version 3.1.4:
  + Fixed creation of blur thumbnails for jpeg images
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364472000">- Update to version 3.2.0:
  + Added ability load xcf images.
  + Always use a dark background in the image viewer.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.2.1:
  + Facebook: fixed authentication.
  + Slideshow: fixed audio playback.
  + Filter-bar: fixed the spin button width for the file size
    control.
  + Bookmarks: fixed ability to modify the bookmarks.
  + Image viewer: allow to use button 2 to drag the image.
  + Fixed unrecognized configure option --disable-libjson-glib
    (bgo#696783).</changelog>
  <changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 3.2.2:
  + Resize, Convert: correctly set the destination folder.
  + Fixed the file list style with Gtk+ 3.8.</changelog>
  <changelog author="zaitor@opensuse.org" date="1373457600">- Update to version 3.2.3:
  + Flickr: allow to use a facebook or google account (bgo#703534).
  + Thumbnail list: images drawn with wrong offset (bgo#702538).
  + Fixed the video player stopping after saving a screenshot.
  + Fixed saving of TGA images.
  + Fixed the size of the toolbar in fullscreen mode.
  + Show the cursor again after stopping the slideshow.
  + Web services: do not delete the previous account when creating
    a new one.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1379851200">- Add pkgconfig(webkit2gtk-3.0) BuildRequires in order to build web
  services support.</changelog>
  <changelog author="firebird209@gmail.com" date="1382011200">- Update to version 3.2.4:
  + Fixed error when rotating jpeg images (bgo#709698).
  + Fixed broken window layout with gtk+ 3.10 (bgo#708800,
    bnc#846626).
  + Fixed crash when opening the preferences dialog.
  + Find duplicates: fixed crash when using a predefined directory
    (bgo#706697).
  + Fixed crash when attempting to play a video under special
    circumstances (bgo#706343).
  + Fixed crash when copying or moving files (bgo#705877).
  + Updated translations.
- Add pkgconfig(gstreamer-video-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1382356800">- Add gthumb-launch-help.patch: Fix help not being found
  (bnc#846900).</changelog>
  <changelog author="dimstar@opensuse.org" date="1385467200">- Update to version 3.2.5:
  + Media viewer: fixed progress bar behaviour in gtk+ 3.10.
  + Empty file format options dialog after canceling it once
    (bgo#711788).
  + Fixed endless image reloading for some images.
  + Fixed display of the manual.
  + Default parameters for image resizing are misleading
    (bgo#710479).
- Drop gthumb-launch-help.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 3.3.1:
  + New features and user visible changes:
  - Use a GtkHeaderBar instead of a menu and a toolbar.
  - Use the dark theme.
  - Better raw image support, using libraw instead of libopenraw.
  - Image viewer: show a frame around the image; use an overview
    window to scroll the image instead of the scrollbars; better
    quality for zoomed out images.
  - Faster image loader for big images.
  - Media player: hide the mediabar after a timeout.
  - Filterbar: added buttons to view the selections.
  - File properties: show only the basic properties, allow to
    show all of them.
  - Image tools: use a grid layout for the buttons.
  - Use a separate dialog for the file tool options.
  - Use symbolic icons everywhere.
  - Added a custom tiff loader.
  - Add a rating-based filter.
  - App menu: removed 'keyboard shortcuts'.
  - Histogram view: save and restore the scale type.
  + Bugs fixed:
  - Help: fix calling help from withing the application
    (bgo#710573).
  - Fixed saving of TGA files.
  - Fixed the video player stopping after saving a screenshot.
  - Rotating image destroys XMP and IPTC metadata (bgo#719622).
  - Command line ignored for the second window (bgo#712716).
  - Empty Options dialog after Canceling it once (bgo#711788).
  - Buttons with label toolbutton1 and toolbutton2 in Bookmark
    window (bgo#711777).
  - Default parameters for image resizing are misleading
    (bgo#710479).
  - Fixed broken window layout with gtk+ 3.10 (bgo#708800).
  - Find duplicates: fixed crash when using a predefined
    directory (bgo#706697).
  - gThumb crashes when attempting to play a video (bgo#706343).
  - Flickr: allow to use a facebook or google account
    (bgo#703534).
  - Thumbnail list: images drawn with wrong offset (bgo#702538).
  - Facebook: fixed authentication.
  - configure: fixed unrecognized option --disable-libjson-glib
    (bgo#696783).
  - Removed the use of many deprecated functions.
  + Updated manual translations.
  + Updated translations.
- Exchange pkgconfig(libopenraw-1.0) for pkgconfig(libraw)
  BuildRequires, and pass --enable-libraw instead of
  - -enable-libopenraw to configure, following upstream change.
- Drop obsolete conditionals from post/postun.</changelog>
  <changelog author="zaitor@opensuse.org" date="1407585600">- Update to version 3.3.2:
  + Bugs fixed:
  - Allow the user to edit tags using the contextual menu also
    (bgo#728467).
  - Special directories: added DOWNLOAD, removed DESKTOP
    (bgo#728445, bgo#728446).
  - Web album: fixed thumbnail size (bgo#727775).
  - Desktop background: use the stretched option in some cases
    (bgo#726708).
  - Make copy and paste in same folder equivalent to duplicating
    (bgo#722726).
  - Can view tiff files, but can not print (bgo#726260).
  - image viewer: use a smaller frame border (bgo#726091).
  - Extra image appears in image viewer (bgo#722631).
  - Added AppData file for GNOME Software Center (bgo#722770).
  - Ctrl+P doesn't work (bgo#722707).
  - Script editor: help buttons don't work (bgo#722925).
  - Toolbox: Fix the undo and the redo symbols in RTL
    (bgo#723542).
  - Sharpen: Fix the undo symbols in RTL (bgo#723542).
  - Rotate image: Fix the undo symbols in RTL (bgo#723542).
  - Adjust colors: Fix the undo symbols in RTL (bgo#723542).
  - Updated obsolete info in license text (bgo#721455).
  - gThumb doesn't honour privacy settings (bgo#722349).
  - Remove unnecessary gdkx.h include from gth-screensaver
    (bgo#597594).
  - Use unity-control-center if in Unity (bgo#722233).
  - Fix build failing without libtiff installed (bgo#722183).
  - Cannot Save As with uppercase .JPG (bgo#721281).
  + Updated translations.
- Add gthumb-new-icon-for-gear-menu.patch, use the new icon with
  GNOME 3.13 and newer.
- Add gthumb-fix-forbidden-flicker-upload.patch, fix forbidden when
  trying to upload to flicker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Add gthumb-webkit2gtk.patch: Support building against
  webkit2gtk-3.0 and webkit2gtk-4.0.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for 13.2
  and newer.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1458129600">- Update to version 3.4.2 (boo#967731):
  + Sort catalogs first by name then by date, instead of doing
    the opposite.
  + Bugs fixed: bgo#760050, bgo#759787, bgo#759727, bgo#759631,
    bgo#750142.
  + Updated translations.</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="37d50c3e7a6d1852f67190853f5c8e73f3103b0ae9e87005ea83ac9fac9c8144" name="gtk2" arch="src">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="b8494a15ac5680a794dfa18de402dc9de0895a8e9df82889b2b6a7356bf7931c" name="gtk2-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="8091963aad1ae48f03537b8f49c795c8e87dedc284dc2985a6b33e76a3c9a646" name="gtk2-data" arch="noarch">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="ffa853957ae21c632a2885d40e0a421e613d1fd779af4ab357f3d811aa7246dc" name="gtk2-devel" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="d449563326016caefab8812c3d2f733bbcc0dce348c27e3df48ef333312d9d44" name="gtk2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="e149bb3a10e66f284e946ba34d58f83e8e46b61cb69cf22aecda1dc6d8021e06" name="gtk2-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="c0e765614da90baa702aeb0518cb3dd635ff7f883cfb893dd57abea438a21cd0" name="gtk2-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="ecb3c424da7aa4d73b8e0793dbef586d326fc45e73430d338cdd3e6b1d3cdf05" name="gtk2-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="e632c1aa1b7f0a0e6e15807dbc56db61800bc17181e386d698d2e2a3f2557057" name="gtk2-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="0954418ce101eab33729c488922a5e52dc225e772ef13be3f5a44d45086c968a" name="gtk2-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="2caa00d72066bb3c99c661bf5cdc9f87b46e24b9ef8e77c6c28008473652f1cb" name="gtk2-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="d40d3926501eb1d3cf36c18104ea7f668d7d34ca0e7277efac70ad2f5b00d80a" name="gtk2-immodule-thai" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="b3313dbf58798981a00fec2d3c8048fa289b9cdaf82a229e0d4512d2fe6ee278" name="gtk2-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="80d5f149b09d32293480d3243a1a5100037087ee4a5914ed8066b5fc62aa8597" name="gtk2-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="a33f04cdd72565cb55e79a6218c0bafb38704589e8de713703d91bebe639cf1d" name="gtk2-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="4b2669d100afb85187c9f2ec5bebef7f28f1b0b1c201216adbec3d785464f704" name="gtk2-immodule-xim" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="133f961459cca7a6218b0c405d1b0f4c998ba2ba41336e9c10ad4aa0ab9d6999" name="gtk2-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="3724319d62031032efc271c54e85ae933b390652c9402b22f3fd86a0a2e0cecb" name="gtk2-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="0c25660cb1233f4e4f6298cb583d48ca9d0e000c4fb578cf5755161899fcabb8" name="gtk2-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="9f8ab848869d03347b92acf388c3d5d77a05dd34eea1b3634a4377cb1dc076c3" name="gtk2-lang" arch="noarch">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="36f78cdcfca54b4fd2b52e87f5a4e51cb191e5c9df5d58a715bcac634fb57770" name="gtk2-tools" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="7bd0d26d4d059773af5f2425663b9278f4f9dd1982af683994daa0024866bb76" name="gtk2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.31" rel="15.3.1"/>
  <changelog author="fcrozat@suse.com" date="1407412800">- Rename README.SuSE to README.SUSE (bnc#889027).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412942400">- Update to version 2.24.25:
  + Avoid a crash when using the pixbuf engine outside GTK+.
  + Build fixes for MS Visual C 2010 and later.
  + Bugs fixed: bgo#689138, bgo#705054, bgo#729924, bgo#731582,
    bgo#733689, bgo#734563, bgo#734879, bgo#735005, bgo#735428.
  + Updated translations.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916800">- Add gtk2-allow-deprecated-gdk-pixbuf-API.patch: Allow deprecated
  gdk-pixbuf API, taken from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1416916801">- Do not package ChangeLog: it's a 2MB plain text file which is not
  going to be read ever by anybody. NEWS contains similar
  information in a more approachable way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1423483200">- Add gtk2-Do-not-leak-a-cairo-region.patch: Fix memory leak
  (bgo#738837).
- Add gtk2-gdk_window_begin_paint_region.patch: When using the
  implicit paint pixmap, always draw to the same surface each time
  rather than creating a new one each time. This is both more
  effective and more natural (bgo#741060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 2.24.26:
  + gailbutton: Avoid a possible NULL dereference.
  + label: Avoid a possible NULL dereference.
  + Bugs fixed: bgo#635380, bgo#738837, bgo#741060, bgo#741959,
    bgo#743544, bgo#743917.
- Drop gtk2-allow-deprecated-gdk-pixbuf-API.patch,
  gtk2-gdk_window_begin_paint_region.patch and
  gtk2-Do-not-leak-a-cairo-region.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1425470400">- Update to version 2.24.27:
  + Don't leak pixel data in some error paths.
  + Bugs fixed: bgo#696505, bgo#745052, bgo#745536.</changelog>
  <changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 2.24.28:
  + Bugs fixed: bgo#693738, bgo#746064, bgo#746269, bgo#748014.</changelog>
  <changelog author="joschibrauchle@gmx.de" date="1433160000">- Add two patches to fix boo#933034:
  + Add gtk2-bgo743166-remember-printing-authentication.patch:
    Allow credentials from gnome-keyring to be used for printing
    in GTK 2 (bgo#743166)
  + Add gtk2-bgo737777-fix-printing-authentication-crash.patch:
    Fix applications from randomly crashing while printing with
    a password-secured SMB printer (bgo#737777)</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- gtk2-gdk_region_destroy_instead_of_cairo_region_destroy.patch
  added: Fix a wrong function call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1449835200">- Update to version 2.24.29:
  + OS X: Partial aspect ratio support.
  + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638,
    bgo#753644, bgo#753691, bgo#753992, bgo#754046.
  + Updated translations.
- Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451304000">- Add gtk2-randr-1.5-monitor-support.patch: Adds support for using
  the newly introduced monitor objects in the XRandR protocol.
  Patch from upstream git (bgo#759912).</changelog>
  <changelog author="zaitor@opensuse.org" date="1452859200">- Add gtk2-Deliver-GdkModifierType-during-drag-motion.patch:
  Deliver GdkModifierType during 'drag-motion' (bgo#722815). Patch
  from upstream git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457265600">- Update to version 2.24.30:
  + Win32: Build fixes.
  + X11: Support Randr 1.5 monitor information.
  + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652,
    bgo#758893.
  + Updated translations.
- Drop gtk2-Deliver-GdkModifierType-during-drag-motion.patch and
  gtk2-randr-1.5-monitor-support.patch: Fixed upstream.</changelog>
  <changelog author="federico@suse.com" date="1457611200">- Add gtk2-bnc957400-filechooserentry-update.patch. This updates
  the Tab completion code in GtkFileChooser, so it works the same
  as in gtk3 (bnc#957400). The patch was associated with upstream
  commits: 55764ddd, 191d1cd90, 92d45e12, 8f9487f</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alterntatives usage.</changelog>
  <changelog author="mgorse@suse.com" date="1473768000">- Update to version 2.24.31 (CVE-2013-7447, bgo#703220):
  + Backport many file chooser entry fixes and cleanups.
  + Don't crash if invisible files are deleted.
  + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698,
    bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220
    (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777,
    bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163,
    bgo#764996, bgo#769126.
- Rebase gtk2-bgo743166-remember-printing-authentication.patch.
- Drop gtk2-bgo737777-fix-printing-authentication-crash.patch and
  gtk2-bnc957400-filechooserentry-update.patch: fixed upstream.</changelog>
  <changelog author="msrb@suse.com" date="1523620800">- Add gtk2-bnc1039465-fix-gdk-windowing-window-at-pointer.patch
  prevents infinite loop when a window is destroyed while traversed
  (bsc#1039465)</changelog>
</package>
<package pkgid="ac594238e47cc6d5d744d3365ac4c5a0d228e4e96d1894e9172a089b92af54aa" name="gtk3" arch="src">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="867b5a035ff7d1d730673b0034b6e79605b9242314adef10788286d09fd8776f" name="gtk3" arch="src">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="d784e1895797d890388e6d504a9a74ff9241fdae0b2029577fc312fc94eedad2" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="99adcb75b030fc0e683aa91b42abee16639163ea244dcd73de8e99458f053a4a" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="3a194949e82f2ff8f927ba7f066f820b837c639e5d395c0543fccca646f5aa57" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="be49daab7fccb3b8152c33c5d9d8fc8f436d89e8986f44aa74643d02ae680ab5" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="4b498f572d5eabbc926ff790514774afc49f602c96f57fb0dab19253c6f8f66e" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="f2d2be7628f34dc19d60a06066a5c93f2517da6adb4b3b6161ef7b71a109c71c" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="c2b5700e6a4c49ed8018b3504f35b384db2a97b179f28c2bde0f7ac12b29b4a4" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="1869f3414004a52ec0a0777388b225c3656152046ece034c0e649b6267f60fee" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="c542d9e77d32b258503b2bd98035b2bfb34a6c1627977e36dde38df4046b027b" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="08ecd540adfe0c7ce94aa6baf6e0f2cc488dcff05b167a25db9d149c13d8c145" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="1afcff76507e702ca19da7df905bf7e0c25233fafdd0277bf3f42e7adb0bbe90" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="8e5e37460d12c9a8755cd1a0c25fd5f1a2fdc1ac1aea7521b972a8cbee93b079" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="45ee61a413c53d977862156cb6a7a401fef5cd98ea479b003ce33fdd75c8eab7" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="e5db784b055a684293615a495a9864e376d6164d30f8cdbcac7480ceccc57580" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="c10acbfae63437aa20203cc7a7647bcb88707dbee9707d79763e5813512e74d6" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="46dce083e7530093bba3126c07f0825f2e8c56b035e89620dc3ca6c998ab8c89" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="33d3e3dff5b28cf0fa91abadbe6c458efe56b10a747b2cbb1324dfd0b43dfded" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="be35222a8cfd3d3bbd4ca165a1ac4219b5eaed3ae34f9fb59e8c8d0f2cdb8733" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="df4eb65d5bfe88cdbe8ccdb990141468c58ea56c52abd3d4af37880dc679d2f7" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="23a3d4b496b9633ed047c32242d713c9e4c15b361a2d7824970a1783903210b1" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="4aa7c312c3f6d196776d01b53fc575357da2439faa3496e3245eb4e376964b7f" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="4f89d2ba42c4908643b06e67e22945322be95f6407ad498ac15220b6a0a0b105" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="2c8374faf9f240cd5a945d662b8f6dd35eb2150cad2e9b551a58c2ae7ba0d75a" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="0ebf76a11b97f3dd40bedac4096f597cb22756c2add4869e404093fd3a5bb70c" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="13203eac208ed3c53809f41085c7ff77d43e50020b866d4e32c24dc663daf096" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="5bff4d4988e0ec72826bddc100019140252227d696bf388a81a8768c502ec57a" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="4e5af721fe58749d113089cf05e0548d76a8df6b68fb9afd0ce6ad4e01d4b430" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="dcfdc2458c60f96f25e06e7a9d10fe9a094d1e5203f6a2364144f68b56342ded" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="e9d0265ccc5994e35c5adfe8a3e1961924e2c051b8d34884bd51d4ece2c14089" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="536b0458739edb0988b22fb0f49242c9f20657076dc43e95efc62fb654c1a322" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="1e01dbf994f811d09378f64a4dfa4dc5870580c84d700ff0b881a2fb9af76112" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="39515049b06ba7ffc509374f1bab51d966f35ce49e6580bfeacc7ee8659d678d" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="c55f0ff354f0169235af4440c45fe3e1d4fbdf428dc330a377c2e67482fed166" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="2f0c495f9adc7f79302d89fa10e1ae2832f8ba09b77603ceb5b63e563a5d74b7" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="0d4fb743dc62cee3eb2ddc79e59ecae5ca0d40d25315630bf89962a921c79f02" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="9e64a56b27f1058f033cdf57ee7372671acb4efa1eb510f66010cc36aa44acb5" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="0f3cdb034008b370b99784a7d5cf94c01f8070a639e5ee4867d34062246b6c4e" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="117cca34e485cc6239490ec8092d3e286229d7b29fdd4c5c10bf672cf1996eee" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="c53cb56529c44f12ec97dae534b344d56171aa51568710383ddf6f85e1b735dd" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="6e1578d49548fa79d7ad820781f44a8fb56bb4c390f6315045d143520f287c3a" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="0eea47bf4efb887eeedb45d0f5736f54cc7e7bac8f1eb010abde4e7aea6966e2" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="9516dc15ccd0ee33f067a8c3b876fd4596693b0b54eb01714e7f48f80523799a" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="968c8b35b312bd43b5982da5d04df60e884b26076fb0f6372aecaa59258c3072" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="12.1"/>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459684800">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
</package>
<package pkgid="fe720c845011c4d676695e327124a8a1e32e3f0e0b8dd18f7fbbbb628af41abc" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.20.10" rel="9.1"/>
  <changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
  <changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
  <changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
  <changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
  <changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
  <changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>
</package>
<package pkgid="2c918d9a17cc78e151774dba0f0f772c6ebcd0362cc76e1d1cd061f8b1667f97" name="guestfs-data" arch="x86_64">
  <version epoch="0" ver="1.32.4" rel="11.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1441800000">- Define SHA512 as the default password encryption method for
  opensuse 11+.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1442232000">- Create the .cache folder if it doesn't exist already.
  bsc#939097.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443528000">- Add -l to zypper for install and update.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443700800">- Add password default encryption method for sles. fate#318952</changelog>
  <changelog author="cbosdonnat@suse.com" date="1457956800">- Update to version 1.32.4
- Backported commits (fate#316274):
  * f5a9cdf: api: add mountable_device and mountable_subvolume
  * 1c30c23: fish: fix btrfs subvolumes display in error case
  * 1f24364: v2v: win &lt;= 7: reduce registry patch
  * f0dce24: v2v: win &gt;= 8: reduce registry patch
  * 9a441b0: v2v: win &gt;= 8: simplify registry patching
  * e07459d: v2v: win: factor out common bits in registry patching
  * 47aa64a: v2v: add support for virtio-scsi
  * bba9ea9: v2v: also search for windows virtio drivers in symlinks
  * 3bf7d30: Update packagelist for SLES and openSUSE
  * 89ae53e: appliance: skip /etc/mtab creation is already existing
  * ee78c06: customize: add support for pvvxsvc
  * 25848b5: v2v: document SUSE's Xen as a working input hypervisor
  * e9082ea: v2v: rename RHEL 5 Xen input section into Xen in man
  * 75fe93e: v2v: improve initrd search
  * 536ef6f: customize: change windows firstboot path
  * 07f7bfa: customize: fix windows firstboot script
  * c466d4c: v2v: add support for SUSE VMDP drivers
  * 9de9300: v2v: handle subfolders in ova files
- Removed patches:
  * 1000-force-virtio_blk-in-old-guest-kernel.patch
  * libguestfs.mkinitrd.1110.patch
  * libguestfs.mkinitrd.1115.patch
  * libguestfs.mkinitrd.1140.patch
  * libguestfs.mkinitrd.1210.patch
  * libguestfs.mkinitrd.1220.patch
  * libguestfs.mkinitrd.1230.patch
  * libguestfs.mkinitrd.1310.patch
  * libguestfs.mkinitrd.boot-btrfs.sh
  * libguestfs.mkinitrd.boot-dm.sh
  * libguestfs.mkinitrd.boot-lvm2.sh
  * libguestfs.mkinitrd.boot-md.sh
  * libguestfs.mkinitrd.boot-nfs.sh
  * libguestfs.mkinitrd.boot.sh
  * libguestfs.mkinitrd.setup-btrfs.sh
  * libguestfs.mkinitrd.setup-dm.sh
  * libguestfs.mkinitrd.setup-lvm2.sh
  * libguestfs.mkinitrd.setup-md.sh
  * libguestfs.mkinitrd.setup-nfs.sh
  * libguestfs.mkinitrd.setup.sh
  * libguestfs.mkinitrd.tar.bz2</changelog>
  <changelog author="cbosdonnat@suse.com" date="1465387200">- Fix virt-filesystem -l for btrfs. bsc#980092
- Add p2v support (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1467633600">- Fix guestfs-tools dependencies. bsc#986866</changelog>
  <changelog author="ke@suse.de" date="1468411200">- Fix virt-p2v package summary (dummy bsc#933411).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016000">- v2v: add support for win2k16.
  Backport commit e93d4ea3, fate#316274</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016001">- appliance fixes (fate#316274):
  * re-add helper script mount-rootfs-and-chroot.sh for virt-rescue
    appliance.patch
  * make guestfs-data a requirement of guestfs-tools</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469707200">- Fix dependencies (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472212800">- Clean up dependencies and add recommends for optional packages
  like the ones enabling file system features
  fate#316274, bsc#993501</changelog>
  <changelog author="ohering@suse.de" date="1473854400">- Remove obsolete kernel checks from specfile (fate#316274)
- Remove kernel-default and mkinitrd from BuildRequires (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474286400">- Add mount.ntfs alternatives symlink for SLES too (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474545600">- Backport btrfs-related fixes (bsc#1000202)
  commits: d6bba9b, f90185d, 4e0dbf9 and 738c3bf</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480507200">- Add initviocons to appliance package (bsc#1011940)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Add ldmtool to appliance (fate#320858)
- Add cdrkit-cdrtools-compat to appliance, required for isoinfo*
  APIs to work.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1494849600">- Don't let mkinitrd guess the root device (bsc#1038397)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="fli@suse.com" date="1532347200">- s390x: fix libguestfs launch failing by using virtio-*-ccw and sclp
  bsc#1098615</changelog>
</package>
<package pkgid="c7d8ff03489098850a8a81dca07c892c7af277fb1466fcda4883138f8f7f7fda" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.32.4" rel="11.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1441800000">- Define SHA512 as the default password encryption method for
  opensuse 11+.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1442232000">- Create the .cache folder if it doesn't exist already.
  bsc#939097.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443528000">- Add -l to zypper for install and update.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443700800">- Add password default encryption method for sles. fate#318952</changelog>
  <changelog author="cbosdonnat@suse.com" date="1457956800">- Update to version 1.32.4
- Backported commits (fate#316274):
  * f5a9cdf: api: add mountable_device and mountable_subvolume
  * 1c30c23: fish: fix btrfs subvolumes display in error case
  * 1f24364: v2v: win &lt;= 7: reduce registry patch
  * f0dce24: v2v: win &gt;= 8: reduce registry patch
  * 9a441b0: v2v: win &gt;= 8: simplify registry patching
  * e07459d: v2v: win: factor out common bits in registry patching
  * 47aa64a: v2v: add support for virtio-scsi
  * bba9ea9: v2v: also search for windows virtio drivers in symlinks
  * 3bf7d30: Update packagelist for SLES and openSUSE
  * 89ae53e: appliance: skip /etc/mtab creation is already existing
  * ee78c06: customize: add support for pvvxsvc
  * 25848b5: v2v: document SUSE's Xen as a working input hypervisor
  * e9082ea: v2v: rename RHEL 5 Xen input section into Xen in man
  * 75fe93e: v2v: improve initrd search
  * 536ef6f: customize: change windows firstboot path
  * 07f7bfa: customize: fix windows firstboot script
  * c466d4c: v2v: add support for SUSE VMDP drivers
  * 9de9300: v2v: handle subfolders in ova files
- Removed patches:
  * 1000-force-virtio_blk-in-old-guest-kernel.patch
  * libguestfs.mkinitrd.1110.patch
  * libguestfs.mkinitrd.1115.patch
  * libguestfs.mkinitrd.1140.patch
  * libguestfs.mkinitrd.1210.patch
  * libguestfs.mkinitrd.1220.patch
  * libguestfs.mkinitrd.1230.patch
  * libguestfs.mkinitrd.1310.patch
  * libguestfs.mkinitrd.boot-btrfs.sh
  * libguestfs.mkinitrd.boot-dm.sh
  * libguestfs.mkinitrd.boot-lvm2.sh
  * libguestfs.mkinitrd.boot-md.sh
  * libguestfs.mkinitrd.boot-nfs.sh
  * libguestfs.mkinitrd.boot.sh
  * libguestfs.mkinitrd.setup-btrfs.sh
  * libguestfs.mkinitrd.setup-dm.sh
  * libguestfs.mkinitrd.setup-lvm2.sh
  * libguestfs.mkinitrd.setup-md.sh
  * libguestfs.mkinitrd.setup-nfs.sh
  * libguestfs.mkinitrd.setup.sh
  * libguestfs.mkinitrd.tar.bz2</changelog>
  <changelog author="cbosdonnat@suse.com" date="1465387200">- Fix virt-filesystem -l for btrfs. bsc#980092
- Add p2v support (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1467633600">- Fix guestfs-tools dependencies. bsc#986866</changelog>
  <changelog author="ke@suse.de" date="1468411200">- Fix virt-p2v package summary (dummy bsc#933411).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016000">- v2v: add support for win2k16.
  Backport commit e93d4ea3, fate#316274</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016001">- appliance fixes (fate#316274):
  * re-add helper script mount-rootfs-and-chroot.sh for virt-rescue
    appliance.patch
  * make guestfs-data a requirement of guestfs-tools</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469707200">- Fix dependencies (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472212800">- Clean up dependencies and add recommends for optional packages
  like the ones enabling file system features
  fate#316274, bsc#993501</changelog>
  <changelog author="ohering@suse.de" date="1473854400">- Remove obsolete kernel checks from specfile (fate#316274)
- Remove kernel-default and mkinitrd from BuildRequires (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474286400">- Add mount.ntfs alternatives symlink for SLES too (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474545600">- Backport btrfs-related fixes (bsc#1000202)
  commits: d6bba9b, f90185d, 4e0dbf9 and 738c3bf</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480507200">- Add initviocons to appliance package (bsc#1011940)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Add ldmtool to appliance (fate#320858)
- Add cdrkit-cdrtools-compat to appliance, required for isoinfo*
  APIs to work.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1494849600">- Don't let mkinitrd guess the root device (bsc#1038397)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="fli@suse.com" date="1532347200">- s390x: fix libguestfs launch failing by using virtio-*-ccw and sclp
  bsc#1098615</changelog>
</package>
<package pkgid="5796d366fca80385baa7650843b035ea805e9c16217c0567c3ce227bdefc8dc8" name="guestfsd" arch="x86_64">
  <version epoch="0" ver="1.32.4" rel="11.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1441800000">- Define SHA512 as the default password encryption method for
  opensuse 11+.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1442232000">- Create the .cache folder if it doesn't exist already.
  bsc#939097.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443528000">- Add -l to zypper for install and update.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1443700800">- Add password default encryption method for sles. fate#318952</changelog>
  <changelog author="cbosdonnat@suse.com" date="1457956800">- Update to version 1.32.4
- Backported commits (fate#316274):
  * f5a9cdf: api: add mountable_device and mountable_subvolume
  * 1c30c23: fish: fix btrfs subvolumes display in error case
  * 1f24364: v2v: win &lt;= 7: reduce registry patch
  * f0dce24: v2v: win &gt;= 8: reduce registry patch
  * 9a441b0: v2v: win &gt;= 8: simplify registry patching
  * e07459d: v2v: win: factor out common bits in registry patching
  * 47aa64a: v2v: add support for virtio-scsi
  * bba9ea9: v2v: also search for windows virtio drivers in symlinks
  * 3bf7d30: Update packagelist for SLES and openSUSE
  * 89ae53e: appliance: skip /etc/mtab creation is already existing
  * ee78c06: customize: add support for pvvxsvc
  * 25848b5: v2v: document SUSE's Xen as a working input hypervisor
  * e9082ea: v2v: rename RHEL 5 Xen input section into Xen in man
  * 75fe93e: v2v: improve initrd search
  * 536ef6f: customize: change windows firstboot path
  * 07f7bfa: customize: fix windows firstboot script
  * c466d4c: v2v: add support for SUSE VMDP drivers
  * 9de9300: v2v: handle subfolders in ova files
- Removed patches:
  * 1000-force-virtio_blk-in-old-guest-kernel.patch
  * libguestfs.mkinitrd.1110.patch
  * libguestfs.mkinitrd.1115.patch
  * libguestfs.mkinitrd.1140.patch
  * libguestfs.mkinitrd.1210.patch
  * libguestfs.mkinitrd.1220.patch
  * libguestfs.mkinitrd.1230.patch
  * libguestfs.mkinitrd.1310.patch
  * libguestfs.mkinitrd.boot-btrfs.sh
  * libguestfs.mkinitrd.boot-dm.sh
  * libguestfs.mkinitrd.boot-lvm2.sh
  * libguestfs.mkinitrd.boot-md.sh
  * libguestfs.mkinitrd.boot-nfs.sh
  * libguestfs.mkinitrd.boot.sh
  * libguestfs.mkinitrd.setup-btrfs.sh
  * libguestfs.mkinitrd.setup-dm.sh
  * libguestfs.mkinitrd.setup-lvm2.sh
  * libguestfs.mkinitrd.setup-md.sh
  * libguestfs.mkinitrd.setup-nfs.sh
  * libguestfs.mkinitrd.setup.sh
  * libguestfs.mkinitrd.tar.bz2</changelog>
  <changelog author="cbosdonnat@suse.com" date="1465387200">- Fix virt-filesystem -l for btrfs. bsc#980092
- Add p2v support (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1467633600">- Fix guestfs-tools dependencies. bsc#986866</changelog>
  <changelog author="ke@suse.de" date="1468411200">- Fix virt-p2v package summary (dummy bsc#933411).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016000">- v2v: add support for win2k16.
  Backport commit e93d4ea3, fate#316274</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469016001">- appliance fixes (fate#316274):
  * re-add helper script mount-rootfs-and-chroot.sh for virt-rescue
    appliance.patch
  * make guestfs-data a requirement of guestfs-tools</changelog>
  <changelog author="cbosdonnat@suse.com" date="1469707200">- Fix dependencies (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472212800">- Clean up dependencies and add recommends for optional packages
  like the ones enabling file system features
  fate#316274, bsc#993501</changelog>
  <changelog author="ohering@suse.de" date="1473854400">- Remove obsolete kernel checks from specfile (fate#316274)
- Remove kernel-default and mkinitrd from BuildRequires (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474286400">- Add mount.ntfs alternatives symlink for SLES too (fate#316274)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1474545600">- Backport btrfs-related fixes (bsc#1000202)
  commits: d6bba9b, f90185d, 4e0dbf9 and 738c3bf</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480507200">- Add initviocons to appliance package (bsc#1011940)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491480000">- Add ldmtool to appliance (fate#320858)
- Add cdrkit-cdrtools-compat to appliance, required for isoinfo*
  APIs to work.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1494849600">- Don't let mkinitrd guess the root device (bsc#1038397)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="fli@suse.com" date="1532347200">- s390x: fix libguestfs launch failing by using virtio-*-ccw and sclp
  bsc#1098615</changelog>
</package>
<package pkgid="2bfdb9385d25a21cf59a9bef21db4222442097558cf3c0afffc557d11a17f32f" name="gvfs" arch="src">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="6b58d7af9c0a6143e4fc8102173383710bf8a528473f59e0218d818e543e8d6b" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="bebb8d249e1976c31829cd82fd6b30f4cf5bb508aeb48dd55a20678dffd8948c" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="ca3c48aa56aa45487da5b676d06f1bea492ac733a0ce08042f4e7fe086ad2b86" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="7d7d910c6aef6a10083b53675b406d66f27d65142a7d5174c99f506a1fe75ae4" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="55b66786fbc07ed45bbff8cb2eda85315098ef09263a4cf3007e2817dcef4770" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="eb3c744669b271f323c66db0761aaf404f622cb1e08a4d1a2706cc53d9e724f5" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="56541a40390e0e4a1a87ec8ae415572e62b30469933f0655c89d01185977b4eb" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="538321eef40e33388453e8bef86dfe1755218e0df3635550c414e0249a0f5c2c" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.28.3" rel="5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 1.26.3:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + metadata: Avoid endless recursion when copying meta files.
  + udisks2: Do not show notification if unmount failed.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883200">- Update to version 1.27.3:
  + sftp:
  - Fail cancelled jobs.
  - Handle "Too many authentication failures" error.
  + metadata: Avoid endless recursion when copying meta files.
  + mtp: Use phone icon for MTP devices.
  + udisks2: Do not show notification if unmount failed.
  + completion: Allow bash completion for gvfs-mount.
  + http: Return error if seek was not successful.
  + Several smaller bugfixes.
  + Updated translations.
- Add disabled pkgconfig(libnfs) BuildRequires, needed for nfs
  backedend, but the needed underlying libs is not available for
  openSUSE yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883201">- Update to version 1.27.4:
  + dns-sd: Add support for nfs shares.
  + Do not print anything from daemons unless debug mode is
    enabled.
  + Several other logging improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455883202">- Update to version 1.27.90:
  + udisks2: Avoid crashes during unmount.
  + ftp: Fix cache invalidation after writing.
  + network: Fix crashes when mount failed.
  + mtp: Allow reading on more devices.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455883203">- Split out samba backend in own subpackage, make samba removable.
- Drop superfluous libsmbclient-devel BuildRequires as we already
  have pkgconfig(smbclient) BuildRequires that covers it.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456747200">- Update to version 1.27.91:
  + udisks2: Send unmount notification only once when stopping.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 1.27.92:
  + fuse: Avoid crashes when exiting.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 1.28.0:
  + afc: Several fixes for recent iOS versions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.28.1:
  + udisks2:
  - Abort mount operation if volume is unlocked.
  - Lock unlocked volumes on eject/stop.
  + trash:
  - Check modification time to avoid rereading.
  - Rescan trash dirs before operations with files.
  + Updated translations.</changelog>
  <changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572
- Drop:
  * 0001-afp-Don-t-crash-when-opening-the-root-directory.patch
  * 0001-archive-fix-segfault-when-libarchive-fails.patch
  * 0001-gphoto2-Don-t-release-the-device-multiple-times.patch
  * 0001-gphoto2-Return-the-correct-offset-when-seeking.patch
  * 0001-http-Allow-seek-past-end-of-file.patch
  * 0001-http-Ensure-the-range-header-is-updated.patch
  * 0001-http-Fix-segfault-when-seeking-on-read.patch
  * 0001-http-Fix-the-SEEK_END-offset-calculation.patch
  * 0001-MTP-Fail-fast-if-in-the-middle-of-an-unmount.patch
  * gvfs-hal-volume-monitor-memory-leak.patch
  * gvfs-obexftp-allow-push-cancel.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1461326400">- Enable pkgconfig(libnfs) BuildRequires, we now have it in
  openSUSE, also package the new nfs support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 1.28.2:
  + udisks2: Fix crash when mounting encrypted volume.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1462881600">- Disable libnfs support on SLE.</changelog>
  <changelog author="tyang@suse.com" date="1467720000">- Fix "gvfs-smb timeout by message bus issue" (bsc#983992):
  + Add %glib2_gsettings_schema_require to preamble.
  + Add %glib2_gsettings_schema_post/postun to respective scripts
    of -backend-samba subpackage.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Replace pkgconfig(libsystemd-login) with pkgconfig(libsystemd):
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs,
  which are obsolete.</changelog>
  <changelog author="fcrozat@suse.com" date="1469102400">- Fix supplements on gvfs-backend-samba, since we don't have
  libsmbclient provides anymore (bsc#988921).</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Ensure systemd-tmpfiles runs:
  + Add %tmpfiles_create to post script of -fuse subpackage.
  + Add %{?systemd_requires} to -fuse subpackage.</changelog>
  <changelog author="zaitor@opensuse.org" date="1470916800">- Update to version 1.28.3:
  + dnssd: Fix crashes when mount failed.
  + gvfs-open: Fix spawning of applications with dashses in their
    app IDs.
  + daemon: Fix crashes caused by NULL certificates.
  + afc: Many fixes for iOS support.
  + client: Fix missing mount prefix in cached fuse paths.
  + dav: Fix IPv6 address handling.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1472126400">- Drop gvfs-support-nop-ftruncate.patch (bnc#466794, bgo#573837),
  gvfs-no-useless-x-flags.patch (bnc#538069),
  gvfs-monitor-proxy-debug.patch (bnc#903858):
  Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517313600">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030, bgo#784477).</changelog>
</package>
<package pkgid="2413efcae7c83017e313a5547aefb40f85bbc33c7788fb4798f747b721178087" name="gwenhywfar" arch="src">
  <version epoch="0" ver="4.9.0beta" rel="11.1"/>
  <changelog author="Nico.Laus.2001@gmx.de" date="1298203200">- Update to version 4.0.7:
  + fixes problems with smsTAN/mTAN
  + keep the focus chain intact in QT4 GUI
- Update to version 4.0.5:
  + fixes a bug with chunked HTTP</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1300363200">- Update to version 4.0.9:
  + fixes a bug in the Qt4 frontend
  + fixes a bug in the LIST1 module
  + fixes xml file generation using the XMLDB module</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1307793600">- Update to version 4.1.0:
  + new code for sorting any GWEN_LIST
  + some bug fixes</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1310817600">- Update to version 4.2.0:
  + Marked argument list of GWEN_StringList_new() as void.
  + Added keyword "void" to functions with empty argument list.
  + Let typemaker tools use "void" for empty argument lists in
    constructors.
  + Added field "CustomerId" to GWEN_Crypt_Token_Context.
  + Added function GWEN_DB_GetParentGroup().
  + Added line for "hasKeyNumber" flag.
  + Show customer if available.
  + Added some tm2 files to ignore list.
  + typemaker2: added type uint64_t.
  + Improved and fixed GWEN_TLV, added functions
    GWEN_TLV_ReadHeader() and GWEN_TLV_WriteHeader().
  + Started working on a simple archiver.
  + Fixed a few bugs in new TLV code.
  + Added tool "gsa" ("Gwen's simple archiver").
  + Improved HTTP handling:
  - added function GWEN_SyncIo_Http_RecvBodyToSio().
  - added function GWEN_HttpSession_RecvPacketToFile().
  + Added function GWEN_Directory_GetAbsoluteFolderPath().
  + Added convenience function GWEN_Sar_UnpackArchive().
  + Added code and commands to sign a sar archive.
  + Improved progress handling in network code.
  + Fixed GWEN_MDigest__HashFileTree().
  + Added missing include.
  + Various bug fixes and code cleanup.
- Update Url as Gwenhywfar is now being hosted at
  http://www.aqbanking.de/.
- Update spec file License field from LGPLv2.1+ to LGPL-2.1+ to
  conform with spdx.org identifier.
- Minor reformatting in spec file.
- Remove service usage, following the new consensus on Factory
  packaging.</changelog>
  <changelog author="dimstar@opensuse.org" date="1312286400">- Update to version 4.2.1:
  + Make QLabel in GUI wrap words.
  + Relaxed http code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1313150400">- Add GPL-2.0+ tag to the main package and the tools subpackage, as
  this is the correct license for the tools and related sources.
  See also bnc#710065.</changelog>
  <changelog author="kruber@zib.de" date="1316606400">- Update to version 4.3.0:
  + added a new method for converting charsets
  + better error handling in the build system</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Add gwenhywfar-gnutls-3.0.3.patch: fix build with gnutls 3.0.3.</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324296000">- Update to version 4.3.1:
  + this version is needed for AqBanking's new support for the
    optical chipTAN method
  + some improvements to the typemaker2 tool</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324382400">- removed gwenhywfar-gnutls-3.0.3.patch (fixed upstream in 4.3.1)</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1325505600">- included %{_datadir}/aclocal in the devel package</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1331294400">- Update to version 4.3.2:
  + fixes network problems on Windows</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1336564800">- Update to version 4.3.3:
  + do not use the deprecated libgcrypt interface for RSA keys
    anymore (allows compilation with newer libgcrypt versions)</changelog>
  <changelog author="aj@suse.de" date="1341316800">- Change lang package Requires to Recommends since it is not
  mandatory at runtime.</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="nico.kruber@gmail.com" date="1371988800">- Update to version 4.6.0beta:
  + adds a new module for cache handling and some widely used
    functionality
  + major (internal) improvements to typemaker2
  + complete German translation (thanks to Christian)
- Update to version 4.5.0beta:
  + adds some small changes for SEPA transactions needed by
    aqbanking</changelog>
  <changelog author="nico.kruber@gmail.com" date="1377086400">- Update to version 4.7.0beta:
  + contains improvements if the TypeMaker2 tool
  + fixes an error linking libgpg-error.so
  + adds some functions to the GWEN_XML and GWEN_DATE modules
    used by the new AqBanking version 5.0.31beta
  + Info: this is still beta because the MULTICACHE module is
    still work in progress</changelog>
  <changelog author="nico.kruber@gmail.com" date="1382529600">- Update to version 4.8.0beta:
  + new functions to work with dates (module GWEN_DATE,
    e.g.  GWEN_Date_GetLastHalfYearStart())
  + fix some errors in the layout of the  FOX 1.6 GUI module.
  + some improvements in typemaker2.</changelog>
  <changelog author="nico.kruber@gmail.com" date="1389009600">- Update to version 4.9.0beta:
  + adds new code for cipher selection with SSL connections
    (still some problems with the Netbank, please report back)
  + Netbank works setting the GWEN_TLS_CIPHER_PRIORITIES
    environment variable to "NORMAL:-AES-256-CBC"</changelog>
  <changelog author="alarrosa@suse.com" date="1511870400">- Add use-system-trusted-CAs.diff to make gwenhywfar use the system's
  default trusted CAs . Also remove the upstream provided ca-bundle.crt
  file and require ca-certificates so the /etc/ssl/certs directory
  is populated (bnc#958331, CVE-2015-7542).</changelog>
</package>
<package pkgid="8efffd63c0295864edcd7e54685d8101e00ada7f001966715e93d18d894f5f25" name="gwenhywfar-devel" arch="x86_64">
  <version epoch="0" ver="4.9.0beta" rel="11.1"/>
  <changelog author="Nico.Laus.2001@gmx.de" date="1298203200">- Update to version 4.0.7:
  + fixes problems with smsTAN/mTAN
  + keep the focus chain intact in QT4 GUI
- Update to version 4.0.5:
  + fixes a bug with chunked HTTP</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1300363200">- Update to version 4.0.9:
  + fixes a bug in the Qt4 frontend
  + fixes a bug in the LIST1 module
  + fixes xml file generation using the XMLDB module</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1307793600">- Update to version 4.1.0:
  + new code for sorting any GWEN_LIST
  + some bug fixes</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1310817600">- Update to version 4.2.0:
  + Marked argument list of GWEN_StringList_new() as void.
  + Added keyword "void" to functions with empty argument list.
  + Let typemaker tools use "void" for empty argument lists in
    constructors.
  + Added field "CustomerId" to GWEN_Crypt_Token_Context.
  + Added function GWEN_DB_GetParentGroup().
  + Added line for "hasKeyNumber" flag.
  + Show customer if available.
  + Added some tm2 files to ignore list.
  + typemaker2: added type uint64_t.
  + Improved and fixed GWEN_TLV, added functions
    GWEN_TLV_ReadHeader() and GWEN_TLV_WriteHeader().
  + Started working on a simple archiver.
  + Fixed a few bugs in new TLV code.
  + Added tool "gsa" ("Gwen's simple archiver").
  + Improved HTTP handling:
  - added function GWEN_SyncIo_Http_RecvBodyToSio().
  - added function GWEN_HttpSession_RecvPacketToFile().
  + Added function GWEN_Directory_GetAbsoluteFolderPath().
  + Added convenience function GWEN_Sar_UnpackArchive().
  + Added code and commands to sign a sar archive.
  + Improved progress handling in network code.
  + Fixed GWEN_MDigest__HashFileTree().
  + Added missing include.
  + Various bug fixes and code cleanup.
- Update Url as Gwenhywfar is now being hosted at
  http://www.aqbanking.de/.
- Update spec file License field from LGPLv2.1+ to LGPL-2.1+ to
  conform with spdx.org identifier.
- Minor reformatting in spec file.
- Remove service usage, following the new consensus on Factory
  packaging.</changelog>
  <changelog author="dimstar@opensuse.org" date="1312286400">- Update to version 4.2.1:
  + Make QLabel in GUI wrap words.
  + Relaxed http code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1313150400">- Add GPL-2.0+ tag to the main package and the tools subpackage, as
  this is the correct license for the tools and related sources.
  See also bnc#710065.</changelog>
  <changelog author="kruber@zib.de" date="1316606400">- Update to version 4.3.0:
  + added a new method for converting charsets
  + better error handling in the build system</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Add gwenhywfar-gnutls-3.0.3.patch: fix build with gnutls 3.0.3.</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324296000">- Update to version 4.3.1:
  + this version is needed for AqBanking's new support for the
    optical chipTAN method
  + some improvements to the typemaker2 tool</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324382400">- removed gwenhywfar-gnutls-3.0.3.patch (fixed upstream in 4.3.1)</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1325505600">- included %{_datadir}/aclocal in the devel package</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1331294400">- Update to version 4.3.2:
  + fixes network problems on Windows</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1336564800">- Update to version 4.3.3:
  + do not use the deprecated libgcrypt interface for RSA keys
    anymore (allows compilation with newer libgcrypt versions)</changelog>
  <changelog author="aj@suse.de" date="1341316800">- Change lang package Requires to Recommends since it is not
  mandatory at runtime.</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="nico.kruber@gmail.com" date="1371988800">- Update to version 4.6.0beta:
  + adds a new module for cache handling and some widely used
    functionality
  + major (internal) improvements to typemaker2
  + complete German translation (thanks to Christian)
- Update to version 4.5.0beta:
  + adds some small changes for SEPA transactions needed by
    aqbanking</changelog>
  <changelog author="nico.kruber@gmail.com" date="1377086400">- Update to version 4.7.0beta:
  + contains improvements if the TypeMaker2 tool
  + fixes an error linking libgpg-error.so
  + adds some functions to the GWEN_XML and GWEN_DATE modules
    used by the new AqBanking version 5.0.31beta
  + Info: this is still beta because the MULTICACHE module is
    still work in progress</changelog>
  <changelog author="nico.kruber@gmail.com" date="1382529600">- Update to version 4.8.0beta:
  + new functions to work with dates (module GWEN_DATE,
    e.g.  GWEN_Date_GetLastHalfYearStart())
  + fix some errors in the layout of the  FOX 1.6 GUI module.
  + some improvements in typemaker2.</changelog>
  <changelog author="nico.kruber@gmail.com" date="1389009600">- Update to version 4.9.0beta:
  + adds new code for cipher selection with SSL connections
    (still some problems with the Netbank, please report back)
  + Netbank works setting the GWEN_TLS_CIPHER_PRIORITIES
    environment variable to "NORMAL:-AES-256-CBC"</changelog>
  <changelog author="alarrosa@suse.com" date="1511870400">- Add use-system-trusted-CAs.diff to make gwenhywfar use the system's
  default trusted CAs . Also remove the upstream provided ca-bundle.crt
  file and require ca-certificates so the /etc/ssl/certs directory
  is populated (bnc#958331, CVE-2015-7542).</changelog>
</package>
<package pkgid="f875eb120874c7296b27d7ab64173e2709e2fdc80afc1024ef1b15e49cdc4de7" name="gwenhywfar-lang" arch="noarch">
  <version epoch="0" ver="4.9.0beta" rel="11.1"/>
  <changelog author="Nico.Laus.2001@gmx.de" date="1298203200">- Update to version 4.0.7:
  + fixes problems with smsTAN/mTAN
  + keep the focus chain intact in QT4 GUI
- Update to version 4.0.5:
  + fixes a bug with chunked HTTP</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1300363200">- Update to version 4.0.9:
  + fixes a bug in the Qt4 frontend
  + fixes a bug in the LIST1 module
  + fixes xml file generation using the XMLDB module</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1307793600">- Update to version 4.1.0:
  + new code for sorting any GWEN_LIST
  + some bug fixes</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1310817600">- Update to version 4.2.0:
  + Marked argument list of GWEN_StringList_new() as void.
  + Added keyword "void" to functions with empty argument list.
  + Let typemaker tools use "void" for empty argument lists in
    constructors.
  + Added field "CustomerId" to GWEN_Crypt_Token_Context.
  + Added function GWEN_DB_GetParentGroup().
  + Added line for "hasKeyNumber" flag.
  + Show customer if available.
  + Added some tm2 files to ignore list.
  + typemaker2: added type uint64_t.
  + Improved and fixed GWEN_TLV, added functions
    GWEN_TLV_ReadHeader() and GWEN_TLV_WriteHeader().
  + Started working on a simple archiver.
  + Fixed a few bugs in new TLV code.
  + Added tool "gsa" ("Gwen's simple archiver").
  + Improved HTTP handling:
  - added function GWEN_SyncIo_Http_RecvBodyToSio().
  - added function GWEN_HttpSession_RecvPacketToFile().
  + Added function GWEN_Directory_GetAbsoluteFolderPath().
  + Added convenience function GWEN_Sar_UnpackArchive().
  + Added code and commands to sign a sar archive.
  + Improved progress handling in network code.
  + Fixed GWEN_MDigest__HashFileTree().
  + Added missing include.
  + Various bug fixes and code cleanup.
- Update Url as Gwenhywfar is now being hosted at
  http://www.aqbanking.de/.
- Update spec file License field from LGPLv2.1+ to LGPL-2.1+ to
  conform with spdx.org identifier.
- Minor reformatting in spec file.
- Remove service usage, following the new consensus on Factory
  packaging.</changelog>
  <changelog author="dimstar@opensuse.org" date="1312286400">- Update to version 4.2.1:
  + Make QLabel in GUI wrap words.
  + Relaxed http code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1313150400">- Add GPL-2.0+ tag to the main package and the tools subpackage, as
  this is the correct license for the tools and related sources.
  See also bnc#710065.</changelog>
  <changelog author="kruber@zib.de" date="1316606400">- Update to version 4.3.0:
  + added a new method for converting charsets
  + better error handling in the build system</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Add gwenhywfar-gnutls-3.0.3.patch: fix build with gnutls 3.0.3.</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324296000">- Update to version 4.3.1:
  + this version is needed for AqBanking's new support for the
    optical chipTAN method
  + some improvements to the typemaker2 tool</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324382400">- removed gwenhywfar-gnutls-3.0.3.patch (fixed upstream in 4.3.1)</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1325505600">- included %{_datadir}/aclocal in the devel package</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1331294400">- Update to version 4.3.2:
  + fixes network problems on Windows</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1336564800">- Update to version 4.3.3:
  + do not use the deprecated libgcrypt interface for RSA keys
    anymore (allows compilation with newer libgcrypt versions)</changelog>
  <changelog author="aj@suse.de" date="1341316800">- Change lang package Requires to Recommends since it is not
  mandatory at runtime.</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="nico.kruber@gmail.com" date="1371988800">- Update to version 4.6.0beta:
  + adds a new module for cache handling and some widely used
    functionality
  + major (internal) improvements to typemaker2
  + complete German translation (thanks to Christian)
- Update to version 4.5.0beta:
  + adds some small changes for SEPA transactions needed by
    aqbanking</changelog>
  <changelog author="nico.kruber@gmail.com" date="1377086400">- Update to version 4.7.0beta:
  + contains improvements if the TypeMaker2 tool
  + fixes an error linking libgpg-error.so
  + adds some functions to the GWEN_XML and GWEN_DATE modules
    used by the new AqBanking version 5.0.31beta
  + Info: this is still beta because the MULTICACHE module is
    still work in progress</changelog>
  <changelog author="nico.kruber@gmail.com" date="1382529600">- Update to version 4.8.0beta:
  + new functions to work with dates (module GWEN_DATE,
    e.g.  GWEN_Date_GetLastHalfYearStart())
  + fix some errors in the layout of the  FOX 1.6 GUI module.
  + some improvements in typemaker2.</changelog>
  <changelog author="nico.kruber@gmail.com" date="1389009600">- Update to version 4.9.0beta:
  + adds new code for cipher selection with SSL connections
    (still some problems with the Netbank, please report back)
  + Netbank works setting the GWEN_TLS_CIPHER_PRIORITIES
    environment variable to "NORMAL:-AES-256-CBC"</changelog>
  <changelog author="alarrosa@suse.com" date="1511870400">- Add use-system-trusted-CAs.diff to make gwenhywfar use the system's
  default trusted CAs . Also remove the upstream provided ca-bundle.crt
  file and require ca-certificates so the /etc/ssl/certs directory
  is populated (bnc#958331, CVE-2015-7542).</changelog>
</package>
<package pkgid="d955b61bca8dd0b7f412a36bc79979084982d4cbfa901a07ba4554d09144df2e" name="gwenhywfar-tools" arch="x86_64">
  <version epoch="0" ver="4.9.0beta" rel="11.1"/>
  <changelog author="Nico.Laus.2001@gmx.de" date="1298203200">- Update to version 4.0.7:
  + fixes problems with smsTAN/mTAN
  + keep the focus chain intact in QT4 GUI
- Update to version 4.0.5:
  + fixes a bug with chunked HTTP</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1300363200">- Update to version 4.0.9:
  + fixes a bug in the Qt4 frontend
  + fixes a bug in the LIST1 module
  + fixes xml file generation using the XMLDB module</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1307793600">- Update to version 4.1.0:
  + new code for sorting any GWEN_LIST
  + some bug fixes</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1310817600">- Update to version 4.2.0:
  + Marked argument list of GWEN_StringList_new() as void.
  + Added keyword "void" to functions with empty argument list.
  + Let typemaker tools use "void" for empty argument lists in
    constructors.
  + Added field "CustomerId" to GWEN_Crypt_Token_Context.
  + Added function GWEN_DB_GetParentGroup().
  + Added line for "hasKeyNumber" flag.
  + Show customer if available.
  + Added some tm2 files to ignore list.
  + typemaker2: added type uint64_t.
  + Improved and fixed GWEN_TLV, added functions
    GWEN_TLV_ReadHeader() and GWEN_TLV_WriteHeader().
  + Started working on a simple archiver.
  + Fixed a few bugs in new TLV code.
  + Added tool "gsa" ("Gwen's simple archiver").
  + Improved HTTP handling:
  - added function GWEN_SyncIo_Http_RecvBodyToSio().
  - added function GWEN_HttpSession_RecvPacketToFile().
  + Added function GWEN_Directory_GetAbsoluteFolderPath().
  + Added convenience function GWEN_Sar_UnpackArchive().
  + Added code and commands to sign a sar archive.
  + Improved progress handling in network code.
  + Fixed GWEN_MDigest__HashFileTree().
  + Added missing include.
  + Various bug fixes and code cleanup.
- Update Url as Gwenhywfar is now being hosted at
  http://www.aqbanking.de/.
- Update spec file License field from LGPLv2.1+ to LGPL-2.1+ to
  conform with spdx.org identifier.
- Minor reformatting in spec file.
- Remove service usage, following the new consensus on Factory
  packaging.</changelog>
  <changelog author="dimstar@opensuse.org" date="1312286400">- Update to version 4.2.1:
  + Make QLabel in GUI wrap words.
  + Relaxed http code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1313150400">- Add GPL-2.0+ tag to the main package and the tools subpackage, as
  this is the correct license for the tools and related sources.
  See also bnc#710065.</changelog>
  <changelog author="kruber@zib.de" date="1316606400">- Update to version 4.3.0:
  + added a new method for converting charsets
  + better error handling in the build system</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Add gwenhywfar-gnutls-3.0.3.patch: fix build with gnutls 3.0.3.</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324296000">- Update to version 4.3.1:
  + this version is needed for AqBanking's new support for the
    optical chipTAN method
  + some improvements to the typemaker2 tool</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1324382400">- removed gwenhywfar-gnutls-3.0.3.patch (fixed upstream in 4.3.1)</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1325505600">- included %{_datadir}/aclocal in the devel package</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1331294400">- Update to version 4.3.2:
  + fixes network problems on Windows</changelog>
  <changelog author="Nico.Laus.2001@gmx.de" date="1336564800">- Update to version 4.3.3:
  + do not use the deprecated libgcrypt interface for RSA keys
    anymore (allows compilation with newer libgcrypt versions)</changelog>
  <changelog author="aj@suse.de" date="1341316800">- Change lang package Requires to Recommends since it is not
  mandatory at runtime.</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="nico.kruber@gmail.com" date="1371988800">- Update to version 4.6.0beta:
  + adds a new module for cache handling and some widely used
    functionality
  + major (internal) improvements to typemaker2
  + complete German translation (thanks to Christian)
- Update to version 4.5.0beta:
  + adds some small changes for SEPA transactions needed by
    aqbanking</changelog>
  <changelog author="nico.kruber@gmail.com" date="1377086400">- Update to version 4.7.0beta:
  + contains improvements if the TypeMaker2 tool
  + fixes an error linking libgpg-error.so
  + adds some functions to the GWEN_XML and GWEN_DATE modules
    used by the new AqBanking version 5.0.31beta
  + Info: this is still beta because the MULTICACHE module is
    still work in progress</changelog>
  <changelog author="nico.kruber@gmail.com" date="1382529600">- Update to version 4.8.0beta:
  + new functions to work with dates (module GWEN_DATE,
    e.g.  GWEN_Date_GetLastHalfYearStart())
  + fix some errors in the layout of the  FOX 1.6 GUI module.
  + some improvements in typemaker2.</changelog>
  <changelog author="nico.kruber@gmail.com" date="1389009600">- Update to version 4.9.0beta:
  + adds new code for cipher selection with SSL connections
    (still some problems with the Netbank, please report back)
  + Netbank works setting the GWEN_TLS_CIPHER_PRIORITIES
    environment variable to "NORMAL:-AES-256-CBC"</changelog>
  <changelog author="alarrosa@suse.com" date="1511870400">- Add use-system-trusted-CAs.diff to make gwenhywfar use the system's
  default trusted CAs . Also remove the upstream provided ca-bundle.crt
  file and require ca-certificates so the /etc/ssl/certs directory
  is populated (bnc#958331, CVE-2015-7542).</changelog>
</package>
<package pkgid="609716ed9b8421fd093b7e480a35125b197980afe5c8cb02ff2352a539f52d07" name="gzip" arch="src">
  <version epoch="0" ver="1.6" rel="14.1"/>
  <changelog author="schwab@suse.de" date="1210248000">- Fix zdiff with two compressed files.</changelog>
  <changelog author="schwab@suse.de" date="1231329600">- Fixup rsyncable patch.</changelog>
  <changelog author="sf@suse.de" date="1236686400">- added doc files (README, TODO, ...) (bnc #414305)</changelog>
  <changelog author="jengelh@medozas.de" date="1260100800">- enabled parallel make</changelog>
  <changelog author="mseben@novell.com" date="1263470400">- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff  : fix
  possible denial of service and arbitrary code execution</changelog>
  <changelog author="mseben@novell.com" date="1263902400">- updated to 1.3.13
  - gzip interprets an argument of "-" as indicating stdin, but when
    "-" is not the first name on the command line, it doesn't work.
  - remove useless if-before-free tests
  - remove useless casts to avoid "make syntax-check" failures
  - avoid spurious warnings from clang
  - avoid a leak on a error path
  - don't misinterpret a failing test as successful
  - avoid creating an undersized buffer for the hufts table
    A malformed input file can cause gzip to crash with a segmentation
    violation or hang in an endless loop.
  - avoid silent data loss e.g., on NFS, due to unchecked close of stdout
  - build require automake-1.11 and produce xz-compressed tarballs, too
- deprecated futimens.diff and CVE-2009-2624.diff</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 1.4:
  + gzip -d could segfault and/or clobber the stack, possibly
    leading to arbitrary code execution. This affects x86_64 but
    not 32-bit systems. This fixes CVE-2010-0001. See also
    rh#554418.
  + gzip -d would fail with a CRC error for some valid inputs.
    So far, the only valid input known to exhibit this failure was
    compressed "from FAT filesystem (MS-DOS, OS/2, NT)".  In
    addition, to trigger the failure, your memcpy implementation
    must copy in the "reverse" order.
- Drop gzip-CVE-2010-0001.diff: fixed upstream.
- Remove AutoReqProv: it's default now.
- Use %configure, %makeinstall, and %{_bindir}.
- Update zdiff.diff: some of the patch is upstream now. It's
  unclear to me if the rest is still needed :/ So leaving it.
- Rebase zgrep.diff.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1289649600">- disable silent rules.</changelog>
  <changelog author="rschweikert@suse.com" date="1328616000">- keep binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vcizek@suse.com" date="1350388800">- update to 1.5
  - gzip -cdf mishandles some concatenated input streams: test it
  - gzip -cdf now handles concatenation of gzip'd and uncompressed data
  - gzip: fix a data-loss bug when decompressing with --suffix=''
  - gzip: fix nondeterministic compression results
  - fix "znew -K" to work without use of compress utility
  - Decode FHCRC flag properly, as per Internet RFC 1952.
  - zgrep: fix parsing of -Eh options
  - zgrep: terminate gracefully when a pipeline is interrupted by a signal
  - zgrep: fix shell portability bug with -f; fix mishandling of "-e -"
  - zless: decompress stdin too, if less 429 or later
- dropped gzip-stdio.in.patch, refreshed others</changelog>
  <changelog author="vdziewiecki@suse.com" date="1359460800">- Add support for xz and lzma (bnc#799561 - zgrep silently fails on
  LZMA compressed files) - xz_lzma.patch</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1370865600">- Update to new upstream release 1.6
  * The "--keep" (-k) option was added to not delete input files,
  similar to other tools such as xz, lzip, and bzip2.
  * A decompression issue with certain invalid data in the "pack"
  format was fixed.
  * An incorrect overwrite when compiled with optimization was fixed.
  * zgrep's handling of multi-digit context options was fixed.
  * zmore now acts more like "more".
- More robust make install call
- Provide files for signature verification (we do not actually do
  it because gzip is part of the bootstrap cycle; but if you have
  gpg-offline listed as Support or in ~/.oscrc, it will be done)</changelog>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- add the correct project URL</changelog>
  <changelog author="schwab@suse.de" date="1380196800">- Don't install twice</changelog>
  <changelog author="vdziewiecki@suse.com" date="1399896000">- Remove unneeded update-alternatives requirement (bnc#876129)
- Clean spec</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.6-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
</package>
<package pkgid="9f054b21ba11ac56f9f18e1f7e7786c355dc1e3400c4ee94a5ce2fa5fabe60ee" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.6" rel="14.1"/>
  <changelog author="sf@suse.de" date="1236686400">- added doc files (README, TODO, ...) (bnc #414305)</changelog>
  <changelog author="jengelh@medozas.de" date="1260100800">- enabled parallel make</changelog>
  <changelog author="mseben@novell.com" date="1263470400">- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff  : fix
  possible denial of service and arbitrary code execution</changelog>
  <changelog author="mseben@novell.com" date="1263902400">- updated to 1.3.13
  - gzip interprets an argument of "-" as indicating stdin, but when
    "-" is not the first name on the command line, it doesn't work.
  - remove useless if-before-free tests
  - remove useless casts to avoid "make syntax-check" failures
  - avoid spurious warnings from clang
  - avoid a leak on a error path
  - don't misinterpret a failing test as successful
  - avoid creating an undersized buffer for the hufts table
    A malformed input file can cause gzip to crash with a segmentation
    violation or hang in an endless loop.
  - avoid silent data loss e.g., on NFS, due to unchecked close of stdout
  - build require automake-1.11 and produce xz-compressed tarballs, too
- deprecated futimens.diff and CVE-2009-2624.diff</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 1.4:
  + gzip -d could segfault and/or clobber the stack, possibly
    leading to arbitrary code execution. This affects x86_64 but
    not 32-bit systems. This fixes CVE-2010-0001. See also
    rh#554418.
  + gzip -d would fail with a CRC error for some valid inputs.
    So far, the only valid input known to exhibit this failure was
    compressed "from FAT filesystem (MS-DOS, OS/2, NT)".  In
    addition, to trigger the failure, your memcpy implementation
    must copy in the "reverse" order.
- Drop gzip-CVE-2010-0001.diff: fixed upstream.
- Remove AutoReqProv: it's default now.
- Use %configure, %makeinstall, and %{_bindir}.
- Update zdiff.diff: some of the patch is upstream now. It's
  unclear to me if the rest is still needed :/ So leaving it.
- Rebase zgrep.diff.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1289649600">- disable silent rules.</changelog>
  <changelog author="rschweikert@suse.com" date="1328616000">- keep binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="vcizek@suse.com" date="1350388800">- update to 1.5
  - gzip -cdf mishandles some concatenated input streams: test it
  - gzip -cdf now handles concatenation of gzip'd and uncompressed data
  - gzip: fix a data-loss bug when decompressing with --suffix=''
  - gzip: fix nondeterministic compression results
  - fix "znew -K" to work without use of compress utility
  - Decode FHCRC flag properly, as per Internet RFC 1952.
  - zgrep: fix parsing of -Eh options
  - zgrep: terminate gracefully when a pipeline is interrupted by a signal
  - zgrep: fix shell portability bug with -f; fix mishandling of "-e -"
  - zless: decompress stdin too, if less 429 or later
- dropped gzip-stdio.in.patch, refreshed others</changelog>
  <changelog author="vdziewiecki@suse.com" date="1359460800">- Add support for xz and lzma (bnc#799561 - zgrep silently fails on
  LZMA compressed files) - xz_lzma.patch</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1370865600">- Update to new upstream release 1.6
  * The "--keep" (-k) option was added to not delete input files,
  similar to other tools such as xz, lzip, and bzip2.
  * A decompression issue with certain invalid data in the "pack"
  format was fixed.
  * An incorrect overwrite when compiled with optimization was fixed.
  * zgrep's handling of multi-digit context options was fixed.
  * zmore now acts more like "more".
- More robust make install call
- Provide files for signature verification (we do not actually do
  it because gzip is part of the bootstrap cycle; but if you have
  gpg-offline listed as Support or in ~/.oscrc, it will be done)</changelog>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- add the correct project URL</changelog>
  <changelog author="schwab@suse.de" date="1380196800">- Don't install twice</changelog>
  <changelog author="vdziewiecki@suse.com" date="1399896000">- Remove unneeded update-alternatives requirement (bnc#876129)
- Clean spec</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.6-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
</package>
<package pkgid="85e5991c54339ebadfd9616cfe7397befee74667a6b6ef69c983cba3ef8e507c" name="h2i" arch="x86_64">
  <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>
  <changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
  <changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
  <changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
  <changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
  <changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
  <changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
  <changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
  <changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
  <changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
  <changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
  <changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
  <changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
  <changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
  <changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
  <changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
  <changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
  <changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
  <changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>
</package>
<package pkgid="902246389431d603084355a8ee943d884e26dcca52086a1c83bd98e2bcc69b09" name="ha-cluster-bootstrap" arch="noarch">
  <version epoch="0" ver="0.5" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1409140800">- Fix ha-cluster-init to init sbd configuration with new style (bnc#881484)
- Clean up multiline warnings (bnc#885411)
- Clean up patches:
  - Added 0001-sbd_init_with_new_style.patch
  - Added 0002-clean-up-multiline-warnings.patch
  - Removed fix-ha-cluster-init-not-to-overwrite-sbd-conf-881484.patch
  - Removed improve-ha-cluster-init-check-sbd-watchdog-bnc-881484.patch
  - Removed fix-ha-cluster-init-sbd-with-new-style-bnc-881484.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1410868800">- Silence grep when checking SBD config (bnc#895992)
- Drop merged patches:
  + Remove 0001-sbd_init_with_new_style.patch
  + Remove 0002-clean-up-multiline-warnings.patch
- Upstream version cs:8459115</changelog>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
</package>
<package pkgid="de37a15b9a7739f186e66455e005f432fe55952d2c0b7d79ef88d70499f18354" name="ha-cluster-bootstrap" arch="src">
  <version epoch="0" ver="0.5" rel="2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1409140800">- Fix ha-cluster-init to init sbd configuration with new style (bnc#881484)
- Clean up multiline warnings (bnc#885411)
- Clean up patches:
  - Added 0001-sbd_init_with_new_style.patch
  - Added 0002-clean-up-multiline-warnings.patch
  - Removed fix-ha-cluster-init-not-to-overwrite-sbd-conf-881484.patch
  - Removed improve-ha-cluster-init-check-sbd-watchdog-bnc-881484.patch
  - Removed fix-ha-cluster-init-sbd-with-new-style-bnc-881484.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1410868800">- Silence grep when checking SBD config (bnc#895992)
- Drop merged patches:
  + Remove 0001-sbd_init_with_new_style.patch
  + Remove 0002-clean-up-multiline-warnings.patch
- Upstream version cs:8459115</changelog>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1521201600">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
</package>
<package pkgid="44074b1ba68a74de014b9c2729cff210fe8e8dd1ce699e28a840ffc4a7fb9ed7" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1505978564.e8d29bb3" rel="3.1"/>
  <changelog author="kgronlund@suse.com" date="1476100800">- Update to version 2.0.0+git.1476083916.a1e9463:
  * Allow use of spring 2.0.0</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
  <changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
</package>
<package pkgid="d208dde76c53d8ec424573d82d4b1b4ef6a984724bf84f4edff15f9441f322ec" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1505978564.e8d29bb3" rel="3.1"/>
  <changelog author="kgronlund@suse.com" date="1476100800">- Update to version 2.0.0+git.1476083916.a1e9463:
  * Allow use of spring 2.0.0</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
  <changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
</package>
<package pkgid="a58b76e6c0a75cda11e1ca228a02c9d276e2732d51cf48ec87f232c71f294f29" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1516013868.bada8da4" rel="6.1"/>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
  <changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
  <changelog author="kgronlund@suse.com" date="1516017600">- Update to version 2.1.0+git.1516013868.bada8da4:
  * High: Support guest nodes (bsc#1074856)
  * Show descriptions in cluster config (bsc#1054027)</changelog>
</package>
<package pkgid="b3db4ec97c591c0748f4b4b753878b88db004a73296ff62a67407930bfc09e15" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1516013868.bada8da4" rel="6.1"/>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
  <changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
  <changelog author="kgronlund@suse.com" date="1516017600">- Update to version 2.1.0+git.1516013868.bada8da4:
  * High: Support guest nodes (bsc#1074856)
  * Show descriptions in cluster config (bsc#1054027)</changelog>
</package>
<package pkgid="bb5bdba19e067e0e365c39c47875a429eb71f37cf118851743d29bcb2472e808" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1516013868.bada8da4" rel="9.2"/>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
  <changelog author="kgronlund@suse.com" date="1516017600">- Update to version 2.1.0+git.1516013868.bada8da4:
  * High: Support guest nodes (bsc#1074856)
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="ayoub.belarbi@suse.com" date="1536926400">- Remove json extension from javascript delete operations (bsc#1092108)
- Comply routes' id with resources' ID (bsc#1092108)
- Added patches:
  * 0002-Comply-routes-id-with-resources-ID.patch
  * 0003-Remove-json-extension-from-javascript-delete-op.patch</changelog>
  <changelog author="ayoub.belarbi@suse.com" date="1537185600">- Fix remote nodes iteration (bsc#1080439)
- Handle failure to fetch cluster name-bsc (bsc#1083511)
- Return after redirect in reports (bsc#1090562)
- Fix acl_enabled  (bsc#1069296)
- Fix acl_version check (bsc#1089802)
- Create validation class for colocation and order
- Prevent error through strip method on empty score
- Make resource stop/start icon dependent on target-role (bsc#1076421)
- Set Symmetrical to False when score is Serialize (bsc#1085515)
- Improve hawk-server side cookie handling (bsc#1090667)
- Set secure flag to enforce https (bsc#1090657)
- Add Lukas Krause to Authors list and sort Alphabetically
- Added patches:
  * 0004-Fix-remote-nodes-iteration-bsc-1080439.patch
  * 0005-Handle-failure-to-fetch-cluster-name-bsc-108351.patch
  * 0006-Return-after-redirect-in-reports-bsc-1090562.patch
  * 0007-Fix-acl_enabled-bsc-1069296.patch
  * 0008-Fix-acl_version-check-bsc-1089802.patch
  * 0009-Create-validation-class-for-colocation-and-order.patch
  * 0010-Prevent-error-through-strip-method-on-empty-score.patch
  * 0011-Make-resource-stop-start-icon-dependent-on-target-role-bsc-1076421.patch
  * 0012-Set-Symmetrical-to-False-when-score-is-Serial-bsc-1085515.patch
  * 0013-Improve-hawk-server-side-cookie-handling-bsc-1090667.patch
  * 0014-Set-secure-flag-to-enforce-https-bsc-1090657.patch
  * 0015-Add-Lukas-Krause-to-Authors-list-and-sort-Alphab.patch</changelog>
</package>
<package pkgid="f0dda9c13dd9e0d62664fbd4ad80acf9ac59daa9264b79e812d12d7a6773d643" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1516013868.bada8da4" rel="9.2"/>
  <changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
  <changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
  <changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
  <changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
  <changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
  <changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
  <changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
  <changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
  <changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
  <changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
  <changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
  <changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
  <changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
  <changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
  <changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>
  <changelog author="kgronlund@suse.com" date="1516017600">- Update to version 2.1.0+git.1516013868.bada8da4:
  * High: Support guest nodes (bsc#1074856)
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="ayoub.belarbi@suse.com" date="1536926400">- Remove json extension from javascript delete operations (bsc#1092108)
- Comply routes' id with resources' ID (bsc#1092108)
- Added patches:
  * 0002-Comply-routes-id-with-resources-ID.patch
  * 0003-Remove-json-extension-from-javascript-delete-op.patch</changelog>
  <changelog author="ayoub.belarbi@suse.com" date="1537185600">- Fix remote nodes iteration (bsc#1080439)
- Handle failure to fetch cluster name-bsc (bsc#1083511)
- Return after redirect in reports (bsc#1090562)
- Fix acl_enabled  (bsc#1069296)
- Fix acl_version check (bsc#1089802)
- Create validation class for colocation and order
- Prevent error through strip method on empty score
- Make resource stop/start icon dependent on target-role (bsc#1076421)
- Set Symmetrical to False when score is Serialize (bsc#1085515)
- Improve hawk-server side cookie handling (bsc#1090667)
- Set secure flag to enforce https (bsc#1090657)
- Add Lukas Krause to Authors list and sort Alphabetically
- Added patches:
  * 0004-Fix-remote-nodes-iteration-bsc-1080439.patch
  * 0005-Handle-failure-to-fetch-cluster-name-bsc-108351.patch
  * 0006-Return-after-redirect-in-reports-bsc-1090562.patch
  * 0007-Fix-acl_enabled-bsc-1069296.patch
  * 0008-Fix-acl_version-check-bsc-1089802.patch
  * 0009-Create-validation-class-for-colocation-and-order.patch
  * 0010-Prevent-error-through-strip-method-on-empty-score.patch
  * 0011-Make-resource-stop-start-icon-dependent-on-target-role-bsc-1076421.patch
  * 0012-Set-Symmetrical-to-False-when-score-is-Serial-bsc-1085515.patch
  * 0013-Improve-hawk-server-side-cookie-handling-bsc-1090667.patch
  * 0014-Set-secure-flag-to-enforce-https-bsc-1090657.patch
  * 0015-Add-Lukas-Krause-to-Authors-list-and-sort-Alphab.patch</changelog>
</package>
<package pkgid="4bf9a1001b227cfd66a86041d325f3a12a86d91dfb480bb4af99bad687b16d51" name="hdf5" arch="src">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="c27940c2b3cba7aa7d293ef8319a7ef429a960a79b11c8cc4f64fa9651d56dc8" name="hdf5" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="4bd7ecfbe993d19ed3a03ceada825e31ea5159eece2b23de8796e6e32bf78bcf" name="hdf5-devel" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="8dcb63f5b3595e91e8550130cb4fff9b75c3db1528363ce100d87102c3e848bb" name="hdf5-devel-data" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="c64b0c4594d7de49cd701243c5901c970ba97c443825dcd99c24f771c7b5eddf" name="hdf5-devel-static" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="eeef36ddc86e88a6546eb68c8599eb6419329c4109bfedf7e5106c835fbe9a95" name="hdf5-examples" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="75866f70960ad6b702bb5c587f93ecc2de32e663cb5d6323959201a526f65bd7" name="hdf5-openmpi" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="8226337b720fdc4ff1f9af0772c57626e6c28c2a6969fa75d3bdfb1ef3b28e34" name="hdf5-openmpi-devel" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="1ce0aa9ca8cc88cae23eb07d33214005ae4712f74d61785cee58f0645df89c14" name="hdf5-openmpi-devel-static" arch="x86_64">
  <version epoch="0" ver="1.8.15" rel="7.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1365768000">- Update to 1.8.10-patch1:
  * official important bug fixes for 1.8.10
  * see RELEASE.txt "Bug Fixes since HDF5-1.8.10"</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1370952000">- Update to 1.8.11, changes documented here:
  http://www.hdfgroup.org/HDF5/doc/ADGuide/Changes.html
- remove hdf5-fix_printf.patch, fixed by upstream
- use default CFLAGS (-O2) again if possible</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371038400">- use host config "linux-gnu" for arm (linux-gnueabi) to get useful
  H5_CFLAGS too
- add hdf5-1.8.11-abort_unknown_host_config.patch, to get noticed
  if hdf5 doesn' t know our host
- minimize hdf5-non_void_return.patch, false positives doesn't make
  problems anymore since now we have always -Wmissing-noreturn
- make verbose
- gcc 4.6.x needs -O0 on some systems</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371211200">- increase hdf5_libver to 8</changelog>
  <changelog author="pgajdos@suse.com" date="1379073600">- build with -O0 also for gcc 4.8</changelog>
  <changelog author="schwab@suse.de" date="1380024000">- hdf5-configure-long-double.patch: fix configure check for unsigned long
  long to long double conversion to not fail spuriously for 128bit long
  double
- Increase testsuite timeout for qemu user space build</changelog>
  <changelog author="pgajdos@suse.com" date="1385467200">- update to 1.8.12:
  - Added a configuration option to change the default plugin path.
    The configure option is --with-default-plugindir=location.
    The cmake option is -DH5_DEFAULT_PLUGINDIR:PATH=location.
    HDFFV-8513.  (ADB 2013/09/04)
  - Renamed FFLAGS to FCFLAGS in configure. (ADB 2013/08/13)
  - CMake can now package a compressed examples file, the default for
    Windows binaries from HDF Group.  (ADB  - 2013/07/22)
  - h5repack: Added the ability to use plugin filters to read and write
    files. The option uses the filter number. HDFFV-8345
    (ADB - 2013/09/04).
  - h5dump: Added the option -N --any_path, which searches the file for
    paths that match the search path. HDFFV-7989 (ADB - 2013/08/12).
  - h5dump: Added the optional arg 0 to -A, which excludes attributes
    from display. HDFFV-8134 (ADB - 2013/08/01).
  - Added tutorial examples to C++/examples.  They can be installed by
    "make install-examples" and, in the installed directory, they can be
    executed by running the script file run-c++-ex.sh. (BMR - 2013/09/28)
  - A new class, H5::H5Location, is added to represent the location concept
    in the C library.  It is a base class to H5::H5File and H5::H5Ojbect,
    whose member functions are moved into H5::H5Location.  H5::H5File can
    now inherent those functions.  As a result, an H5::H5File object can have
    an attribute. (BMR - 2013/09/27)
  - Added wrappers for H5Rget_obj_type2 to retrieve the type of the object
    that an object reference points to. (BMR - 2013/09/27)
  H5O_type_t H5Location::getRefObjType(void *ref, H5R_type_t ref_type)
  - Added wrappers for H5Aexist to check whether an attribute exists given
    a name. (BMR - 2013/09/27)
  bool H5::H5Location::attrExists(const char* name)
  bool H5::H5Location::attrExists(const H5std_string&amp; name)
  - Added a number of overloaded functions for convenience. (BMR - 2013/09/27)
  - bugfixes
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.12-RELEASE.txt
    for more</changelog>
  <changelog author="matz@suse.de" date="1388923200">- Detect IBM long double specialness on ppc64le and don't segfault
  int the testsuite when checking that type.
  Added patches:
  * hdf5-ldouble-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.8.13:
  - Added an H5free_memory API call. This should be used to free memory
    that has been allocated by HDF5 API calls. H5Tget_member_name and
    H5Pget_class_name are two examples. The main motivation for this call
    is Windows, where it is common for application code and the HDF5 Library
    to be using different C run-time libraries (CRT). Using the new call
    ensures that the same CRT handles both the allocation and free. This
    new function can also be useful in any case where the library uses a
    different memory manager than the application, such as when a debug
    memory manager is in use or when the HDF5 Library is wrapped for use
    in a managed language like Python or Java. Fixes HDFFV-7710, 8519,
    and 8851. (DER - 2014/04/11)
  - The Core VFD (aka Memory VFD) can now be configured to track dirty
    regions in the file and only write out the changed regions on
    flush/close. Additionally, a "page aggregation" size can be set that
    will aggregate small writes into larger writes. For example, setting
    a 1 MiB page aggregation size will logically partition the the
    in-memory file into 1 MiB pages that will be written out in their
    entirety if even a single byte is dirtied. The feature is controlled
    via the new H5Pset/get_core_write_tracking() API call. A new
    "core_paged" target has been added to the check-vfd target in
    test/Makefile.am that exercises the feature over all HDF5 VFD-aware
    tests. (DER - 2014/04/12)
  - see http://www.hdfgroup.org/ftp/HDF5/current/src/hdf5-1.8.13-RELEASE.txt
    for more
- modified patches:
  * hdf5-LD_LIBRARY_PATH.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 1.8.14:
  * bugfix release, see RELEASE.txt</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1420804800">- fix typos in ChangeLog</changelog>
  <changelog author="pth@suse.de" date="1421150400">- Tag baselibs.conf as source.</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- update hdf5-non_void_return.patch for GCC 5.x</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437566400">- update to 1.8.15
  * New Features
    + Library
  - Added Memory Allocation Functions that Use the Library's Allocator
  - H5Pset_istore_k and H5Pset_sym_k added validation of "ik" to not
    exceed the max v1 btree entries (2 bytes) to these two routines.
  - Added Functions to Control the Value of H5PL_no_plugin_g without
    Using an Environment Variable
    + Parallel Library
  - Attached an attribute destroy callback to MPI_COMM_SELF that
    shuts down the HDF5 library when MPI_COMM_SELF is destroyed,
    in other words, on MPI_Finalize. This should fix several issues
    that users see when they forget to close HDF5 objects before
    + Fortran API
  - Added Global Variables. These new global variables are equivalent to
    the C definitions  without the '_F':
    o H5G_UDLINK_F
    o H5G_SAME_LOC_F
    o H5O_TYPE_UNKNOWN_F
    o H5O_TYPE_GROUP_F
    o H5O_TYPE_DATASET_F
    o H5O_NAMED_DATATYPE_F
    o H5O_TYPE_NTYPES_F
    + C++ API
  - New Wrappers for C Functions H5P[s/g]et_libver_bounds
  - New Wrappers to Get the Object Header's Version
  - New DataType Constructor
    + Support for New Platforms, Languages, and Compilers
  - Support for Linux 3.10.0-123.20.1.el7 added (LK - 2015/04/01)
  * Bug Fixes since HDF5-1.8.14
    + Library
  - Addition of Error Tracing Functionality to Several C API Calls
  - H5Rdereference Now Checks for HADDR_UNDEF or Uninitialized References
  - Fixed Bugs in H5Sextent_copy
    + Parallel Library
  - Fixed a Potential Memory Error
  - Parallel Test Problem Fixed
  - MPE Support
    + Tools
  - h5repack crashed on enumerated 8-bit type.
  - h52gif crashed non-8bit images.
  - perform/benchpar.c retired.
  - Source perform/ directory moved to tools/perform.
    + Fortran API
  - Fortran Fails with --enable-fortran2003 and Intel 15.x Compilers
  - h5tenum_insert_f Does Not Work with Default 8 Byte Integers
    (xlf compiler)
  - Some Fortran APIs Never Returned the Error State
  - Fixed h5pget_class_f
    + C++ API
  - Combined Two H5File::getObjCount Overloaded Methods
    The following two methods
    o ssize_t getObjCount(unsigned types) const;
    o ssize_t getObjCount() const;
    were combined into one:
    o ssize_t getObjCount(unsigned types = H5F_OBJ_ALL) const;
  - Many Warnings Were Removed
  - Functionality Deprecation
    The following two constructors of classes AbstractDs, IdComponent,
    H5Location, and H5Object are no longer appropriate after the data member
    "id" had been moved from IdComponent to the sub-classes in previous
    releases.
    o &lt;Classname&gt;(const hid_t h5_id);
    o &lt;Classname&gt;(const &lt;Classname&gt;&amp; original);
    The copy constructors were no-op and removed in 1.8.15.  The other
    constructors will be removed from 1.10 release, and then from 1.8.17
    if their removal does not cause any problems.
    + High-Level APIs:
  - Suppress Warnings from Flex/Bison-generated Code
  - Changed hdf5_hl.h to Include the HDF5 Main Library "hdf5.h"
  - H5PTcreate_fl Does Not Convert to Memory Datatype
  - Fix for H5LT Attribute Functions
    + Fortran High-Level APIs:
  - Internal Library Fix for Missing Argument Declaration
- Build in thread-safe mode to allow parallel reads
  * These are only unsupported to avoid confusing casual users.
    The fotran and C++ libraries don't support thread-safe mode,
    while the C library does.  So you have to explicitly allow
    building the thread-safe C library and the non-thread-safe C++
    and fortran libraries in order to make sure only people who
    have done their research do so.  Since users are going to be
    accessing this through other programs, this doesn't matter.
- Build fortran 2003 libraries
- Rebase hdf5-non_void_return.patch
- Remove irrelevant hdf5-configure-long-double.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437652800">- Fix baselibs.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998400">- Use explicit library requirements to avoid ambiguities.
  Without this, packages that depend on hdf5 won't know which
  library to use.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1437998401">- Update subpackage groups
- Make subpackage summaries and descriptions more consistent
- Provide rpm macros for version identification
- Spec file cleanups</changelog>
  <changelog author="badshah400@gmail.com" date="1439467200">- Add hdf5-cpp-compilation-errors.patch: Reverts a change from
  v1.8.15 to H5api_adpt.h that caused compilation errors for C++
  HDF5 applications; patch taken from upstream svn.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440158400">- Currently the regular, openmpi, and mpivachi2 versions of the
  library packages all provide the exact same libraries.  So any
  package built against the -devel package will end up with an
  "unresolvable" build error because there are multiple versions
  of the library it can use. To avoid this, I have added generic
  provides for the library package so packages can depend on the
  version they really need, avoiding these build issues.</changelog>
  <changelog author="adrian@suse.de" date="1523534400">- fix security issues (arbitary code execution):
  CVE-2016-4330: H5T_ARRAY Code Execution (bsc#1011201)
  CVE-2016-4331: H5Z_NBIT Code Execution (bsc#1011204)
  CVE-2016-4332: Shareable Message Type Code Execution (bsc#1011205)
  CVE-2016-4333: Array index bounds issue (bsc#1011198)
  add hdf51.8-CVE2016.patch</changelog>
</package>
<package pkgid="0ad28d9d1cf829f888ab83aaf08db1ebe4e8a2ef1ccd5088cbe4ca93889c200e" name="hdjmod" arch="src">
  <version epoch="0" ver="1.28" rel="27.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
</package>
<package pkgid="645daff19a696797dc4f30d7bbdfce2cdd75ba8fe3407491785a6a8a8d75df6c" name="hdjmod" arch="src">
  <version epoch="0" ver="1.28" rel="27.4.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
</package>
<package pkgid="78fb5fbfffbbdec20a95d94c8deed0beae094b0dab7687b3380670ebbbb4dd3a" name="hdjmod-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.28_k4.4.114_42" rel="27.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
</package>
<package pkgid="95087bdbf779c9767983fb0a4e642110a92eab339a523b58a4af9f355c6272a2" name="hdjmod-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.28_k4.4.132_53" rel="27.4.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
</package>
<package pkgid="b80287671f4fce0f56a5dc9956099a2d82cbc3e8ef3c2a6d9cf850419102e769" name="hostapd" arch="src">
  <version epoch="0" ver="2.6" rel="11.1"/>
  <changelog author="ro@suse.de" date="1222171200">- drop buildreq for madwifi (dropped package)</changelog>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
</package>
<package pkgid="b7670ae5e1f2d938e1b1e49e1544a2fbe923c85106bb4ed9203165fbd891d88b" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.6" rel="11.1"/>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
</package>
<package pkgid="002cb3e9787123e7f6f066ffb8ed9e7c3651fc065aa0d87962d15c2e6ddde760" name="hostapd" arch="src">
  <version epoch="0" ver="2.6" rel="8.1"/>
  <changelog author="ro@suse.de" date="1222084800">- updae to version 0.5.10, changes:
  * fixed EAP-SIM and EAP-AKA message parser to validate attribute
    lengths properly to avoid potential crash caused by invalid messages
  * fixed Reassociation Response callback processing when using internal
    MLME (driver_{hostap,devicescape,test}.c)
  * fixed EAP-SIM/AKA realm processing to allow decorated usernames to
    be used
  * added a workaround for EAP-SIM/AKA peers that include incorrect null
    termination in the username
  * fixed EAP-SIM Start response processing for fast reauthentication
    case
  * copy optional Proxy-State attributes into RADIUS response when acting
    as a RADIUS authentication server
- update to version 0.5.9, changes:
  * updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
    draft (draft-ietf-emu-eap-gpsk-07.txt)
  * fixed debugging code not to use potentially unaligned read to fetch
    IPv4 addresses</changelog>
  <changelog author="ro@suse.de" date="1222171200">- drop buildreq for madwifi (dropped package)</changelog>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
</package>
<package pkgid="0dd7e6075e78c0f5e7e595d104ebddeaffca265a4021a22a94f0e75272580c98" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.6" rel="8.1"/>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
</package>
<package pkgid="1efe99ebb18ff9ebfd82f29d03170c75be9e8db96a31d2fd9eb2724d77d754a9" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.301" rel="6.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
</package>
<package pkgid="3951b25ec29acda299f9170cd61f0ed38a933fb382cf376e1aac092ca5000415" name="hwdata" arch="src">
  <version epoch="0" ver="0.301" rel="6.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
</package>
<package pkgid="f91d0f51383f73fd2f407201dcfba8e99efce1adc3cd23bbcce1fe33b90f71bf" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.308" rel="9.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="0d6fd6af20c29f12afa08f1a31b2fbf2773dbe85e14f2a69e01a3b8a61d6861a" name="hwdata" arch="src">
  <version epoch="0" ver="0.308" rel="9.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="9f69817e31a56b7e2bc7b3c92ede23f1303e0660a3161594aad0c63b6bdffe59" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.314" rel="12.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="96497666edd2dcf75d5367857f9a77b53c6db203c667c969ff249d9c8e645e43" name="hwdata" arch="src">
  <version epoch="0" ver="0.314" rel="12.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="48cfdbd79f54e392fea782eddf5232b485c6bb34e59ac355e9a2f9c88dbc94a8" name="hwinfo" arch="src">
  <version epoch="0" ver="21.50" rel="3.1"/>
  <changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
  <changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
  <changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
</package>
<package pkgid="ef804a5f0ce82b55a0bd79eba673327e29d73df817d7155cdce76d173eb64fc7" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.50" rel="3.1"/>
  <changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
  <changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
  <changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
</package>
<package pkgid="db8927ff9c3eaef58ae23c3780dc962eb58e81e68ad38c949067a428e409f0a6" name="hwinfo" arch="src">
  <version epoch="0" ver="21.53" rel="6.1"/>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
</package>
<package pkgid="d372bf905425b4fb0237e61902d764e57872503d58842feba67bcde14f58f08b" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.53" rel="6.1"/>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
</package>
<package pkgid="2c0d45fcb85e9f16db6d5cc94b21652e647edf83afc7cc8ef51613a5434a07e7" name="hwinfo" arch="src">
  <version epoch="0" ver="21.57" rel="9.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="snwint@suse.de" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="snwint@suse.de" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="snwint@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="cd39ce4b57742b7c19a1bb1e425b12718d9600203ff00a0b454c10245621e93a" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.57" rel="9.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="snwint@suse.de" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="snwint@suse.de" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="snwint@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="4b3c7a01808a502ae7759a3b45556e37b1eccf08a8bd65c3e7e06805a00d21d9" name="hwinfo" arch="src">
  <version epoch="0" ver="21.62" rel="12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
</package>
<package pkgid="d9121339eac4a40dc69829b8c6724093f0a0f95dd8c9cb43be35986997aed7aa" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.62" rel="12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
</package>
<package pkgid="1f61251844c256021346421329fa276c2c35ebd4aa8758abd327a43003a53cb1" name="hwinfo" arch="src">
  <version epoch="0" ver="21.63" rel="15.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="8c3657fc2c49fac04931aae51d7397e0329a03650ef001161e43592be59c70dd" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.63" rel="15.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="f8a9d0f300dc1a6e70a6b3efa52bd6ef76e10090eb36fb5722cbfa721d7acab4" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.50" rel="3.1"/>
  <changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
  <changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
  <changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
</package>
<package pkgid="3778c8268a2da8e9e1bcd6e8f4e4b4f409c5d91bedb6fed5318c29d7bf184d19" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.53" rel="6.1"/>
  <changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
  <changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
  <changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
  <changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
</package>
<package pkgid="479265449e1a049dece53962b20c25cdd7bbbe76611ed20571d20dba0bcb2910" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.57" rel="9.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="snwint@suse.de" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="snwint@suse.de" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="snwint@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="199e5173459ce2cb4b08162b5acb306abc6628486c4b6423cdc9a186367cff46" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.62" rel="12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
</package>
<package pkgid="17477b7a9a80c0b9fd63a569bce2e060852a007871bec47225b1e8ab9fcd3a61" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.63" rel="15.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="773bb20d7ca2cc4decddfce5140b2c3094eb5248174ab99be7af1df771d33c63" name="hylafax+" arch="src">
  <version epoch="0" ver="5.5.9" rel="12.1"/>
  <changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
  <changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
  <changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
</package>
<package pkgid="da7ee65df6b125e420d0ea4e94b4703094319701f1bff9d7e938c8456b2d082b" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="12.1"/>
  <changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
  <changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
  <changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
</package>
<package pkgid="7784b07cf280d9dc12b1debe009b2c3d3ae6823e72e13b22fc7a10846343b13a" name="hylafax+" arch="src">
  <version epoch="0" ver="5.6.1" rel="15.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="a2fea8550b9c680a8331600d119c0ea5d298130c6d8697b1bc1d2dbd95e69b4d" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="15.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="41d903292652d51f20898f762a7468439f692243ccf1ef0549dcc0c3d35cb4d9" name="hylafax+" arch="src">
  <version epoch="0" ver="5.6.1" rel="18.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="4cee2355fdf77d509afd1912160d3eaf28c776d976a7a786a9e698ba019befcd" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="18.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="3d57ea78a9764b0285d3c3d7928521a655c46e7651793a9b4506094fc9354db3" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="12.1"/>
  <changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
  <changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
  <changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
  <changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
</package>
<package pkgid="cc0388368a2c5965e5ed5d4629f09276a500bd48bef749e80b87843c3e144ad4" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="15.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="bcaaf3691036959063ed7440f9f410af0bbb33a22bef22137d487280e568b9bc" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="18.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="efc58ad3647584ce4f40e13f01431ab9c83fb5dc000f9a2e367aaf44158330b8" name="hyper-v" arch="src">
  <version epoch="0" ver="7" rel="5.1"/>
  <changelog author="ohering@suse.de" date="1378641600">- Update Supplements: modalias(dmi:*)</changelog>
  <changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
</package>
<package pkgid="1ab20d6b447239cda564c245f37e43a16117bc64b619508c2d5c16e0f2c2df5a" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1"/>
  <changelog author="ohering@suse.de" date="1378641600">- Update Supplements: modalias(dmi:*)</changelog>
  <changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
</package>
<package pkgid="bdeabad8a4404f7b0181f48f3c0bce3bb3245f555cf03f376f65fdc429ea273b" name="hyper-v" arch="src">
  <version epoch="0" ver="7" rel="8.1"/>
  <changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
</package>
<package pkgid="249d22225d57c6f4ed66b319b79a57f2ed4a90e2340db8f68dd211bec9de04b1" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="7" rel="8.1"/>
  <changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
</package>
<package pkgid="1a1560367d063bead9682fe698cb0e02195ea2d89cc3a39c273f441a2043ab2a" name="ibacm" arch="x86_64">
  <version epoch="0" ver="14" rel="11.1"/>
  <changelog author="pth@suse.de" date="1493121600">- Fix Group for rdma-core.</changelog>
  <changelog author="fcrozat@suse.com" date="1493208000">- specfile cleanup, remove libibverbs-devel subpackage, since it no
  longer exists.
- ibacm shouldn't obsolete its older versions.</changelog>
  <changelog author="pth@suse.de" date="1493380800">- Update to git version fd1db488 as it now contains the bnxt drivr.
  No log of changes present (fate#321907).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493899200">- Provide ofed for legacy packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493985600">- Remove redundant Requires on ldconfig (-p already does this).
- Add missing systemd requires.
- RPM group assignment fixes.
- Remove pointless comments which cause scriptlets to be not empty
  in some cases.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Update to rdma-core v14-rc1 (bsc#1016427).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494504000">- Add baselibs.conf to generate -32bit libraries (bsc#1038742).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849600">- Update to 14-rc1-40-g706fc2af (fate#321907, bsc#1020415).
  No releases notes. Contains libbnxtre bug fixes</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849601">- Split rdma-ndd into its own package to replace previous package
  from infiniband-diags (bsc#1039146).</changelog>
  <changelog author="pth@suse.de" date="1495540800">- Fix rdma.service which had /usr/libexec hardcoded (bsc#1039999).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496059200">- Fix all references to /usr/libexec (bsc#1039999)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Update to v14 (bsc#321907).
  * Introduction of bnxt_re driver
  * Rework srp_daemon's systemd integration
  * Various fixes in qedr, mlx4, mlx5, bnxrt_re and rxe drivers
  * New supported PCI ID were added to mlx5
  * Addition of manual pages for cmtime and udpong programs
  * Multiple fixes of spelling types and documentation clarifications
  * Sparse fixes
  * rping gained ability to bind to source IP address
  * Various improvements in cmake and cbuild infrastructures
  * Add support for flow tag, CVLAN and VXLAN specifications
  * Provide ability to pass private data to create CQ
  * Exposure various device capabilities to user applications</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496836800">- Add patch rdma-core-s390x.patch to fix s390x build (bsc#1043105).
  * Add missing verbs providers for s390x
  * Add mlx5 package for s390x
- libibverbs1 requires libibverbs (bsc#1042840).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505304000">- Remove dependency to dracut (bsc#1058504)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Backport Broadcom patches from v15 (bsc#1060413)
  * Add bnxt_re-Add-Broadcom-BCM57454-BCM58730-BCM57452-BCM58802-devices.patch
    to support new Broadcom devices
  * Add bnxt_re-Fix-Wimplicit-fallthrough-warnings-in-GCC-7.1.patch
    to fix GCC 7 warnings</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513857600">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520337600">- Add qedr-Set-immediate-data-sent-via-EDPM-as-is.patch
  to fix rcopy on QLogic hardware (bsc#1083169)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
</package>
<package pkgid="a02e8fbd51992a41f6633c85fa9959ccfa67e04de52ae5e2b64de519f5a476c8" name="ibacm" arch="x86_64">
  <version epoch="0" ver="14" rel="8.1"/>
  <changelog author="pth@suse.de" date="1490184000">- fix Provides/Obsoletes</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Comment out the -devel requiring ibacm for bootstrapping.</changelog>
  <changelog author="pth@suse.de" date="1493121600">- Fix Group for rdma-core.</changelog>
  <changelog author="fcrozat@suse.com" date="1493208000">- specfile cleanup, remove libibverbs-devel subpackage, since it no
  longer exists.
- ibacm shouldn't obsolete its older versions.</changelog>
  <changelog author="pth@suse.de" date="1493380800">- Update to git version fd1db488 as it now contains the bnxt drivr.
  No log of changes present (fate#321907).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493899200">- Provide ofed for legacy packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493985600">- Remove redundant Requires on ldconfig (-p already does this).
- Add missing systemd requires.
- RPM group assignment fixes.
- Remove pointless comments which cause scriptlets to be not empty
  in some cases.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Update to rdma-core v14-rc1 (bsc#1016427).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494504000">- Add baselibs.conf to generate -32bit libraries (bsc#1038742).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849600">- Update to 14-rc1-40-g706fc2af (fate#321907, bsc#1020415).
  No releases notes. Contains libbnxtre bug fixes</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849601">- Split rdma-ndd into its own package to replace previous package
  from infiniband-diags (bsc#1039146).</changelog>
  <changelog author="pth@suse.de" date="1495540800">- Fix rdma.service which had /usr/libexec hardcoded (bsc#1039999).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496059200">- Fix all references to /usr/libexec (bsc#1039999)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Update to v14 (bsc#321907).
  * Introduction of bnxt_re driver
  * Rework srp_daemon's systemd integration
  * Various fixes in qedr, mlx4, mlx5, bnxrt_re and rxe drivers
  * New supported PCI ID were added to mlx5
  * Addition of manual pages for cmtime and udpong programs
  * Multiple fixes of spelling types and documentation clarifications
  * Sparse fixes
  * rping gained ability to bind to source IP address
  * Various improvements in cmake and cbuild infrastructures
  * Add support for flow tag, CVLAN and VXLAN specifications
  * Provide ability to pass private data to create CQ
  * Exposure various device capabilities to user applications</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496836800">- Add patch rdma-core-s390x.patch to fix s390x build (bsc#1043105).
  * Add missing verbs providers for s390x
  * Add mlx5 package for s390x
- libibverbs1 requires libibverbs (bsc#1042840).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505304000">- Remove dependency to dracut (bsc#1058504)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Backport Broadcom patches from v15 (bsc#1060413)
  * Add bnxt_re-Add-Broadcom-BCM57454-BCM58730-BCM57452-BCM58802-devices.patch
    to support new Broadcom devices
  * Add bnxt_re-Fix-Wimplicit-fallthrough-warnings-in-GCC-7.1.patch
    to fix GCC 7 warnings</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513857600">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1049515)</changelog>
</package>
<package pkgid="9660ed5ac634dc65e3def9960ee27805b4b9a04a82ee85412406dfb9eb0564d8" name="ibus" arch="src">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="67d1bb6f85b4825109b4df618be687915d8d886b573391d4050a983d363a2c0d" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="cfe1ec04b2f97d534f9beb4ce2f35a73facb35f2eea8649cc7ecf68ff68fc22e" name="ibus" arch="src">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="2deda6108e69f9a6a5b9193429dd822c20c6a78f5b13cf980cb6f68569d6c15b" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="67b88f1ad85bb41e1e6f98caab54cb7ef109b402bb7a10d04ad2d08937481932" name="ibus-branding-openSUSE-KDE" arch="noarch">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="2a817ac2fe731f112dce4c0d298532a2bbad21f2e7a5a9aab0bf159b8d9b4215" name="ibus-branding-openSUSE-KDE" arch="noarch">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="38d27bec9167be1bddd72693954a1f5380387bce175b90c391bca172aa19bc2a" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="c1737f3fa8a71198d2a5fe564cd1823c2275a90dae960623143b99593d34f545" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="d2c006ab1e98656695382bb82eefa47bc9551d371afa60d9c5a4cc4f59315960" name="ibus-gtk" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="397cacde1d9f363ab0186b30abb611bb81fd28c8a8e59d72281db5f9bb3354cd" name="ibus-gtk" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="8821804541285d452deff3443ba479e08e15d3f49c31f4fa5798d91cd2673a86" name="ibus-gtk-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="58716c5a9342023b0cb2186f5d83649693578db240a1bb24bee4dcba973a8c5f" name="ibus-gtk-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="b51295f75ccdb08be673632d19fce8e2d68163cb0c2786a0738a73828bf496c8" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="eccea2c372f4b2ef3549dcc784e1b6a34622af40cd97881b49468bf034dfe005" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="84a629a283dfed5052561a2cd4b6baab6dd5ce2b532955c29464a78a85384a62" name="ibus-gtk3-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="3097aba95ed1f38ee49bba93da80cd43345becad76be509a24926df8e23c0faf" name="ibus-gtk3-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="7a14b822b9c4afdace2084665ec2f1e328b8a2c739678128fe017c6a34073281" name="ibus-lang" arch="noarch">
  <version epoch="0" ver="1.5.13" rel="5.3.1"/>
  <changelog author="ftake@geeko.jp" date="1412769600">- Add im-engines-precede-xkb.patch
  * allow users to use an IM engine without any operation
- Update the launch script
  * remove the obsolete part for SKIM (bnc#860486)
  * do not set OOO_FORCE_DESKTOP=gnome
    if libreoffice-gnome is not installed (bnc#899045)</changelog>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
</package>
<package pkgid="4b453b3e3c4bcb13c8a99397c2300a8fd892cec261ace752846f2302c54cd66b" name="ibus-lang" arch="noarch">
  <version epoch="0" ver="1.5.13" rel="5.6.1"/>
  <changelog author="gber@opensuse.org" date="1413201600">- use desktop file categories Settings;DesktopSettings instead of
  System</changelog>
  <changelog author="hillwood@linuxfans.org" date="1413288000">- Update to 1.5.9
  * Enable preedit color on external preedit window with x11 applications.
  * Do not fail ibus-setup when en_US.UTF-8 is not installed.
  * Fix compose keys in French layout bepo variant.</changelog>
  <changelog author="coolo@suse.com" date="1416657600">- disable parallel build for install - not much gain and makes it
  less reliable</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1422100800">- modify xim.d-ibus-121: remove obsolete 'PATH=$OLD_PATH' which
  causes loss of the PATH variable when sourced</changelog>
  <changelog author="ftake@geeko.jp" date="1426161600">- Update to 1.5.10
  * Fix losing focus in/out on Google Chrome
  * Fix SEGV of ibus-ui-gtk3 caused by inappropriate 'preload-engines'
  * ibus-setup tries C locale to support environment without
    en_US.UTF-8
  * Remove "Release" modifier key from ibus-setup
  * Show language rather than layout for xkb panel icon
  * Track window property offsets correctly
  * Add IBus panel icon for Plasma 5 desktop
  * Minor bug fixes
- Update show-input-mode-icon.patch
  * Support the new panel icon
- Add appindicator-absolute-icon-path.patch
  * Show icons installed out of theme directories</changelog>
  <changelog author="ftake@geeko.jp" date="1427544000">- Fix boo#924696: settings of ibus engines are not saved
  * Remove inappropriate %ghost from the dconf files
- Disable appindicator for 13.1
  * It requires Qt 5.3 to show icons specified by absolute path</changelog>
  <changelog author="ftake@geeko.jp" date="1439208000">- Update to 1.5.11
  * Add Swedish svdvorak layout support
  * Improve UI of ibus-setup
  * Show property panel at bottom right under KDE
  * Enable absolute path to icon for appindicator
  * Support showing language icon and a property for Plasma 5
  * Use GTK 3 for xim
  * Load locale compose files dynamically
  * Enable sync mode for xim
  * Support vertical writing
- Enable appindicator status icon for SLE12 and Leap 42.1
  (boo#939506)
- Remove a bashism from /etc/xim.d/ibus (boo#941052)
- Requires newer vala compiler
  * Cannot compile with an incompatible return type error
  * 13.1 support should be dropped after the cause is confirmed
- Drop appindicator-absolute-icon-path.patch
  * Merged by upstream
- Add ibus-fix-check-abs-icon-path-support.patch
  * Allows to force absolute path regardless of Qt version
- Refresh show-input-mode-icon.patch
  * Do not scale up icon for the new appindicator status icon</changelog>
  <changelog author="tiwai@suse.de" date="1456315200">- Fix the invocation of ibus service for KDE, etc (boo#968486):
  for DEs known to support autostart (KDE, XFCE and LXCE), ibus is
  now started via XDG autostart for avoiding the race.  This should
  fix the missing ibus service.  For other DEs, ibus is still
  started in xim script, but with a slight (two seconds) delay for
  avoiding the race, too.
  Along with the change, INPUT_METHOD environment variable is set
  explicitly in xim script at startup; this is referred in XDG
  autostart so that it won't be executed when other IM is chosen.
  Last but not least, the explicit dbus-launch invocation is dropped,
  as it's known to conflict with DE's own startup of dbus</changelog>
  <changelog author="qzhao@suse.com" date="1456660800">- Add hide-setup-menu.patch
  Make ibus-setup launch from indicator field.(bnc#899259)
  Remove ibus-setup.desktop from main menu. This patch is only
  for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660801">- Add setup-switch-im.patch. Switch to ibus when ibus not
  running.(bnc#899259). This patch is only for SLED.</changelog>
  <changelog author="sbrabec@suse.com" date="1456660802">- Add support for translation-update-upstream (dummy bsc#933411).</changelog>
  <changelog author="qzhao@suse.com" date="1456660803">- Add conflict to fcitx to fulfill FATE#319095
  deprecate fcitx chinese input method in favor of ibus
  (dummy bsc#933411). This modification is only for SLED.</changelog>
  <changelog author="qzhao@suse.com" date="1456660804">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler, for SLE Desktop 12 SP2. This patch is only
  for SLED.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add ibus-gvariant-leaks.patch (gh#ibus/ibus#1956, bsc#1093541).</changelog>
</package>
<package pkgid="40de2b6c3ac4fb2970601e9f3d4550ea898c6c9b4c8cf531acf0e6a93a8e7232" name="icecast" arch="src">
  <version epoch="0" ver="2.4.2" rel="7.3.1"/>
  <changelog author="tiwai@suse.de" date="1160568000">- added icecast-2.3.1_runas_icecast_user.patch:
  run icecast as "icecast" user and group by default
- added init script
- added log/home dir to the fileist
- dont run suse_update_config/autoreconf seems unneeded.
  (tested with the buildservice on 10.0-&gt;Factory)
- replaced manual configure call with %configure</changelog>
  <changelog author="tiwai@suse.de" date="1166529600">- fix comparison of string literal in cfgfile.c (#226380).</changelog>
  <changelog author="mmarek@suse.cz" date="1170417600">- fix build with curl-7.16
- fixed more comparison with string literals by using static char*
  variables instead of #defines to string constans to detect
  whether a default or malloced value is used</changelog>
  <changelog author="tiwai@suse.de" date="1213790400">- updated to version 2.3.2:
  * Character set support
  * Authentication improvements
  * Listening socket update
  * XSL update
  * Updates for stream directory handling.
  * Updates for Win32.
  * Accept/Ban IP support.
  * A Mountpoint is exported to the slaves even if no mount
    section is defined for it.
  * Relays handle redirection (HTTP 302) if one is received at
    startup.
  * Automatically generate XSPF playlist like we do with M3U, the
    mountpoint extension is .xspf
  * Header updates for proxy handling and certain clients like
    some shoutcast source clients and flash players.
  * Added Kate/Skeleton codecs to Ogg handler.
  * Various stats cleanups.
  * The streamlist passed from master to slave had a limited
    length
  * Documentation updates.
  * Relay startup/shutdown is cleaner.
  * several build cleanups.
  * several resource leaks and race conditions fixed</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="c1356192c742155bdc434e2e5dd7e453545b724d78155d7ac795246aa37d83eb" name="icecast" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="7.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="641ed99f3053122a560450fc8ed11c6b74affd123991c25131264642969757cd" name="icecast-doc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="7.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="a0dadb3a7cbfa55b5dedbbe9d783ac74dd4fd226b66e9405168708d9488d93fb" name="icedax" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="25.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1254484800">- build require zlib-devel and fix cmake scripts to detect
  when it is missing.</changelog>
  <changelog author="seife@opensuse.org" date="1266235200">- fix xconfig.h installation with newer cmake</changelog>
  <changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow warnings from gcc-4.5</changelog>
  <changelog author="reddwarf@opensuse.org" date="1285675200">- updated to 1.1.10:
  * genisoimage: add support for sha256 and sha512 checksum generation
    when making jigdo files.
  * genisoimage: checksumming with lots of algorithms can be very
    time-consuming, so split it out into multiple threads if possible.
  * genisoimage: allow user to specify which checksum algorithms to run
    on the command line.
  * Fix FTBFS with missing xconfig.h. Thanks to Matt Kraai for the patch.
  * genisoimage: fix string overflow breakage when using the -root
    option (https://bugzilla.redhat.com/show_bug.cgi?id=508449)
  * librols: remove or rename several functions that clash with POSIX.
    Fix up callers.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- updated to 1.1.11:
  * genisoimage: Fix silly bug in MD5 output in template files. (Debian
    bug #596681)
  * genisoimage: Minor tweaks to the the genisoimage.1 man page.
  * genisoimage: Update references to atterer.org (Debian bug #596860)
  * genisoimage.1: Make the description of the md5-list format clearer.
  * genisoimage: Use memmove() instead of strcpy() when cleaning
    up graft points.
- Spec file updates:
  - Changes based on rpmdevtools templates and spec-cleaner run.
  - Changed License: to GPLv2.
  - Added description for patches based on openSUSE Patches Guidelines (where
    possible).
  - Updates in Buildrequires:, Requires:,
  - Updates in %prep, %build and %install sections.
  - Fixed rpmlint warnings ("description-shorter-than-summary" for wodim-devel
    and "files-duplicate").
  - Other updates based also on Fedora package.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1301918400">- Spec file updates:
  * Added "libbz2-devel" in BuildRequires:.
  * Added "permissions" package in Requires:.
  * Moved mkhybrid to cdrkit-cdrtools-compat.
  * Install also libedc.a library.
  * Changed the installation path of header files (to be more compatible with
    Fedora, at least for libusal).
  * Changed wodim-devel package name to cdrkit-devel-static.
  * Added "-DPIC -fPIC" in CFLAGS to built the static libraries.
  * Added smp_mflags to make.
  * Install config files in /etc.
  * Updates in %post installation script of wodim according to openSUSE spec
    file guidelines.
  * Updates in %files sections.
  * Minor other updates.
- Added a patch from upstream for icedax.1 to fix rpmlint warning "macro `wav,'
  not defined".</changelog>
  <changelog author="davejplater@gmail.com" date="1302177600">- Fixed provides/requires to enable clean installation of cdrtools
  and vice versa.</changelog>
  <changelog author="jengelh@inai.de" date="1364904000">- Dissolve Obsoletes cycle between cdrkit (source package "wodim")
  and cdrtools. Add proper Conflicts instead.
- Use more robust make install call; kill redundant %clean section</changelog>
  <changelog author="coolo@suse.com" date="1366286400">- switch _service to localonly</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Avoid collision of iso{dump,vfy} etc. by moving binaries into
  separate directory. This allows parallel installation of mkisofs
  and genisoimage.</changelog>
  <changelog author="jengelh@inai.de" date="1370520000">- Avoid calling fdupes on entire buildroot; it is not valid for /etc
- Install manpage symlinks inside cdrkit-cdrtools-compat
- Remove static libraries for which there are no header files
  packaged</changelog>
  <changelog author="nadvornik@suse.com" date="1394020800">- fixed large file support (bnc#615177, bnc#831820)
  genisoimage-multi-extent-fix-bnc615177.patch</changelog>
  <changelog author="lnussel@suse.de" date="1403265600">- make wodim position independent (bnc#882035, cdrkit-pie.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1422619200">- add cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (fate#318444)</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Update geteltorito script to latest version
  source: http://userpages.uni-koblenz.de/~krienke/ftp/noarch/geteltorito/geteltorito</changelog>
  <changelog author="jkeil@suse.de" date="1433851201">- Use full url as source</changelog>
  <changelog author="dmueller@suse.com" date="1436356800">- disable source download service, upstream download location
  is dead</changelog>
  <changelog author="dmueller@suse.com" date="1439467200">- remove cdrkit-1.1.8-werror.patch, cdrkit-efi-boot.patch (bsc#939456)</changelog>
  <changelog author="jkeil@suse.de" date="1441108800">- add fix-check_linux_26.patch: also compare major kernel version
  number. (bsc#897950)</changelog>
  <changelog author="jdelvare@suse.com" date="1532692800">- add genisoimage-fix-TRANS.TBL-with-large-files.patch: fix a crash
  when option -T (generate TRANS.TBL) is used in conjunction with
  multi-extent files (files larger than 4 GB) (bsc#1100466)</changelog>
</package>
<package pkgid="8b8369c3be4c6299b997e71179f97737ecf7aad49afe2d08fdbfca86f43784b7" name="icewm" arch="src">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="5a9cea2fd51d8617fa38b64fd9e002a6f4e2f93a8be83102c48d7ec27a6e94b4" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="37b5d7c9575b5a4ae5dd79e54ebdd019b5b3c032097c789d2946035223434ab8" name="icewm" arch="src">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="7281caa17601135c6c16a6dccc03ae4b641dd43452a2a5bd6458f9b3d130e9b4" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="18c1ffe61f7af7dd104d235c56a993fbd763cb44663560869e9d02aa2b23d27a" name="icewm" arch="src">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="91bb436356273e2d2dd58b442e2d9c7dba4e57a59974cf0e01438d0a96e8c24b" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="dcaf28e1f12a02e5ceb0fbac895ab9952912cc2908982ddc0cd7a0426d8dfc22" name="icewm" arch="src">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="ca10be297a89102ea900b80f17ed81739651ce5bc94b07ed145c9ffaa087969d" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="bc0d3bbb18f248a387e692c1cd40ed3127ddd649717b92797b2926c9e771c758" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="b92e20fdd76a34dbb38d2561d539e76f4bb50c5c0dd6e7317d6b8182834f72c2" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="ed0358e95ad74e1a4cc1c205cf23dfdbd7c82c5fbf8912f31e7f4178d877e0f0" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="3abb5fad97b6bd220b772d5403f8c4c1478c6257f9021531991fca887b86a5fb" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="9e111c23cc5bc9a0a77a8d86f3d922af52661f4705031235e20fcaa3db21f2f8" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="a4b78b92a60c781c78be29cd09e157c561979b3d88510f08d2d5e3864aa59d9e" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="5837f3605a32f88d78b42f91e35ea8cbb53f3f2ca34930cfc4364f7e6fb71c91" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="8a1f848a2cb0d4f451f5635d6e4583083fe52c5f764528713c09f75f29908685" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="c15d361eb203147c9a937fb487f8a0800d6c9c1bd6386abb955b2b6861dffcfe" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="d7af6a404d6b43908a3c2455376f5117d74dd31969b0b686267cf002179bfca4" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="a4d5043a97cde8f79435eec52d4adb61a9295a796ae7846644bcedf3b1551b51" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="2ab9dc375ef904c45fd1140b7c553a92fe05652f41728e821167d9edc7f1c742" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="a2731c3c476807515881e1856ed395c1504022cd0c58bf02495d51e89a21be74" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.12.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774401">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1541678400">- Add a recommends on xlockmore to ensure lock workstation
  button available (boo#1105301).</changelog>
</package>
<package pkgid="de773a7b2c1eb79814a8b2442265a2c3271d687b3ad1b3c01e23c453ff070b6d" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Set up icesound to base on alsa only, as OSS and ESD are quite
  not useful nowdays</changelog>
  <changelog author="tchvatal@suse.com" date="1445688001">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
</package>
<package pkgid="afca0a3248f65cd8936ea1dc2c7a60fc0ef398e0337bb7e4000585825d81fc6f" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1445688000">- Add requires on xterm+alsa-utils that are used in default calls
  of icewm
- For icewm-default add requires on gnome-icon-theme as otherwise
  we would not see icons for most of the things</changelog>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
</package>
<package pkgid="e94afd029334ec389559f5096d602ce87b376246728549d6a96f6b2fa3563f71" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.3.12" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1445774400">- Move icesound to default package as alsa is in by default</changelog>
  <changelog author="tchvatal@suse.com" date="1445774401">- Deprecate the gnome subpackage as after investigation we figured
  we can simply use icewm-menu-fdo to generate the taskbar menu
  without any need for gnome2 ties.
- Drop binary icewm-set-gnomewm as the gnome2 is not supported anyway
  and thus gconf settings of its defaults are bit pointless</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774402">- Add icewm-fix-local-search.patch: make icewm-menu-fdo not to
  search through whole ~/.local/share/ as it can be unexpectedly big.
- Add icewm-toolbar-icons-generic.patch: don't specify paths in
  toolbar icons.
- Require adwaita-icon-theme instead of gnome-icon-theme.
- Append icon search paths to icewm-preferences.patch including
  Adwaita theme.
- Add basic MATE support via icewm-mate.patch and icewm-mate
  subpackage.
- Fix build under openSUSE 13.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1445860800">- Cleanup a bit the update-alternatives syntax</changelog>
  <changelog author="tchvatal@suse.com" date="1445860801">- Kill back the mate subpkg as it does not really pose any benefit
  for us. But keep the patch as it should be merged upstream</changelog>
  <changelog author="tchvatal@suse.com" date="1445860802">- Enable fribidi support on main package RTL is quite used</changelog>
  <changelog author="tchvatal@suse.com" date="1445860803">- Simplify reboot/shutdown commands:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1445860804">- Split out configuration files to allow icewm-theme-branding to
  work</changelog>
  <changelog author="petr@cervinka.net" date="1452772800">- Version bump to 1.3.12:
  * various bugfixes collected from all upstream vendors
  * added new translations
- Removed upstreamed patches:
  * icewm-toolbar-icons-generic.patch
  * icewm-fix-local-search.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1460376000">- Copy from openSUSE to SLE;
  fate#320323:Upgrade icewmto 1.3.1x.</changelog>
  <changelog author="tyang@suse.com" date="1471521600">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487678400">- Ensure a valid mailbox check tool (bsc#1026134)</changelog>
  <changelog author="qzheng@suse.com" date="1530532800">- Add icewm-use-upstream-desktop.patch to use .desktop file from
  upstream instead of sle distribution to keep in line with sle 15,
  resolving the upgrade issue from sle12 to sle15 (boo#1096917).</changelog>
  <changelog author="qzheng@suse.com" date="1537358400">- Drop icewm-use-upstream-desktop.patch to leave sle12sp2+
  unchanged and the issue will be fixed on sle15 (boo#1096917).</changelog>
</package>
<package pkgid="c62673a2219010a4b0d1e7ef308781fb2cd53573f6402e16a0ccc1119f8d508d" name="icinga" arch="src">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="61f0b226a37fcd2655ffab43a4a5f6dea4ed54b944ccd8aaeba2a1ecd6c1b261" name="icinga" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="f720fe9303e7a9698acb068a591b67970ccd441d0c9b2b77a85a79cd2bdcb21f" name="icinga-devel" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="8f6ef91e8806cd8c15dedd134310a1eb8560877f1c56544e4cdad54fbeeb475a" name="icinga-doc" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="f8c79093a61894f71809c12d1ac8c320d7015a8d3e7740cf6f31803255df2c57" name="icinga-idoutils" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="c8b24e0fcf964b15c1a6aeb22e3ce7014cecf8c2cb59fc7cce9530fe7f0ceec0" name="icinga-idoutils-mysql" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="a29be51fb3bd642e53795062c16a1c55290da36bfbedc9f24c99706f148147ea" name="icinga-idoutils-oracle" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="bd6ea91d8c15c9d5d1532a01fdacb1817b50ccbdd125884c9ba1fa2c0bf4acf3" name="icinga-idoutils-pgsql" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="a97e04a4e9be2cbe3f09f130544508a5eb1e3b077aa278b2fd128979a2be4caa" name="icinga-plugins-downtimes" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="760ecb2f8d2529b348aeac86bfea05499f56f08780eef1c203a192317647bbe9" name="icinga-plugins-eventhandlers" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="4e3438b154fa558351c034c1efa10622e5f23af929567ddfd71fb537fb6d5c9c" name="icinga-www" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="2839b5aeed36e8ce0f461da7f414f56cd60be52305121c7d96a836e2140bf653" name="icinga-www-config" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="8.3.2"/>
  <changelog author="thardeck@suse.com" date="1407412800">- update to upstream version 1.11.6
  * idoutils: Fix customvariable* tables are not case sensitive (mysql) #6788 - MF
  * installation: Fix misspelled systemd configure options, added hint in Makefile #6710 - SS
  * spec: Add shadow-utils as a dependency for Redhat packaging #4495 - SS
  * spec: Build dependency for "make" is missing - GB
  * Fix comments in cgiutils.c #6712
  * Fix customvariable tables requires schema version update to 1.11.6! #6788</changelog>
  <changelog author="thardeck@suse.com" date="1409572800">- add util-linux-systemd as build require for newer SUSE distributions (&gt; 13.1)</changelog>
  <changelog author="thardeck@suse.com" date="1409745600">- update to upstream version 1.11.7
  * Use versioned dependencies in the RPM spec file #7071 - GB
  * Import 1.11.7 schema changes from Icinga 2 #6939 - MF
  * New programstatus column 'endpoint_name' requires schema update to 1.11.7! #6939</changelog>
  <changelog author="thardeck@suse.com" date="1415966400">- use icinga-fix-apache-issues-by-using-old-conf.patch only for openSUSE 13.1 and older versions</changelog>
  <changelog author="thardeck@suse.com" date="1416484800">- restrict apache conf patch only to openSUSE 13.1 since it seems to be the only affected version
- renamed icinga-fix-apache-issues-by-using-old-conf.patch to icinga-workaround-131-apache-conf-issue.patch</changelog>
  <changelog author="thardeck@suse.com" date="1417089600">- remove patch source condition</changelog>
  <changelog author="lars@linux-schulserver.de" date="1417694400">- use a bash script for rcicinga to integrate some additional
  options from old sysvinit script (check, check_verbose)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms in post scripts</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419076800">- fix bashism in scripts
- add patches:
  * icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="lars@linux-schulserver.de" date="1422446400">- add Alias=monitoring_daemon.service to systemd file to have a
  similar virtual provides like in the old times
- rebased icinga-1.11.7-fix-bashisms.patch</changelog>
  <changelog author="thardeck@suse.com" date="1422532800">-update to upstream version 1.12.0
  * core/idoutils: Populate long_output column on notification history neb events #7362 - MF
  * classic ui: start with unhandled problems view instead of TAC #4817 - MF
  * classic ui: Adding alias to title in host/service overview #5900 - WN
  * classic ui: Add display of extra icons in status overview of hosts and services #6829 - RD/RB
  * classic ui: Add config option to set Sticky Acknowledgment checkbox default #6237 - CF
  * classic ui: Add config option to sort status data by default #5965 - RB
  * classic ui: Add sorting of comments and downtimes #5339 - RB
  * classic ui: Add link to online documentation #6606 - RB
  * idoutils: Add program_version column to programstatus table #7390 - MF
  * idoutils: Extend size of column 'alias' for MySQL tables hosts &amp; contacts #6382 - MF
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568 - MF
  * classic ui: Fix grammatical errors in popup text #7451 - CF
  * classic ui: Fix order of hosts and service checks in tac.cgi #6965 - RB
  * idoutils: check for undersized data-packets and ignore them to eliminate null transactions to the database #4221 - CF
  * initscript: Correct bash-specific syntax in startup script #7450 - CF
  * spec: Use versioned dependencies in the RPM spec file #7017 - GB
  * core/idoutils: Populate long_output column on notification history neb events #7362
  * idoutils: Add program_version column to programstatus table #7390
  * * required for Icinga Web 2 and Icinga 2
  * idoutils: 'alias' column is now TEXT in MySQL #6382
  * idoutils: Import 'is_json' for custom vars into schema (Icinga 2) #7568</changelog>
  <changelog author="lars@linux-schulserver.de" date="1424174400">- fix systemd service alias</changelog>
  <changelog author="thardeck@suse.com" date="1424347200">- update to upstream version 1.12.2
  * Bug #3305: Duplicate service definitions are not generating a config validation error
  * Docs - Bug #7801: Add a minified js library for the html docs</changelog>
  <changelog author="thardeck@suse.com" date="1427803200">- update to upstream version 1.13
  * Remove deprecated event_profiling_enabled from icinga.cfg
  * Remove deprecated broker_module from icinga.cfg (use module object configuration instead)
  * Add module config examples in modules/ directory (livestatus, mod_gearman, pnp4nagios, flapjack)
  * Move contrib/downtimes to tools/downtimes and add 'make install-downtimes'
  * Feature #1867: Recurring Downtimes
  * Feature #6353: deprecate icinga.cfg:broker_module; add more module examples
  * Feature #8007: Implement an option to disable transactions
  * Feature #8139: Add functions for registering file descriptors closed on fork()
  * Feature #8140: Add Check Result List Mutex for NEB modules
  * Feature #8426: Remove constraint from *dependencies tables
  * Feature #8440: Enhance idomod logging
  * Bug #6263: Race condition in init.d scripts' stop
  * Bug #6762: Icinga crashes when "args" attribute is not specified for modules
  * Bug #7004: GET form param has no effect on cmd.cgi acks (again)
  * Bug #8202: Cool tip text for refresh of hosts and services says "I'm so lonely up here. Where should I go?"
  * Bug #8441: require the 'config_file' argument in idomod modules configuration
  * Bug #8445: cmd.cgi use_ack_end_time param does not enable tickbox in form
  * Bug #3305: Duplicate service definitions are not generating a config validation error</changelog>
  <changelog author="thardeck@suse.com" date="1428408000">- update to upstream version 1.13.1
  * Bug #8986: wrong fd initilization preventing checks using file descriptors</changelog>
  <changelog author="thardeck@suse.com" date="1432641600">- prevent changing of tmp_path permissions (bnc#923928)
- update to upstream version 1.13.2
  * Bug #9010: icinga.spec: broken path to downtimes scripts and not packaged config files</changelog>
  <changelog author="thardeck@suse.com" date="1436961600">- update to upstream version 1.13.3
  * Bug #7337: Only use SCHEDULE_HOST_DOWNTIME command for Icinga 2.x
  * Bug #8130: Wrong values for percent_* when using hostgroup in availability report
  * Bug #9020: Solaris package behaves badly upon uninstall
  * Bug #9106: Icinga no longer sending acknowledgement notifications
  * Bug #9240: invalid JSON for flapping threshold configuration</changelog>
  <changelog author="lars@linux-schulserver.de" date="1466769600">- package all README files to avoid broken symlink from README to
  README.md</changelog>
  <changelog author="thardeck@suse.com" date="1483963200">- update to upstream version 1.14.0
  * Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed anymore)
  * IDO: Remove deprecated config options
  * Feature #3175: Add command "Acknowledge problem for this host and its services"
  * Feature #10684: Help Icinga2 User to use command expansion in Classic-UI
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #882: trends.cgi segfaults
  * Bug #6831: Remove broken attribute-based authorization
  * Bug #9157: Only timestamp and "Return code of 255 is out of bounds" in icinga.log
  * Bug #9409: Add sources for jquery-ui and install minified versions only
  * Bug #9750: Classic UI is showing inaccurate value to retry_interval
  * Bug #9847: max filename length reached for config file paths
  * Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
  * Bug #10633: status.cgi doesn't honor host/servicegroup filter once allproblems option is set
  * Bug #11044: configure tries to process obsolete .in file
  * Bug #11048: cgi/cgiutils.c NULL value with segfault in
  * Bug #11221: trends.cgi segfault while reading log files
  * Bug #11732: Classic UI hides menu items (JQuery 1.11, Debian/Ubuntu)
  * Bug #11929: config.cgi notification_period link has a typo
  * Bug #12007: Fix icinga2 Host state notification entries in compat log to interpret states properly
  * Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
  * Bug #13745: Spelling errors
  * Bug #13747: make fullinstall doesn't call install-webconf-auth
  * Bug #13749: Update README for icinga.com
- fix icinga source url</changelog>
  <changelog author="lars@linux-schulserver.de" date="1512129600">- fix a possible symlink attack for files/dirs created by root
  related to CVE-2016-8641 and CVE-2016-10089 (bsc#1011630 and bsc#1018047)
- the update to 1.14.0 also fixed boo#952777
- remove the pre-configured administrative account with fixed
  password for the WebUI - CVE-2016-0726 (boo#961115)</changelog>
</package>
<package pkgid="862bf16429d82ddb1670f4fbf9665441811f05227f664e3bf2df92a84ae30a9e" name="icoutils" arch="src">
  <version epoch="0" ver="0.31.3" rel="13.1"/>
  <changelog author="lazy.kent.suse@gmail.com" date="1235908800">- spec-file corrected</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1250251200">- update to 0.27.0
  * minor fixes</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1255608000">- spec-file corrected</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1256126400">- update to 0.28.0
  * license changed to GPLv3+</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1271073600">- update to 0.29.1
- added new author</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1283688000">- removed unnecessary build dependences
- marked manpages as docs
- minor spec formatting</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1302523200">- build requires libpng12-compat-devel for oS &gt; 11.2
- added COPYING</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1307275200">- use full URL for Source
- correct suse_version macro</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1322136000">- Corrected build dependencies (libpng12-compat-devel -&gt;
  libpng-devel).
- Corrected rpm group.
- Corrected License tag according to SPDX Standard.
- Spec clean up.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1356004800">- Update to 0.30.0.
  * Fix crash with libpng version prior to 1.2.25.
  * Man page improvements.
  * Limit size of extracted icon to size of resource. Fixes a
    segfault (rh#701855).
- Correct build dependencies: remove zlib-devel; libpng-devel -&gt;
  pkgconfig(libpng).
- Verify GPG signature.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1371556800">- Update to 0.31.0.
  * Change placement of libintl dependency.
  * Man page improvements.
- Remove gpg verification from bootstrap packages.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1484136000">- Update to 0.31.1.
  * Security fixes: CVE-2017-5208, CVE-2017-5331, CVE-2017-5332,
    CVE-2017-5333 (boo#1018756).</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1501156800">- Update to 0.31.3.
  * Fixed wrestool being broken.
- Changes in 0.31.2.
  * Various security fixes: CVE-2017-6009, CVE-2017-6010,
    CVE-2017-6011 (boo#1025700, boo#1025703).</changelog>
</package>
<package pkgid="0f96deb91a6dcf5f4637155278fc9f429def6280b7d968b6fea564cf76627f49" name="icoutils" arch="x86_64">
  <version epoch="0" ver="0.31.3" rel="13.1"/>
  <changelog author="lazy.kent.suse@gmail.com" date="1235908800">- spec-file corrected</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1250251200">- update to 0.27.0
  * minor fixes</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1255608000">- spec-file corrected</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1256126400">- update to 0.28.0
  * license changed to GPLv3+</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1271073600">- update to 0.29.1
- added new author</changelog>
  <changelog author="lazy.kent.suse@gmail.com" date="1283688000">- removed unnecessary build dependences
- marked manpages as docs
- minor spec formatting</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1302523200">- build requires libpng12-compat-devel for oS &gt; 11.2
- added COPYING</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1307275200">- use full URL for Source
- correct suse_version macro</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1322136000">- Corrected build dependencies (libpng12-compat-devel -&gt;
  libpng-devel).
- Corrected rpm group.
- Corrected License tag according to SPDX Standard.
- Spec clean up.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1356004800">- Update to 0.30.0.
  * Fix crash with libpng version prior to 1.2.25.
  * Man page improvements.
  * Limit size of extracted icon to size of resource. Fixes a
    segfault (rh#701855).
- Correct build dependencies: remove zlib-devel; libpng-devel -&gt;
  pkgconfig(libpng).
- Verify GPG signature.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1371556800">- Update to 0.31.0.
  * Change placement of libintl dependency.
  * Man page improvements.
- Remove gpg verification from bootstrap packages.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1484136000">- Update to 0.31.1.
  * Security fixes: CVE-2017-5208, CVE-2017-5331, CVE-2017-5332,
    CVE-2017-5333 (boo#1018756).</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1501156800">- Update to 0.31.3.
  * Fixed wrestool being broken.
- Changes in 0.31.2.
  * Various security fixes: CVE-2017-6009, CVE-2017-6010,
    CVE-2017-6011 (boo#1025700, boo#1025703).</changelog>
</package>
<package pkgid="de571e1702a77bf4a12da436b509b811fe90e710f70771ed278fccaffcf26a41" name="icu" arch="src">
  <version epoch="0" ver="52.1" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
</package>
<package pkgid="66dfab9d0c40c7867f2c733cb53c5d29bf4f6f65f9c09985fca9e31cc63142a2" name="icu" arch="x86_64">
  <version epoch="0" ver="52.1" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
</package>
<package pkgid="407d6a37d87f3e3c3394ec74f8ea1b5671791673e6d8239249895d997f049610" name="icu" arch="src">
  <version epoch="0" ver="52.1" rel="18.1"/>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
  <changelog author="qzhao@suse.com" date="1524657600">- Add
  icu-CVE-2016-6293-2017-7867-2017-7868-2017-14952-2017-15422-2017-17484.patch
  Porting upstream security fixes(bnc#990636 CVE-2016-6293
  bnc#1034674 CVE-2017-7868 bnc#1034678 CVE-2017-7867 bnc#1067203
  CVE-2017-14952 bnc#1072193 CVE-2017-17484 bnc#1077999
  CVE-2017-15422).</changelog>
</package>
<package pkgid="b3bc16c76087e12603f8d49d8c60bf158ea88c866afd2ad5110297a2c548d4f8" name="icu" arch="x86_64">
  <version epoch="0" ver="52.1" rel="18.1"/>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
  <changelog author="qzhao@suse.com" date="1524657600">- Add
  icu-CVE-2016-6293-2017-7867-2017-7868-2017-14952-2017-15422-2017-17484.patch
  Porting upstream security fixes(bnc#990636 CVE-2016-6293
  bnc#1034674 CVE-2017-7868 bnc#1034678 CVE-2017-7867 bnc#1067203
  CVE-2017-14952 bnc#1072193 CVE-2017-17484 bnc#1077999
  CVE-2017-15422).</changelog>
</package>
<package pkgid="6ef4269c8dcc807050934c530d70f7c6af99868dc9cff0db627e211b9116f1c4" name="icu-data" arch="x86_64">
  <version epoch="0" ver="52.1" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
</package>
<package pkgid="572c27242a5d0610953ef71d1bdcc23007018bf1aeeb26027920344a5d2b34b1" name="icu-data" arch="x86_64">
  <version epoch="0" ver="52.1" rel="18.1"/>
  <changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
  <changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
  <changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
  <changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
  <changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
  <changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
  <changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
  <changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
  <changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
  <changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
  <changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
  <changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
  <changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
  <changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>
  <changelog author="qzhao@suse.com" date="1524657600">- Add
  icu-CVE-2016-6293-2017-7867-2017-7868-2017-14952-2017-15422-2017-17484.patch
  Porting upstream security fixes(bnc#990636 CVE-2016-6293
  bnc#1034674 CVE-2017-7868 bnc#1034678 CVE-2017-7867 bnc#1067203
  CVE-2017-14952 bnc#1072193 CVE-2017-17484 bnc#1077999
  CVE-2017-15422).</changelog>
</package>
<package pkgid="236da11d5f616210608552ed744c53f94e82447fa30fa0b188588f81d6f61665" name="info2html" arch="noarch">
  <version epoch="0" ver="2.0" rel="223.1"/>
  <changelog author="dmueller@suse.de" date="1129032000">- build as nonroot</changelog>
  <changelog author="werner@suse.de" date="1129550400">- Add infocat script to cgi path (bug #127813)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="olh@suse.de" date="1152878400">- rename bzip2 archive from .gz to .bz2</changelog>
  <changelog author="werner@suse.de" date="1156939200">- Update to version 2.0
  * Output HTML is tidier now. CSS added.
  * Minor bugfixes to the (de)escaping logic.
  * Minor typoes in comments fixed.</changelog>
  <changelog author="werner@suse.de" date="1197892800">- Add info3html.css to file list (bug #349033)</changelog>
  <changelog author="werner@suse.de" date="1289822400">- Change decription to reflect current usage of info2html (bnc#653449)</changelog>
  <changelog author="werner@suse.de" date="1290081600">- Yet an other change of the decription</changelog>
  <changelog author="werner@suse.de" date="1502107200">- Avoid DirnameCheck() as it breaks the info2html (boo#1052383)
- Avoid $* asignment with newer perl</changelog>
  <changelog author="werner@suse.de" date="1502107201">- Readd a fixed version of DirnameCheck() for security
  that is allow access even if no path for the info files had
  been requested</changelog>
</package>
<package pkgid="6dceaf41ccdfb4a70258373321a815893f1804e6a76bb1e16395ae89cd1248cb" name="info2html" arch="src">
  <version epoch="0" ver="2.0" rel="223.1"/>
  <changelog author="ro@suse.de" date="962020800">- adapted to susehelp color layout</changelog>
  <changelog author="werner@suse.de" date="976795200">- Group tag</changelog>
  <changelog author="werner@suse.de" date="1014206400">- Fix bug #13659: allow ++ in base names</changelog>
  <changelog author="ro@suse.de" date="1016539200">- removed requires http_daemon, since the script can be called
  directly (konqueror knows "info:" url-type)</changelog>
  <changelog author="ro@suse.de" date="1028203200">- adapt server-root</changelog>
  <changelog author="coolo@suse.de" date="1050494400">- use BuildRoot</changelog>
  <changelog author="kukuk@suse.de" date="1055851200">- Remove directories already part of filesystem
- Rename to info2html
- Make a noarch package</changelog>
  <changelog author="ro@suse.de" date="1082289600">- build with apache2</changelog>
  <changelog author="werner@suse.de" date="1114171200">- Avoid to be used with XSS attacks (bug #78956)</changelog>
  <changelog author="werner@suse.de" date="1118232000">- Go forwared to version 1.4 and port our patches to</changelog>
  <changelog author="dmueller@suse.de" date="1129032000">- build as nonroot</changelog>
  <changelog author="werner@suse.de" date="1129550400">- Add infocat script to cgi path (bug #127813)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="olh@suse.de" date="1152878400">- rename bzip2 archive from .gz to .bz2</changelog>
  <changelog author="werner@suse.de" date="1156939200">- Update to version 2.0
  * Output HTML is tidier now. CSS added.
  * Minor bugfixes to the (de)escaping logic.
  * Minor typoes in comments fixed.</changelog>
  <changelog author="werner@suse.de" date="1197892800">- Add info3html.css to file list (bug #349033)</changelog>
  <changelog author="werner@suse.de" date="1289822400">- Change decription to reflect current usage of info2html (bnc#653449)</changelog>
  <changelog author="werner@suse.de" date="1290081600">- Yet an other change of the decription</changelog>
  <changelog author="werner@suse.de" date="1502107200">- Avoid DirnameCheck() as it breaks the info2html (boo#1052383)
- Avoid $* asignment with newer perl</changelog>
  <changelog author="werner@suse.de" date="1502107201">- Readd a fixed version of DirnameCheck() for security
  that is allow access even if no path for the info files had
  been requested</changelog>
</package>
<package pkgid="9855aa7dad57502329c2c6eff10a190c43518e496808664581017709b028ae3d" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="12.3.1"/>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
</package>
<package pkgid="eb61dcbbf3c13b53ce5a23071db7090e25d55877b8ced2bdaad488b47e7eadd2" name="iotop" arch="src">
  <version epoch="0" ver="0.6" rel="12.3.1"/>
  <changelog author="pth@suse.de" date="1202299200">- Initial package</changelog>
  <changelog author="pth@suse.de" date="1202817600">- Add missing requires for python-curses</changelog>
  <changelog author="pth@suse.de" date="1205496000">- Include a copy of GPL2 (bnc#370246).</changelog>
  <changelog author="aj@suse.de" date="1205928000">- Fix build (really include COPYING).
- Fix rpmlint warnings about "useless-explicit-requires python" and
  "redundant-prefix-tag"</changelog>
  <changelog author="pth@suse.de" date="1215691200">- Update to 0.2.1. Changes since 0.1:
  - 0.2.1:
  * UTF-8 strings are now correctly handled
  - 0.2
  * Misconfigured terminals (TERM=xterm-color) are tolerated
  * Added the --only option to only show processes or threads actually
    doing I/O
  * Typing 'o' dynamically toggles the --only option
  * Cosmetic fixes as well as minor bug fixes
  * Re-organized code to import vanilla pynl80211
  * Added workaround KERNBUG display in -P</changelog>
  <changelog author="pth@suse.de" date="1218456000">- Add rpmlintrc file.</changelog>
  <changelog author="pth@suse.de" date="1218542400">- Remove py_requires and the rpmlintrc filters for warnings
  resulting from the use of it.
- Remove superfluous BuildRequires for python.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
</package>
<package pkgid="4d3ea675327e8b6bff50c1d60ef9c84867ec44497f1a3fff926918b5188095e9" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1362052800">- Version 1.8.12 released 2012-08-09
  Changes: many, see
  http://ipmitool.cvs.sourceforge.net/viewvc/ipmitool/ipmitool/ChangeLog?revision=1.37&amp;view=markup&amp;pathrev=IPMITOOL_1_8_12</changelog>
  <changelog author="kkaempf@suse.com" date="1362052801">- Adapt to Automake 1.13</changelog>
  <changelog author="dvaleev@suse.com" date="1363608000">- fix build on BE arches (ipmitool-bigendian.patch)</changelog>
  <changelog author="kkaempf@suse.com" date="1368619200">- fix GCC 4.3 build
  * Adds patch: old-gcc-options.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- Run format_spec_file so it is up par with others.</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Update to 1.8.13
  Changes: many, see
  http://sourceforge.net/projects/ipmitool/files/ipmitool/1.8.13/
- drop patches included upstream
  * compile-fixes.patch
  * ekanalyzer_fix_wrong_type_comparison.patch
  * increase_possible_fw_file_size.patch
  * ipmitool-bigendian.patch
  * old-gcc-options.patch</changelog>
  <changelog author="trenn@suse.de" date="1392292800">- Added 3 services:
    1) exchange-bmc-os-info - fate#315999
    Shows SLES string as OS in the service processor info
    2) bmc-snmp-proxy - fate#316000
    Exports sel (BMC Error log) via snmpd
    3) ipmievd - fate#316002
    Logs sel to syslog
  1. and 2. are very Dell specific and should not get enabled by default
  3. got converted to a native systemd service. Still needs autoconf
  adjusting to get send mainline
  1. and 2. have somewhat bigger Init V init scripts and time was not
  enough to convert them. Therefore they were added via insserv
  and friends as well
  Add ipmitool_adjust_suse.paths
- Updated to latest git version:
  Add ipmitool_update_to_git_head_31_01_2014_b0aad15d67007c74b.patch</changelog>
  <changelog author="trenn@suse.de" date="1394107200">- Update to latest git head and do not split up version 1.8.13.tar.bz2 tarball
  and patch to latest git HEAD.
  Reason is that all files in the repository got moved up one directory level
  by git commit:
  c18ec02f3304ce2a889a50e378f07a4168af3884
  Date:   Wed Feb 5 17:30:32 2014
  Move all files one level up in the file hierarchy, to avoid the useless
  ipmitool directory.
  We want the latest git head asap, because otherwise additionally needed
  patches will never patch cleanly in mainline and our repo and would always
  need adjusting.
  I asked for a new version tag mainline. As soon this happened, the
  tarball name should again match with the exact mainline git tag.
  Remove/Delete:
  ipmitool_update_to_git_head_31_01_2014_b0aad15d67007c74b.patch
- Incorporate patch on request from Dell: fate#315996
  Add: 0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17 (fate#320439, bsc#976123)
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1469188800">- Re-introduce dependency (Requires:) to OpenIPMI package.
  /etc/sysconfig/ipmi is needed. (bsc#989985, bsc#988443).
  This should stay SLE12 SP2 only for now, hopefully we get rid
  of the dependency properly in factory and merge it back at some point of
  time.</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493294400">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1497614400">- Most ipmitool functionalities do not need net-snmp
  Lower package dependency from "Requires" to "Recommends" fate#322044</changelog>
  <changelog author="ohering@suse.de" date="1529064000">- fix memory leak in lanplus (bsc#1089782)
  0018-ID-480-Call-EVP_CIPHER_CTX_free-instead-of-EVP_CIPHE.patch</changelog>
</package>
<package pkgid="bd8d869db859c55a5cf029c8cea92a6eddb203f476c9f8b730b523ecebff5eeb" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18" rel="3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1362052800">- Version 1.8.12 released 2012-08-09
  Changes: many, see
  http://ipmitool.cvs.sourceforge.net/viewvc/ipmitool/ipmitool/ChangeLog?revision=1.37&amp;view=markup&amp;pathrev=IPMITOOL_1_8_12</changelog>
  <changelog author="kkaempf@suse.com" date="1362052801">- Adapt to Automake 1.13</changelog>
  <changelog author="dvaleev@suse.com" date="1363608000">- fix build on BE arches (ipmitool-bigendian.patch)</changelog>
  <changelog author="kkaempf@suse.com" date="1368619200">- fix GCC 4.3 build
  * Adds patch: old-gcc-options.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- Run format_spec_file so it is up par with others.</changelog>
  <changelog author="kkaempf@suse.com" date="1380888000">- Update to 1.8.13
  Changes: many, see
  http://sourceforge.net/projects/ipmitool/files/ipmitool/1.8.13/
- drop patches included upstream
  * compile-fixes.patch
  * ekanalyzer_fix_wrong_type_comparison.patch
  * increase_possible_fw_file_size.patch
  * ipmitool-bigendian.patch
  * old-gcc-options.patch</changelog>
  <changelog author="trenn@suse.de" date="1392292800">- Added 3 services:
    1) exchange-bmc-os-info - fate#315999
    Shows SLES string as OS in the service processor info
    2) bmc-snmp-proxy - fate#316000
    Exports sel (BMC Error log) via snmpd
    3) ipmievd - fate#316002
    Logs sel to syslog
  1. and 2. are very Dell specific and should not get enabled by default
  3. got converted to a native systemd service. Still needs autoconf
  adjusting to get send mainline
  1. and 2. have somewhat bigger Init V init scripts and time was not
  enough to convert them. Therefore they were added via insserv
  and friends as well
  Add ipmitool_adjust_suse.paths
- Updated to latest git version:
  Add ipmitool_update_to_git_head_31_01_2014_b0aad15d67007c74b.patch</changelog>
  <changelog author="trenn@suse.de" date="1394107200">- Update to latest git head and do not split up version 1.8.13.tar.bz2 tarball
  and patch to latest git HEAD.
  Reason is that all files in the repository got moved up one directory level
  by git commit:
  c18ec02f3304ce2a889a50e378f07a4168af3884
  Date:   Wed Feb 5 17:30:32 2014
  Move all files one level up in the file hierarchy, to avoid the useless
  ipmitool directory.
  We want the latest git head asap, because otherwise additionally needed
  patches will never patch cleanly in mainline and our repo and would always
  need adjusting.
  I asked for a new version tag mainline. As soon this happened, the
  tarball name should again match with the exact mainline git tag.
  Remove/Delete:
  ipmitool_update_to_git_head_31_01_2014_b0aad15d67007c74b.patch
- Incorporate patch on request from Dell: fate#315996
  Add: 0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17 (fate#320439, bsc#976123)
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1469188800">- Re-introduce dependency (Requires:) to OpenIPMI package.
  /etc/sysconfig/ipmi is needed. (bsc#989985, bsc#988443).
  This should stay SLE12 SP2 only for now, hopefully we get rid
  of the dependency properly in factory and merge it back at some point of
  time.</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493294400">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1497614400">- Most ipmitool functionalities do not need net-snmp
  Lower package dependency from "Requires" to "Recommends" fate#322044</changelog>
  <changelog author="ohering@suse.de" date="1529064000">- fix memory leak in lanplus (bsc#1089782)
  0018-ID-480-Call-EVP_CIPHER_CTX_free-instead-of-EVP_CIPHE.patch</changelog>
</package>
<package pkgid="320e5e6d0d68a7bd6258076c4334fd82a64290fbc78e059eb01c257d03a29d41" name="iproute2" arch="src">
  <version epoch="0" ver="4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
  <changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
  <changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
  <changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
  <changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
  <changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
  <changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
  <changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
  <changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
  <changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
  <changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>
</package>
<package pkgid="a67d215097ca5911906585d99de72ec5bed09c120b669d93d5f8cde5d0128f23" name="iproute2" arch="x86_64">
  <version epoch="0" ver="4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
  <changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
  <changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
  <changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
  <changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
  <changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
  <changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
  <changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
  <changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
  <changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
  <changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>
</package>
<package pkgid="3781e9683046968e3a3bcade6e6e8c302f1f81b09605cc4b41167d5e99095358" name="iproute2-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
  <changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
  <changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
  <changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
  <changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
  <changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
  <changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
  <changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
  <changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
  <changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
  <changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>
</package>
<package pkgid="1d96c537b867a7dd6469fb1212336f087ead2ae38e9a07f4cf03e1c896992692" name="iproute2-doc" arch="src">
  <version epoch="0" ver="4.4" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
  <changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
  <changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
  <changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
  <changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
  <changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
  <changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
  <changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
  <changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
  <changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
  <changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
  <changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
  <changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
  <changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
  <changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>
</package>
<package pkgid="4a67bc176f9ad7aca92c6446a1e754338824ddb1655bce629389f05588aa6cee" name="ipsec-tools" arch="src">
  <version epoch="0" ver="0.8.0" rel="14.3.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="idoenmez@novell.com" date="1304510400">- Add ipsec-tools-0.7.3-linkerflag.patch: remove wrong linker flag
- Add ipsec-tools-0.7.2-nodevel.patch: don't install development
  files, instead of manually removing them in the spec file.
- Drop no_werror.patch: Remove Werror flag by sed, its all over the
  configure file, old patch was incomplete anyway.</changelog>
  <changelog author="chris@computersalat.de" date="1305460800">- remove Author from description
- add racoon.psk patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1315137600">- create /var/run/racoon in the init script rather than including
  it in the package as it doesn't work if /var/run is on tmpfs
  (bnc#710277)</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.de" date="1328011200">- remove suse_update_config macro usage</changelog>
  <changelog author="mvyskocil@suse.com" date="1351684800">- unify the permissions of psk.txt to avoid false duplicate warnings
  from fdupes (bnc#784670)</changelog>
  <changelog author="mlin@suse.com" date="1359633600">- Add ipsec-tools-linux-3.7-compat.diff(partly from openwrt)
  * since pfkeyv2.h moved to include/uapi/linux as
    http://lwn.net/Articles/507794/ explained, make the compiler found
    header in valid path. there is a discussion about this issue at
    https://dev.openwrt.org/ticket/12813</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379592000">- Add systemd support, systemctl enable racoon.service
  also enables helper optional service racoon-setkey
- /etc/sysconfig/racoon was never created, fix that.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379592001">- remove unused racoon.init from the package, it was
  already removed from the spec file in the previous change.</changelog>
  <changelog author="jbohac@suse.cz" date="1389355200">- upgrade to version 0.8.0:
  o Fix authentication method ambiguity with kerberos and xauth
  o RFC2253 compliant escaping of asn1dn identifiers (Cyrus Rahman)
  o Local address code rewrite to speed things up
  o Improved MIPv6 support (Arnaud Ebalard)
  o ISAKMP SA (phase1) rekeying
  o Improved scheduler (faster algorithm, support monotonic clock)
  o Handle RESPONDER-LIFETIME in quick mode
  o Handle INITIAL-CONTACT in from main mode too
  o Rewritten event handling framework for admin port
  o Ability to initiate IPsec SA through admin port
  o NAT-T Original Address handling (transport mode NAT-T support)
  o clean NAT-T - PFkey support
  o support for multiple anonymous remoteconfs
  o Remove various obsolete configuration options
  o A lot of other bug fixes, performance improvements and clean ups
- Remove ipsec-tools-linux-3.7-compat.diff which caused bnc#867055
  by including wrong headers; fix by installing
  linux-glibc-devel and including /usr/include for kernel headers</changelog>
  <changelog author="jbohac@suse.cz" date="1394712000">- add RemainAfterExit=yes to the .service file (bnc#856625)</changelog>
  <changelog author="meissner@suse.com" date="1404820800">- ipsec-tools-0.8.0-certasn1txtbroken.patch:
  disable the certificate test in src/racoon/eaytest.c as the
  internal X.509 ASN.1 string presentation was changed in openssl
  and the test currently does not work.</changelog>
  <changelog author="meissner@suse.com" date="1421668800">- racoon-no-md5.patch: Use sha1 instead of md5 during hashing received
  packets to allow FIPS usage. allow md5 during vendor id hashing,
  as this seems to be come from over the wire. bsc#905780</changelog>
  <changelog author="meissner@suse.com" date="1429790400">- racoon-fips-rsa.patch: Increase minimum RSA exponent to RSA_F4
  aka 65537 (mandated by FIPS 140-2). bsc#928313</changelog>
  <changelog author="jbohac@suse.com" date="1432296000">- fix-gssapi-null-dereference.patch: Fix a GSSAPI NULL pointer
  dereference in racoon (bsc#931989, CVE-2015-4047)</changelog>
  <changelog author="meissner@suse.com" date="1433851200">- racoon.psk.patch: disabled one IP entry from the examples.</changelog>
  <changelog author="dbond@suse.de" date="1457092800">- (bsc#968926) add
  /usr/bin/systemd-tmpfiles --create %{_tmpfilesdir}/racoon.conf || :
  to %post section of .spec file to cause the creation of the
  /run/racoon directory upon rpm installation.</changelog>
  <changelog author="jbohac@suse.cz" date="1475668800">- fix_plog_initialization.patch (bsc#1002216)
  Move logging initialization up to prevent crash with -l.</changelog>
  <changelog author="jbohac@suse.com" date="1516968000">- avoid-dos-with-fragment-out-of-order.patch (bsc#1047443,
  CVE-2016-10396)</changelog>
</package>
<package pkgid="e72667815eb9c375357ea758ad4181cb82175d1d1bdfd5f93c3ce7ef93fcc3ff" name="ipsec-tools" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="14.3.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="idoenmez@novell.com" date="1304510400">- Add ipsec-tools-0.7.3-linkerflag.patch: remove wrong linker flag
- Add ipsec-tools-0.7.2-nodevel.patch: don't install development
  files, instead of manually removing them in the spec file.
- Drop no_werror.patch: Remove Werror flag by sed, its all over the
  configure file, old patch was incomplete anyway.</changelog>
  <changelog author="chris@computersalat.de" date="1305460800">- remove Author from description
- add racoon.psk patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1315137600">- create /var/run/racoon in the init script rather than including
  it in the package as it doesn't work if /var/run is on tmpfs
  (bnc#710277)</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.de" date="1328011200">- remove suse_update_config macro usage</changelog>
  <changelog author="mvyskocil@suse.com" date="1351684800">- unify the permissions of psk.txt to avoid false duplicate warnings
  from fdupes (bnc#784670)</changelog>
  <changelog author="mlin@suse.com" date="1359633600">- Add ipsec-tools-linux-3.7-compat.diff(partly from openwrt)
  * since pfkeyv2.h moved to include/uapi/linux as
    http://lwn.net/Articles/507794/ explained, make the compiler found
    header in valid path. there is a discussion about this issue at
    https://dev.openwrt.org/ticket/12813</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379592000">- Add systemd support, systemctl enable racoon.service
  also enables helper optional service racoon-setkey
- /etc/sysconfig/racoon was never created, fix that.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1379592001">- remove unused racoon.init from the package, it was
  already removed from the spec file in the previous change.</changelog>
  <changelog author="jbohac@suse.cz" date="1389355200">- upgrade to version 0.8.0:
  o Fix authentication method ambiguity with kerberos and xauth
  o RFC2253 compliant escaping of asn1dn identifiers (Cyrus Rahman)
  o Local address code rewrite to speed things up
  o Improved MIPv6 support (Arnaud Ebalard)
  o ISAKMP SA (phase1) rekeying
  o Improved scheduler (faster algorithm, support monotonic clock)
  o Handle RESPONDER-LIFETIME in quick mode
  o Handle INITIAL-CONTACT in from main mode too
  o Rewritten event handling framework for admin port
  o Ability to initiate IPsec SA through admin port
  o NAT-T Original Address handling (transport mode NAT-T support)
  o clean NAT-T - PFkey support
  o support for multiple anonymous remoteconfs
  o Remove various obsolete configuration options
  o A lot of other bug fixes, performance improvements and clean ups
- Remove ipsec-tools-linux-3.7-compat.diff which caused bnc#867055
  by including wrong headers; fix by installing
  linux-glibc-devel and including /usr/include for kernel headers</changelog>
  <changelog author="jbohac@suse.cz" date="1394712000">- add RemainAfterExit=yes to the .service file (bnc#856625)</changelog>
  <changelog author="meissner@suse.com" date="1404820800">- ipsec-tools-0.8.0-certasn1txtbroken.patch:
  disable the certificate test in src/racoon/eaytest.c as the
  internal X.509 ASN.1 string presentation was changed in openssl
  and the test currently does not work.</changelog>
  <changelog author="meissner@suse.com" date="1421668800">- racoon-no-md5.patch: Use sha1 instead of md5 during hashing received
  packets to allow FIPS usage. allow md5 during vendor id hashing,
  as this seems to be come from over the wire. bsc#905780</changelog>
  <changelog author="meissner@suse.com" date="1429790400">- racoon-fips-rsa.patch: Increase minimum RSA exponent to RSA_F4
  aka 65537 (mandated by FIPS 140-2). bsc#928313</changelog>
  <changelog author="jbohac@suse.com" date="1432296000">- fix-gssapi-null-dereference.patch: Fix a GSSAPI NULL pointer
  dereference in racoon (bsc#931989, CVE-2015-4047)</changelog>
  <changelog author="meissner@suse.com" date="1433851200">- racoon.psk.patch: disabled one IP entry from the examples.</changelog>
  <changelog author="dbond@suse.de" date="1457092800">- (bsc#968926) add
  /usr/bin/systemd-tmpfiles --create %{_tmpfilesdir}/racoon.conf || :
  to %post section of .spec file to cause the creation of the
  /run/racoon directory upon rpm installation.</changelog>
  <changelog author="jbohac@suse.cz" date="1475668800">- fix_plog_initialization.patch (bsc#1002216)
  Move logging initialization up to prevent crash with -l.</changelog>
  <changelog author="jbohac@suse.com" date="1516968000">- avoid-dos-with-fragment-out-of-order.patch (bsc#1047443,
  CVE-2016-10396)</changelog>
</package>
<package pkgid="426e886c18e34e655ed5b7b0fd126a3aaf3354b73d4ae1eb9eefc1be09636e3d" name="ipset" arch="src">
  <version epoch="0" ver="6.29" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="500c7614faa6433574fca38cbeaf8a3d6b571907c3e2b9c221bfc6aefe44e448" name="ipset" arch="x86_64">
  <version epoch="0" ver="6.29" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="a489681ccff63e7f8bc86a16b65a300e2e4bfb8550a28634ef108a91ab85e9c8" name="ipset" arch="src">
  <version epoch="0" ver="6.29" rel="4.4.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="ff9d9c98c3761dc4ef3f7a0dd3075f2624a1c7a708e6dac86531149db08f6ea5" name="ipset" arch="x86_64">
  <version epoch="0" ver="6.29" rel="4.4.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="ebf634200f496c20bf51328046ad070d005390123d272740d05325afb157a9e1" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="6.29" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="46cb86a5d303a35b08ef4ba1ef10f1edf424c297d32d443dc81ea91cdbb75fe9" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="6.29" rel="4.4.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="b598ad6585e2062239e6c5e2276ef5823eefbdcd02ebe226a2db71eb957cb623" name="ipset-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.29_k4.4.114_42" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="30659b66a23b45f772673c568ff15bf1cb9018799cd4be4db3d3c3741991f165" name="ipset-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.29_k4.4.132_53" rel="4.4.1"/>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 6.12
  * Report syntax error messages immediately
  * Add dynamic module support to ipset userspace tool
  * Fix timeout value overflow bug at large timeout parameters
  * gcc 4.7 support</changelog>
  <changelog author="jengelh@inai.de" date="1341057600">- Update to new upstream release 6.13
  * more restrictive command-line parser
  * documentation updates w.r.t. src/dst for hash:net,iface
  * allow saving to/restoring from a file without shell redirection
  * kernel: hash:net,iface: fix interface comparison
  * timeout fixing bug broke SET target special timeout value, fixed</changelog>
  <changelog author="jengelh@inai.de" date="1348315200">- Update to new upstream release 6.14
  * Internal CIDR bookkeeping was broken and would lead to mismatches
  when the number of different sized networks are greater than the
  smallest CIDR value
  * Support to match elements marked with "nomatch" in hash:*net* sets
  * Add /0 network support to hash:net,iface type</changelog>
  <changelog author="jengelh@inai.de" date="1353326400">- Update to new upstream release 6.15
  * Userspace changes:
  * Use gethostbyname2 instead of getaddrinfo
  * Support protocol numbers as well, not only protocol names
  * Kernel part changes:
  * Increase the number of maximal sets automatically as needed
  * Fix range bug in hash:ip,port,net
- Add 0001-build-support-for-Linux-3.7-UAPI.patch
- Add 0001-build-Linux-3.7-netlink-fun.patch</changelog>
  <changelog author="jengelh@inai.de" date="1354017600">- Update to new upstream release 6.16.1
  * Fix RCU handling when the number of maximal sets are increased
  * netfilter: ipset: fix netiface set name overflow
- Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream
- Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Update to new upstream release 6.17
  * Fix revision printing in XML mode
  * Correct "Suspicious condition (assignment + comparison)"
  * Fix error path when protocol number is used with port range
  * Interactive mode error after syntax error
  * New utilities: ipset_bash_completion, ipset_list
  * Ensure ip_set_max is not set to IPSET_INVALID_ID
  * Resolve corrupted timeout values on set resize
  * Resolve "Directory not empty" error message</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- Update to new upstream release 6.18
  * bitmap:ip,mac: fix listing with timeout
  * hash:*net*: nomatch flag not excluded on set resize
  * list:set: update reference counter when last element pushed off</changelog>
  <changelog author="jengelh@inai.de" date="1368187200">- Update to new upstream release 6.19
  * This release adds per-element byte and packet counters for every
  set type. (Matching these will be available in iptables-1.4.19.)</changelog>
  <changelog author="jengelh@inai.de" date="1382270400">- Update to new upstream release 6.20
  * netns support
  * new set types: hash:net,net and hash:net,port,net
  * new extension: "comment", for annotation of set elements
- Drop sles11.diff (no longer needed, upstream has better fix)</changelog>
  <changelog author="jengelh@inai.de" date="1382270401">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
</package>
<package pkgid="0f2bb6a3cbf1b453f41d1edf16d3901630a5fbcd8692dd44d04c945a333abad3" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="9.1"/>
  <changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
  <changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
  <changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
  <changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
  <changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
  <changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
  <changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>
</package>
<package pkgid="17c7332a089791f5a7616c14ab4a53f4af3fe145e531522938712648ffc3a5c4" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="9.1"/>
  <changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
  <changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
  <changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
  <changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
  <changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
  <changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
  <changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
  <changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
  <changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>
</package>
<package pkgid="58fc664e8bd20efdbabf49cb3dc89f9929a69e7381f6fa490a4154b6489bb315" name="irssi" arch="src">
  <version epoch="0" ver="1.0.5" rel="17.1"/>
  <changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
</package>
<package pkgid="af716ac1b4b4023feaaba437c05e600728d20b1e7759d5b65500810728006d7a" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="17.1"/>
  <changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
</package>
<package pkgid="36793080329cbac4dbde0809c9a4dc53431364235c28db47834855e26d17c35a" name="irssi" arch="src">
  <version epoch="0" ver="1.0.6" rel="21.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
</package>
<package pkgid="6bb4521f32b523690b164d3a90f15707c9e67dcdcd2f9115372cdfe094afb7f6" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="21.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
</package>
<package pkgid="6b0c0210716afc3599f00b967aacb73f660400a812de8c278076f8ed6dca48b4" name="irssi" arch="src">
  <version epoch="0" ver="1.0.7" rel="25.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.0.7 (bsc#1081238):
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
</package>
<package pkgid="e6f58fccb31a589a8b0d1661b751b11d50c92d35f55ab9673a9aec6006b919f8" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="25.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.0.7 (bsc#1081238):
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
</package>
<package pkgid="0b4c991754710b8fea4f6c7d065aceee24555030caaecb5b5181db54a6349eef" name="irssi" arch="src">
  <version epoch="0" ver="1.1.2" rel="29.1"/>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
</package>
<package pkgid="e91cf8e286a90dda9af9e5ed763992cedbdb0e75e8dfb8d0530642dcf9e7a5eb" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="29.1"/>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
</package>
<package pkgid="ff64e842e4a89ad58ef0a1a52474dc4d3fbd4ef583ebdb4fbd448b029928b201" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="17.1"/>
  <changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
</package>
<package pkgid="055643b4c4697d0f961727b2d7b328844b37df37fc0b522743b058ba89587653" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="21.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
</package>
<package pkgid="c646d7e11063f9fdf7b3245aa3d4263c570b254e7ff91f197b12eebfd24f4341" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="25.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
  <changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.0.7 (bsc#1081238):
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
</package>
<package pkgid="86f2582b774f679b1c716d6e0fea456ae45fc2e5a0a235858d3941a359cb468d" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="29.1"/>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
</package>
<package pkgid="e4e89b10a1abc7a9dc43c95e36985bf8e07339abb6483d573ad890596e7d4885" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="53.1"/>
  <changelog author="lduncan@suse.com" date="1441368000">- open-isns: For bsc#941791:
  - Set up /etc/isns/*.conf files when installing
  - Install /etc/isns/isnsadm.conf</changelog>
  <changelog author="lduncan@suse.com" date="1441368001">- open-isns: For bsc#941944:
  - Allow setting server name with "--server"
  - Ensure we can reliably get our IP address</changelog>
  <changelog author="lduncan@suse.com" date="1443441600">- added patch submitted upstream by QLogic:
  iscsiuio: Add QLogic Vendor ID to support newer NX2 HBAs</changelog>
  <changelog author="lduncan@suse.com" date="1444305600">- isns: Remove the debugging output from isnsd (bsc#949443)</changelog>
  <changelog author="lduncan@suse.com" date="1444305601">- isns: Adding signal managment around DB update,
  and ignore empty DB file (bsc#941791)</changelog>
  <changelog author="lduncan@suse.com" date="1444305602">- isns: exit with success when terminated with SIGTERM (bsc#948561)</changelog>
  <changelog author="lduncan@suse.com" date="1452168000">- Added 5 upstream patches for iscsiuio (bsc#960438):
  iscsiuio: Get the library to use based on uio sysfs name
  iscsiuio: Wait for iface to be ready before issuing the ping
  iscsiadm: let ping be tried after iface config is initialized
  iscsiuio: Add ping support through iscsiuio
  iscsid: Changes to support ping through iscsiuio
- Updated spec file copyright
- Build service git diffs now using 12-digit commit IDs</changelog>
  <changelog author="lduncan@suse.com" date="1460376000">- Update user-space open-iscsi tools (bsc#975217, FATE#320753),
  which included:
  + Backported changes from openSUSE:Factory branch:
  * Removing creation of open-isns RPM.
  * Allow setting host params to return EAGAIN errors.
  * Kernel include path
  * Fix iBFT target flags check.
  * fix typo
  * Fix typo in man page.
  * Use system-wide open-isns, not internal version.
  * iscsi: remove local copy of open-isns
  * iscsid: make sure actor is delated before rescheduling
  * iscsid/iscsiuio: remove uio poll
  * iscsid: fix iscsi_host_set_net_params return code
  * Syncing up utils/fwparam_ibft with upstream.
  * Syncing top-level files with upstream.
  * Fixed duplicate lines for subnet_mask and gateway
  + Update SPEC file for spliced open-isns by copying open-isns
  upstream tarball and patches from factory, since open-isns is no
  longer part of open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1462536000">- Added patch submitted upstream that sets socket option
  to SO_LINGER (bsc#974102)</changelog>
  <changelog author="lduncan@suse.com" date="1476446400">- Stop manual sessions for iscsi service (bsc#989548)</changelog>
  <changelog author="lduncan@suse.com" date="1477742400">- Added open-isns patch to remove Discovery
  Domain doubling when loading from file (bsc#897297),
  adding patch:
  * open-isns-Fix-DD-member-doubling-when-restoring-from-DB.patch</changelog>
  <changelog author="lduncan@suse.com" date="1480075200">- Added two patches submitted upstream that
  make iscsi service shutdown cleaner (bsc#952437)</changelog>
  <changelog author="lduncan@suse.com" date="1491825600">- This is now the latest upstream open-iscsi, i.e. 2.0.874
  plus latest as of this date, together with SUSE-specific
  changes that are not yet upstream or not appropriate for
  upstream. (bsc#1032402/FATE#321911)
  Important changes in this update include:
  * qedi transport support
  * README cleanup
  * iscsiuio update
  * shutdown cleanup
  Also, the base tar file has been refactored to
  pre 2.0.874-suse as well as patches file for everything
  after that tag.
  Lastly, this update syncs this "Changes" file in Factory to and
  SLE, including SLE bug and FATE numbers, for reference.</changelog>
  <changelog author="lduncan@suse.com" date="1493035200">- Fixed coredump when printing session information (bsc#1035236),
  backporting commit c8e6198dca71 from upstream open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1493380800">- Added support for qedi ping (bsc#1036238)</changelog>
  <changelog author="lduncan@suse.com" date="1495800000">- Added two iscsiuio upstream commits, for ipv6
  support, and general bug fixes (bsc#1040559)</changelog>
  <changelog author="lduncan@suse.com" date="1501156800">- Clear errno before calling strotull in iscsiadm
  (bsc#1029364). Note that this changes the file:
  * open-iscsi-SUSE-latest.diff.bz2
  which is changed each and every time this package is updated.</changelog>
  <changelog author="lduncan@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492)
  in SPEC file, which (as always) changes:
  * open-iscsi-SUSE-latest.diff.bz2
  +-------------------------------------------------------------------</changelog>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513771200">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="f365268554c4bef2b5752f70befa0c9a1b55bad224d0038ebd796246e7da6f39" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="56.3"/>
  <changelog author="lduncan@suse.com" date="1443441600">- added patch submitted upstream by QLogic:
  iscsiuio: Add QLogic Vendor ID to support newer NX2 HBAs</changelog>
  <changelog author="lduncan@suse.com" date="1444305600">- isns: Remove the debugging output from isnsd (bsc#949443)</changelog>
  <changelog author="lduncan@suse.com" date="1444305601">- isns: Adding signal managment around DB update,
  and ignore empty DB file (bsc#941791)</changelog>
  <changelog author="lduncan@suse.com" date="1444305602">- isns: exit with success when terminated with SIGTERM (bsc#948561)</changelog>
  <changelog author="lduncan@suse.com" date="1452168000">- Added 5 upstream patches for iscsiuio (bsc#960438):
  iscsiuio: Get the library to use based on uio sysfs name
  iscsiuio: Wait for iface to be ready before issuing the ping
  iscsiadm: let ping be tried after iface config is initialized
  iscsiuio: Add ping support through iscsiuio
  iscsid: Changes to support ping through iscsiuio
- Updated spec file copyright
- Build service git diffs now using 12-digit commit IDs</changelog>
  <changelog author="lduncan@suse.com" date="1460376000">- Update user-space open-iscsi tools (bsc#975217, FATE#320753),
  which included:
  + Backported changes from openSUSE:Factory branch:
  * Removing creation of open-isns RPM.
  * Allow setting host params to return EAGAIN errors.
  * Kernel include path
  * Fix iBFT target flags check.
  * fix typo
  * Fix typo in man page.
  * Use system-wide open-isns, not internal version.
  * iscsi: remove local copy of open-isns
  * iscsid: make sure actor is delated before rescheduling
  * iscsid/iscsiuio: remove uio poll
  * iscsid: fix iscsi_host_set_net_params return code
  * Syncing up utils/fwparam_ibft with upstream.
  * Syncing top-level files with upstream.
  * Fixed duplicate lines for subnet_mask and gateway
  + Update SPEC file for spliced open-isns by copying open-isns
  upstream tarball and patches from factory, since open-isns is no
  longer part of open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1462536000">- Added patch submitted upstream that sets socket option
  to SO_LINGER (bsc#974102)</changelog>
  <changelog author="lduncan@suse.com" date="1476446400">- Stop manual sessions for iscsi service (bsc#989548)</changelog>
  <changelog author="lduncan@suse.com" date="1477742400">- Added open-isns patch to remove Discovery
  Domain doubling when loading from file (bsc#897297),
  adding patch:
  * open-isns-Fix-DD-member-doubling-when-restoring-from-DB.patch</changelog>
  <changelog author="lduncan@suse.com" date="1480075200">- Added two patches submitted upstream that
  make iscsi service shutdown cleaner (bsc#952437)</changelog>
  <changelog author="lduncan@suse.com" date="1491825600">- This is now the latest upstream open-iscsi, i.e. 2.0.874
  plus latest as of this date, together with SUSE-specific
  changes that are not yet upstream or not appropriate for
  upstream. (bsc#1032402/FATE#321911)
  Important changes in this update include:
  * qedi transport support
  * README cleanup
  * iscsiuio update
  * shutdown cleanup
  Also, the base tar file has been refactored to
  pre 2.0.874-suse as well as patches file for everything
  after that tag.
  Lastly, this update syncs this "Changes" file in Factory to and
  SLE, including SLE bug and FATE numbers, for reference.</changelog>
  <changelog author="lduncan@suse.com" date="1493035200">- Fixed coredump when printing session information (bsc#1035236),
  backporting commit c8e6198dca71 from upstream open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1493380800">- Added support for qedi ping (bsc#1036238)</changelog>
  <changelog author="lduncan@suse.com" date="1495800000">- Added two iscsiuio upstream commits, for ipv6
  support, and general bug fixes (bsc#1040559)</changelog>
  <changelog author="lduncan@suse.com" date="1501156800">- Clear errno before calling strotull in iscsiadm
  (bsc#1029364). Note that this changes the file:
  * open-iscsi-SUSE-latest.diff.bz2
  which is changed each and every time this package is updated.</changelog>
  <changelog author="lduncan@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492)
  in SPEC file, which (as always) changes:
  * open-iscsi-SUSE-latest.diff.bz2
  +-------------------------------------------------------------------</changelog>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513771200">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519300800">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="99b22b0aa4f4daad6b2230b0bb34031f8df405d5fd93f8c9087aa3141d1ed2d5" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="60.1"/>
  <changelog author="lduncan@suse.com" date="1444305600">- isns: exit with success when terminated with SIGTERM (bsc#948561)</changelog>
  <changelog author="lduncan@suse.com" date="1452168000">- Added 5 upstream patches for iscsiuio (bsc#960438):
  iscsiuio: Get the library to use based on uio sysfs name
  iscsiuio: Wait for iface to be ready before issuing the ping
  iscsiadm: let ping be tried after iface config is initialized
  iscsiuio: Add ping support through iscsiuio
  iscsid: Changes to support ping through iscsiuio
- Updated spec file copyright
- Build service git diffs now using 12-digit commit IDs</changelog>
  <changelog author="lduncan@suse.com" date="1460376000">- Update user-space open-iscsi tools (bsc#975217, FATE#320753),
  which included:
  + Backported changes from openSUSE:Factory branch:
  * Removing creation of open-isns RPM.
  * Allow setting host params to return EAGAIN errors.
  * Kernel include path
  * Fix iBFT target flags check.
  * fix typo
  * Fix typo in man page.
  * Use system-wide open-isns, not internal version.
  * iscsi: remove local copy of open-isns
  * iscsid: make sure actor is delated before rescheduling
  * iscsid/iscsiuio: remove uio poll
  * iscsid: fix iscsi_host_set_net_params return code
  * Syncing up utils/fwparam_ibft with upstream.
  * Syncing top-level files with upstream.
  * Fixed duplicate lines for subnet_mask and gateway
  + Update SPEC file for spliced open-isns by copying open-isns
  upstream tarball and patches from factory, since open-isns is no
  longer part of open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1462536000">- Added patch submitted upstream that sets socket option
  to SO_LINGER (bsc#974102)</changelog>
  <changelog author="lduncan@suse.com" date="1476446400">- Stop manual sessions for iscsi service (bsc#989548)</changelog>
  <changelog author="lduncan@suse.com" date="1477742400">- Added open-isns patch to remove Discovery
  Domain doubling when loading from file (bsc#897297),
  adding patch:
  * open-isns-Fix-DD-member-doubling-when-restoring-from-DB.patch</changelog>
  <changelog author="lduncan@suse.com" date="1480075200">- Added two patches submitted upstream that
  make iscsi service shutdown cleaner (bsc#952437)</changelog>
  <changelog author="lduncan@suse.com" date="1491825600">- This is now the latest upstream open-iscsi, i.e. 2.0.874
  plus latest as of this date, together with SUSE-specific
  changes that are not yet upstream or not appropriate for
  upstream. (bsc#1032402/FATE#321911)
  Important changes in this update include:
  * qedi transport support
  * README cleanup
  * iscsiuio update
  * shutdown cleanup
  Also, the base tar file has been refactored to
  pre 2.0.874-suse as well as patches file for everything
  after that tag.
  Lastly, this update syncs this "Changes" file in Factory to and
  SLE, including SLE bug and FATE numbers, for reference.</changelog>
  <changelog author="lduncan@suse.com" date="1493035200">- Fixed coredump when printing session information (bsc#1035236),
  backporting commit c8e6198dca71 from upstream open-iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1493380800">- Added support for qedi ping (bsc#1036238)</changelog>
  <changelog author="lduncan@suse.com" date="1495800000">- Added two iscsiuio upstream commits, for ipv6
  support, and general bug fixes (bsc#1040559)</changelog>
  <changelog author="lduncan@suse.com" date="1501156800">- Clear errno before calling strotull in iscsiadm
  (bsc#1029364). Note that this changes the file:
  * open-iscsi-SUSE-latest.diff.bz2
  which is changed each and every time this package is updated.</changelog>
  <changelog author="lduncan@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492)
  in SPEC file, which (as always) changes:
  * open-iscsi-SUSE-latest.diff.bz2
  +-------------------------------------------------------------------</changelog>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513771200">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519300800">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1533729600">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100351), updating:
  * open-iscsi-SUSE-latest.diff.bz2
  And update SPEC file to latest. Also, replace
  open-iscsi-2.0.874-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2</changelog>
  <changelog author="bbrunner@suse.com" date="1534420800">- Add iscsiuio to CaaSP3 (bsc#1104471)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540987200">- Add iscsiuio upstream fix for limiting dhpcv6 retries
  (bsc#1105916)
- Restore space to output of "iscsiadm -m node" (bsc#1111608)
- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589),
  All updating the file:
  * open-iscsi-SUSE-latest.diff.bz2
- New library version needs to Obsolete the previous version,
  add a note about *not* editing the SPEC file directly, and
  change http to https, all updating SPEC file
- Added new README.updates, to warn people not to update
  ANY file here in the build service directly!</changelog>
</package>
<package pkgid="5213322d2c3eb6c14856a5173c2d8fe4cdcccf9c74639f732008c0fc31aca0c4" name="ispell" arch="src">
  <version epoch="0" ver="3.3.02" rel="118.1"/>
  <changelog author="werner@suse.de" date="1143633600">- Add locale provides (bug #161478)</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Don't strip binaries.</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- Add bison and ncurses-devel BuildRequires.</changelog>
  <changelog author="werner@suse.de" date="1180612800">- Fix sq/unsq, hint from Thomas Rachel</changelog>
  <changelog author="werner@suse.de" date="1180612801">- Update ispell to version 3.3.02 including various bug fixes
  and add new old html parser and support for UTF-8.</changelog>
  <changelog author="ro@suse.de" date="1244376000">- rename getline to my_getline to avoid conflict with function
  from glibc</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="werner@suse.de" date="1282305600">- Run SuSEconfig.ispell if YaST is not used to make sure that we
  have an english dictionary</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="werner@suse.de" date="1340020800">- Rename and relocate SuSEconfig.ispell</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Hint from Björn Jacke that old style sort is broken, therefore
  enforce usage of modern sort options</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Remove mixed patch leftover</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in SuSEconfig.ispell (update) script</changelog>
  <changelog author="werner@suse.de" date="1423051200">- Use real POSIX shell syntax
- Fix ispell update script thas is do not try to source old SUSE
  config files (boo#916001)</changelog>
  <changelog author="werner@suse.de" date="1423569600">- Xemacs knows about define-coding-system-alia therefore use it (boo#896947)</changelog>
  <changelog author="werner@suse.de" date="1439812800">- Add changes from openSUSE to fix e.g. bsc#941760</changelog>
  <changelog author="werner@suse.de" date="1455278400">- Add patch boo966124.dif that is correct typo in english.3 word
  list (boo#966124)</changelog>
  <changelog author="werner@suse.de" date="1464609600">- Extend patch boo966124.dif for bug boo#981024</changelog>
  <changelog author="werner@suse.de" date="1479816000">- Extend patch boo966124.dif for bug boo#1010330</changelog>
  <changelog author="werner@suse.de" date="1515931200">- Avoid `set -e' in munchlist (boo#1075882)</changelog>
</package>
<package pkgid="6eb496a77cd05eef4ebd59457e431854ee1592dd57b7325bddde3caac1e0506e" name="ispell" arch="x86_64">
  <version epoch="0" ver="3.3.02" rel="118.1"/>
  <changelog author="ro@suse.de" date="1244376000">- rename getline to my_getline to avoid conflict with function
  from glibc</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="werner@suse.de" date="1282305600">- Run SuSEconfig.ispell if YaST is not used to make sure that we
  have an english dictionary</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="werner@suse.de" date="1340020800">- Rename and relocate SuSEconfig.ispell</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Hint from Björn Jacke that old style sort is broken, therefore
  enforce usage of modern sort options</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Remove mixed patch leftover</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in SuSEconfig.ispell (update) script</changelog>
  <changelog author="werner@suse.de" date="1423051200">- Use real POSIX shell syntax
- Fix ispell update script thas is do not try to source old SUSE
  config files (boo#916001)</changelog>
  <changelog author="werner@suse.de" date="1423569600">- Xemacs knows about define-coding-system-alia therefore use it (boo#896947)</changelog>
  <changelog author="werner@suse.de" date="1439812800">- Add changes from openSUSE to fix e.g. bsc#941760</changelog>
  <changelog author="werner@suse.de" date="1455278400">- Add patch boo966124.dif that is correct typo in english.3 word
  list (boo#966124)</changelog>
  <changelog author="werner@suse.de" date="1464609600">- Extend patch boo966124.dif for bug boo#981024</changelog>
  <changelog author="werner@suse.de" date="1479816000">- Extend patch boo966124.dif for bug boo#1010330</changelog>
  <changelog author="werner@suse.de" date="1515931200">- Avoid `set -e' in munchlist (boo#1075882)</changelog>
</package>
<package pkgid="a4ac47015d9c83b927c0e5a169ee76f07475b91c63d95da879bd09149c5b279e" name="ispell-american" arch="x86_64">
  <version epoch="0" ver="3.3.02" rel="118.1"/>
  <changelog author="ro@suse.de" date="1244376000">- rename getline to my_getline to avoid conflict with function
  from glibc</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="werner@suse.de" date="1282305600">- Run SuSEconfig.ispell if YaST is not used to make sure that we
  have an english dictionary</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="werner@suse.de" date="1340020800">- Rename and relocate SuSEconfig.ispell</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Hint from Björn Jacke that old style sort is broken, therefore
  enforce usage of modern sort options</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Remove mixed patch leftover</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in SuSEconfig.ispell (update) script</changelog>
  <changelog author="werner@suse.de" date="1423051200">- Use real POSIX shell syntax
- Fix ispell update script thas is do not try to source old SUSE
  config files (boo#916001)</changelog>
  <changelog author="werner@suse.de" date="1423569600">- Xemacs knows about define-coding-system-alia therefore use it (boo#896947)</changelog>
  <changelog author="werner@suse.de" date="1439812800">- Add changes from openSUSE to fix e.g. bsc#941760</changelog>
  <changelog author="werner@suse.de" date="1455278400">- Add patch boo966124.dif that is correct typo in english.3 word
  list (boo#966124)</changelog>
  <changelog author="werner@suse.de" date="1464609600">- Extend patch boo966124.dif for bug boo#981024</changelog>
  <changelog author="werner@suse.de" date="1479816000">- Extend patch boo966124.dif for bug boo#1010330</changelog>
  <changelog author="werner@suse.de" date="1515931200">- Avoid `set -e' in munchlist (boo#1075882)</changelog>
</package>
<package pkgid="8bd7c04fb1a2fd12e66de09bc69f9be882550135b94ab1952e45d917334c1377" name="ispell-british" arch="x86_64">
  <version epoch="0" ver="3.3.02" rel="118.1"/>
  <changelog author="ro@suse.de" date="1244376000">- rename getline to my_getline to avoid conflict with function
  from glibc</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="werner@suse.de" date="1282305600">- Run SuSEconfig.ispell if YaST is not used to make sure that we
  have an english dictionary</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="werner@suse.de" date="1340020800">- Rename and relocate SuSEconfig.ispell</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Hint from Björn Jacke that old style sort is broken, therefore
  enforce usage of modern sort options</changelog>
  <changelog author="werner@suse.de" date="1386590400">- Remove mixed patch leftover</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in SuSEconfig.ispell (update) script</changelog>
  <changelog author="werner@suse.de" date="1423051200">- Use real POSIX shell syntax
- Fix ispell update script thas is do not try to source old SUSE
  config files (boo#916001)</changelog>
  <changelog author="werner@suse.de" date="1423569600">- Xemacs knows about define-coding-system-alia therefore use it (boo#896947)</changelog>
  <changelog author="werner@suse.de" date="1439812800">- Add changes from openSUSE to fix e.g. bsc#941760</changelog>
  <changelog author="werner@suse.de" date="1455278400">- Add patch boo966124.dif that is correct typo in english.3 word
  list (boo#966124)</changelog>
  <changelog author="werner@suse.de" date="1464609600">- Extend patch boo966124.dif for bug boo#981024</changelog>
  <changelog author="werner@suse.de" date="1479816000">- Extend patch boo966124.dif for bug boo#1010330</changelog>
  <changelog author="werner@suse.de" date="1515931200">- Avoid `set -e' in munchlist (boo#1075882)</changelog>
</package>
<package pkgid="bc20bdab1423eb89909c43c162d20cd292e42e08d6ab3ce07bdcab2445ea91ee" name="itk" arch="src">
  <version epoch="0" ver="4.1.0" rel="11.3.1"/>
  <changelog author="max@suse.de" date="1038484800">- Itcl is a source package of it's own now.
  For older history see the change log of the tcl package.
- New CVS snapshot: itcl3.3-20021030
- Build with threading support if Tcl was built to support threads.
- Place the libraries in libdir instead of libdir/itcl3.3
- Running the testsuite during build. The following tests are known
  to fail currently: basic-5.6a, mkindex-1.3, interp-1.2</changelog>
  <changelog author="ro@suse.de" date="1042113600">- added freetype2 to neededforbuild (needed to run Xvfb)</changelog>
  <changelog author="max@suse.de" date="1058961600">- Added tk-devel to neededforbuild.</changelog>
  <changelog author="adrian@suse.de" date="1073736000">- add %defattr and %run_ldconfig</changelog>
  <changelog author="max@suse.de" date="1076068800">- Added -fno-strict-aliasing to CFLAGS.</changelog>
  <changelog author="ro@suse.de" date="1077451200">- added libusb and resmgr to neededforbuild</changelog>
  <changelog author="sndirsch@suse.de" date="1082808000">- fixed neededforbuild (XFree86 --&gt; xorg-x11)</changelog>
  <changelog author="max@suse.de" date="1092744000">- Updated to current CVS snapshot.
- Cleaned up the spec file from lots of old cruft.
- Disabled running the test suite due to problems with Xvfb.</changelog>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1118750400">- Updated to current CVS snapshot.
- Moved script libraries to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fixed syntax error in tcl configure</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="olh@suse.de" date="1179316800">- remove unused libusb from Buildrequires</changelog>
  <changelog author="max@suse.de" date="1207310400">- Update to version 3.4 from CVS, which works with Tcl 8.5.
- Separate itcl and itk source packages</changelog>
  <changelog author="max@suse.de" date="1209124800">- Added split-provides.</changelog>
  <changelog author="max@suse.de" date="1211198400">- itk requires itcl</changelog>
  <changelog author="max@suse.com" date="1371729600">- Snapshot of 4.0.0 for compatibility with Tcl/Tk 8.6.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Use a current 4.1.0 snapshot to fix a segfault with Tcl/Tk 8.6.7.</changelog>
</package>
<package pkgid="cb7948d01ff80d741eabd64dabc824e9497ae03c64f59839a8b639bcd1663820" name="itk" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="11.3.1"/>
  <changelog author="ro@suse.de" date="1100174400">- fixed file list</changelog>
  <changelog author="max@suse.de" date="1118750400">- Updated to current CVS snapshot.
- Moved script libraries to /usr/share/tcl .</changelog>
  <changelog author="ro@suse.de" date="1134561600">- fixed syntax error in tcl configure</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="olh@suse.de" date="1179316800">- remove unused libusb from Buildrequires</changelog>
  <changelog author="max@suse.de" date="1207310400">- Update to version 3.4 from CVS, which works with Tcl 8.5.
- Separate itcl and itk source packages</changelog>
  <changelog author="max@suse.de" date="1209124800">- Added split-provides.</changelog>
  <changelog author="max@suse.de" date="1211198400">- itk requires itcl</changelog>
  <changelog author="max@suse.com" date="1371729600">- Snapshot of 4.0.0 for compatibility with Tcl/Tk 8.6.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Use a current 4.1.0 snapshot to fix a segfault with Tcl/Tk 8.6.7.</changelog>
</package>
<package pkgid="410b3fe3f04176d2485b26a3e44ec13923fbfe672c4e42f7c722b142d5f63437" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="14" rel="11.1"/>
  <changelog author="pth@suse.de" date="1493121600">- Fix Group for rdma-core.</changelog>
  <changelog author="fcrozat@suse.com" date="1493208000">- specfile cleanup, remove libibverbs-devel subpackage, since it no
  longer exists.
- ibacm shouldn't obsolete its older versions.</changelog>
  <changelog author="pth@suse.de" date="1493380800">- Update to git version fd1db488 as it now contains the bnxt drivr.
  No log of changes present (fate#321907).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493899200">- Provide ofed for legacy packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493985600">- Remove redundant Requires on ldconfig (-p already does this).
- Add missing systemd requires.
- RPM group assignment fixes.
- Remove pointless comments which cause scriptlets to be not empty
  in some cases.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Update to rdma-core v14-rc1 (bsc#1016427).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494504000">- Add baselibs.conf to generate -32bit libraries (bsc#1038742).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849600">- Update to 14-rc1-40-g706fc2af (fate#321907, bsc#1020415).
  No releases notes. Contains libbnxtre bug fixes</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849601">- Split rdma-ndd into its own package to replace previous package
  from infiniband-diags (bsc#1039146).</changelog>
  <changelog author="pth@suse.de" date="1495540800">- Fix rdma.service which had /usr/libexec hardcoded (bsc#1039999).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496059200">- Fix all references to /usr/libexec (bsc#1039999)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Update to v14 (bsc#321907).
  * Introduction of bnxt_re driver
  * Rework srp_daemon's systemd integration
  * Various fixes in qedr, mlx4, mlx5, bnxrt_re and rxe drivers
  * New supported PCI ID were added to mlx5
  * Addition of manual pages for cmtime and udpong programs
  * Multiple fixes of spelling types and documentation clarifications
  * Sparse fixes
  * rping gained ability to bind to source IP address
  * Various improvements in cmake and cbuild infrastructures
  * Add support for flow tag, CVLAN and VXLAN specifications
  * Provide ability to pass private data to create CQ
  * Exposure various device capabilities to user applications</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496836800">- Add patch rdma-core-s390x.patch to fix s390x build (bsc#1043105).
  * Add missing verbs providers for s390x
  * Add mlx5 package for s390x
- libibverbs1 requires libibverbs (bsc#1042840).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505304000">- Remove dependency to dracut (bsc#1058504)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Backport Broadcom patches from v15 (bsc#1060413)
  * Add bnxt_re-Add-Broadcom-BCM57454-BCM58730-BCM57452-BCM58802-devices.patch
    to support new Broadcom devices
  * Add bnxt_re-Fix-Wimplicit-fallthrough-warnings-in-GCC-7.1.patch
    to fix GCC 7 warnings</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513857600">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520337600">- Add qedr-Set-immediate-data-sent-via-EDPM-as-is.patch
  to fix rcopy on QLogic hardware (bsc#1083169)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
</package>
<package pkgid="8719be2b08163cc3115377cfb7540e017b78038651493658a6ea6d6c410fc1ca" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="14" rel="8.1"/>
  <changelog author="pth@suse.de" date="1490184000">- fix Provides/Obsoletes</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Comment out the -devel requiring ibacm for bootstrapping.</changelog>
  <changelog author="pth@suse.de" date="1493121600">- Fix Group for rdma-core.</changelog>
  <changelog author="fcrozat@suse.com" date="1493208000">- specfile cleanup, remove libibverbs-devel subpackage, since it no
  longer exists.
- ibacm shouldn't obsolete its older versions.</changelog>
  <changelog author="pth@suse.de" date="1493380800">- Update to git version fd1db488 as it now contains the bnxt drivr.
  No log of changes present (fate#321907).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493899200">- Provide ofed for legacy packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1493985600">- Remove redundant Requires on ldconfig (-p already does this).
- Add missing systemd requires.
- RPM group assignment fixes.
- Remove pointless comments which cause scriptlets to be not empty
  in some cases.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Update to rdma-core v14-rc1 (bsc#1016427).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494504000">- Add baselibs.conf to generate -32bit libraries (bsc#1038742).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849600">- Update to 14-rc1-40-g706fc2af (fate#321907, bsc#1020415).
  No releases notes. Contains libbnxtre bug fixes</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1494849601">- Split rdma-ndd into its own package to replace previous package
  from infiniband-diags (bsc#1039146).</changelog>
  <changelog author="pth@suse.de" date="1495540800">- Fix rdma.service which had /usr/libexec hardcoded (bsc#1039999).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496059200">- Fix all references to /usr/libexec (bsc#1039999)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Update to v14 (bsc#321907).
  * Introduction of bnxt_re driver
  * Rework srp_daemon's systemd integration
  * Various fixes in qedr, mlx4, mlx5, bnxrt_re and rxe drivers
  * New supported PCI ID were added to mlx5
  * Addition of manual pages for cmtime and udpong programs
  * Multiple fixes of spelling types and documentation clarifications
  * Sparse fixes
  * rping gained ability to bind to source IP address
  * Various improvements in cmake and cbuild infrastructures
  * Add support for flow tag, CVLAN and VXLAN specifications
  * Provide ability to pass private data to create CQ
  * Exposure various device capabilities to user applications</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496836800">- Add patch rdma-core-s390x.patch to fix s390x build (bsc#1043105).
  * Add missing verbs providers for s390x
  * Add mlx5 package for s390x
- libibverbs1 requires libibverbs (bsc#1042840).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505304000">- Remove dependency to dracut (bsc#1058504)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Backport Broadcom patches from v15 (bsc#1060413)
  * Add bnxt_re-Add-Broadcom-BCM57454-BCM58730-BCM57452-BCM58802-devices.patch
    to support new Broadcom devices
  * Add bnxt_re-Fix-Wimplicit-fallthrough-warnings-in-GCC-7.1.patch
    to fix GCC 7 warnings</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513857600">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1049515)</changelog>
</package>
<package pkgid="65b61e75c8cf8ee7ccc52fe9e50904975a75cb48a42b257ea5f76ebc5e0bb182" name="jasper" arch="src">
  <version epoch="0" ver="1.900.14" rel="179.1"/>
  <changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
  <changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
  <changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
  <changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
  <changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>
</package>
<package pkgid="2de44eaeda47c2d02d9080fd7295415c0a05c030609f3fd59af80bba2b6f8eab" name="jasper" arch="x86_64">
  <version epoch="0" ver="1.900.14" rel="179.1"/>
  <changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
  <changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
  <changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
  <changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
  <changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>
</package>
<package pkgid="314a5b86e2570a1497df13d219282e29a094e1827ae05cde45e430936b71936a" name="jasper" arch="src">
  <version epoch="0" ver="1.900.14" rel="182.1"/>
  <changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
  <changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
  <changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
  <changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
</package>
<package pkgid="26e91a31ba49b14277aafe3164a3e66910bd934033b8e6a8f69944acfd62608f" name="jasper" arch="x86_64">
  <version epoch="0" ver="1.900.14" rel="182.1"/>
  <changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
  <changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
  <changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
  <changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
</package>
<package pkgid="918213953cf83c85c8fd310c350302554e6bf5e843688403c994c0df21c3c8ef" name="java-1_5_0-gcj-compat" arch="src">
  <version epoch="0" ver="1.5.0.0" rel="139.1"/>
  <changelog author="ro@suse.de" date="1196424000">- added baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1196683200">- provide/obsolete also for the devel package</changelog>
  <changelog author="ro@suse.de" date="1196683201">- fix typo in specfile</changelog>
  <changelog author="ro@suse.de" date="1196683202">- also provide classpath in the main package for now</changelog>
  <changelog author="ro@suse.de" date="1197633600">- also provide jta there</changelog>
  <changelog author="skh@suse.de" date="1200571200">- provide a symlink to libgcj-tools-*.jar in -devel</changelog>
  <changelog author="mvyskocil@suse.cz" date="1207742400">- fix a ppc64 build (defino a bits 64 macro for that arch)</changelog>
  <changelog author="coolo@suse.de" date="1210161600">- mark the update path of classpath</changelog>
  <changelog author="mvyskocil@suse.cz" date="1228478400">- fixed bnc#447342 - Missing GNU Java cacerts</changelog>
  <changelog author="rguenther@suse.de" date="1234785600">- Use gkeytool%{gccbinsuffix} instead of invoking gkeytool-4.3 directly.</changelog>
  <changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
  <changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
  <changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>
</package>
<package pkgid="ded2387a71e641af26cc8771f00bd662593b1b17fe0fa0c21f36c615cc62761d" name="java-1_5_0-gcj-compat" arch="x86_64">
  <version epoch="0" ver="1.5.0.0" rel="139.1"/>
  <changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
  <changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
  <changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>
</package>
<package pkgid="f27e774fc64310c9a42ea279ee75cdff6ed0743379ba58a169d9fe5d95519461" name="java-1_5_0-gcj-compat-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.0.0" rel="139.1"/>
  <changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
  <changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
  <changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>
</package>
<package pkgid="44e5b87ff27eb18de3cc71f323a50ccec0c7e4f432c16fa2ad261d67d8b4c742" name="java-1_5_0-gcj-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0.0" rel="139.1"/>
  <changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
  <changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
  <changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>
</package>
<package pkgid="80a8ea7306f0ec21e1024155db83b1ea70cd9a7388aabc6ea344748cd7e1371b" name="java-1_7_0-openjdk" arch="src">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="d85e6554bad1f39d4ea19287839103f0b95d7d4d091335252b5af1fe220b25f2" name="java-1_7_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="080e08a9cc55f9c710ac4adbdd7af5cdd1b9d6e931687ec50542f4a7cd6b318d" name="java-1_7_0-openjdk" arch="src">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="faa57b26c632f86b266f2ada096b830bdc3047c496de212d50d886ca6bf09b1e" name="java-1_7_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="3d240c28c88e01e83fb4222f9b6be7946cdd3c0ea968cbb686ca9df3c4ac3540" name="java-1_7_0-openjdk" arch="src">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="90285cb5739c887417edb68bb58e256b7a4311d1d39d60be1947cd183b3df145" name="java-1_7_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="09c2f3a1bc93b482670a99da7e797b23988add570431593ee47f6e431b28345a" name="java-1_7_0-openjdk" arch="src">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="479a4033eec8c5e96a41ba1b2963af971ccfa50ad2ce108ce909e5995218f035" name="java-1_7_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="9ab065b9c3b02be10f10cd24967c23134d9c28bfe7973af1c0521260be3eee28" name="java-1_7_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="98eebf07af1d2512312e26d8d1784add561236ba923e460338c743adf77352ed" name="java-1_7_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="4103066ee5b1820d5208113e01a8bc9909b518aea2cb4da76aab8519cd67f0c3" name="java-1_7_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="126ebd79eca2d7b20e5341acca47893df2116b2da8363b05bdb355c07811f810" name="java-1_7_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="6d430cf0e7090e17d2da72162b767bef984486ce304e33343e4b5a78b3d605ad" name="java-1_7_0-openjdk-bootstrap" arch="src">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="15761eb38842985acf4c774343ecb1b3e6608d161f41510c1904f6a349e2195b" name="java-1_7_0-openjdk-bootstrap" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="4d8cac852267cc912179d02579e7868747dac965d80f381d3aa7db87f93efd20" name="java-1_7_0-openjdk-bootstrap" arch="src">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="b203db209483f963d60d428188f9eee0bd4e59dc11155ad7f4079f40feb061a8" name="java-1_7_0-openjdk-bootstrap" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="bfdee7c8f830785c1029d539b9c84f836ecdfabac2b9dd4b592c699f14a7385c" name="java-1_7_0-openjdk-bootstrap" arch="src">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="4ca5c8a008abdeb50fc0cb863f055f5eec9f9013fb1edfac986a4cb9054fc357" name="java-1_7_0-openjdk-bootstrap" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="8dcb467cf7e588aa5e89874992e7738d213ca941f9999816d3ef61a051eb1577" name="java-1_7_0-openjdk-bootstrap" arch="src">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="1aa43f03ffb19d982c9361deb62584713a9f36e066ac3f0167c3b193281c67fd" name="java-1_7_0-openjdk-bootstrap" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="13d1394bee83035777481abcda7de1bc7bb34a1fd2dc6003c90598d7fe619550" name="java-1_7_0-openjdk-bootstrap-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="02af81288c6618e7424fb4c74d3303b5e0fc9b771de0809fb5e367e1ab2c1596" name="java-1_7_0-openjdk-bootstrap-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="3f92c9abfd002c71e072748b84c57e3a8ed83549a065a972f86e40e6b98eb243" name="java-1_7_0-openjdk-bootstrap-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="7e11cd8a652f829ce69558f2201dcb686c57e6d3859ad16ae0637bc2a7219ea6" name="java-1_7_0-openjdk-bootstrap-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="5e6a2b70edbeb9f475cc03ff4091a6be4ddfdf7205eb2015b2c1f86dad2bde21" name="java-1_7_0-openjdk-bootstrap-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="72e64c92f06c232338a7894b10328855fdf3fb509bbca8faa74eda4532193b4f" name="java-1_7_0-openjdk-bootstrap-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="fe0e6d9aa96827d33adc48656c9e274429842f15145993d73faae363a5b0433f" name="java-1_7_0-openjdk-bootstrap-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="a8516cd98ac495e64098b721473030f4ee9df3c41dd70a0ac31f04509256f1b0" name="java-1_7_0-openjdk-bootstrap-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="3c82d7a28d72fc933a2b1c9456b063a8aa9bc77d81996a8b1e08d01347bb0e9f" name="java-1_7_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="00ce2f2f16d939bfc691a078cc86247270901999e190f55050e5e1fa1a8fee10" name="java-1_7_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="b08790efff3ab79c3ee38364f0110578128db33d0d63a378605401657ce62786" name="java-1_7_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="c3fca19bc120794f2c3b4ab9886979bebfced4164426ecc9e141ae95c8125a7e" name="java-1_7_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="fac1f3726f132c6786977ecc6e88f9227fe26f5fd65cba0cb273090a9a6c93f8" name="java-1_7_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="78a272b646c7310da00db039c49854523b36dd3f950d4ff15c37afd855c71531" name="java-1_7_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="ca0a9738186aeba5a81d4a5ec0198880ada19704679a91aab9bfef89cecc6a7b" name="java-1_7_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="0527ce19ac3ff838fa61c6a46d1e96769d9b0458dbeb06ec1ed6400d198453d3" name="java-1_7_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="31c23ba9f851df63fe9d459cd4bb58ac4914f3970844c31f69faf155c03e2bbb" name="java-1_7_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="6984932609d9e1407c8d72269bf8891be32da2ea05cf038dc2ac826b2be03b20" name="java-1_7_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="73073cb2dedf5c53a9f4eb2433b1135acc5d0f3113cefb79847fe4ca73669859" name="java-1_7_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="f61e607c7adb5c365da6d4a6225d704fbae64f1b4ffa069c3bc5e5115fdd4b16" name="java-1_7_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="bff23519620995df1a9f76a7d077ee60f8cc6653a3302afa373fba58e8f55c71" name="java-1_7_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="ad77dab2a916f8c66a9ededb414c4d774c6d0d4ca25ccd27e59e2344f751e90d" name="java-1_7_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="235f7c897c35d61e8e604d2f656e70a3a8c25d5053d04f13e7cf82999f3f020a" name="java-1_7_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="0b84f765d97352c7bcc2193cf0f8475ef8c903137d256022e5543d173ddb6c8f" name="java-1_7_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="cc0b60dc994355ae8a46c6f867ac027dee4928d15cc7b56652cd44732896d2af" name="java-1_7_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.7.0.161" rel="45.1"/>
  <changelog author="fstrba@suse.com" date="1453464000">- Update to 2.6.4 - OpenJDK 7u95 (bsc#962743)
  * Security fixes
  - S8059054, CVE-2016-0402: Better URL processing
  - S8130710, CVE-2016-0448: Better attributes processing
  - S8132210: Reinforce JMX collector internals
  - S8132988: Better printing dialogues
  - S8133962, CVE-2016-0466: More general limits
  - S8137060: JMX memory management improvements
  - S8139012: Better font substitutions
  - S8139017, CVE-2016-0483: More stable image decoding
  - S8140543, CVE-2016-0494: Arrange font actions
  - S8143185: Cleanup for handling proxies
  - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen
    displays
  - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH)
  - S8142882, CVE-2015-4871: rebinding of the receiver of a
    DirectMethodHandle may allow a protected method to be accessed
  * Import of OpenJDK 7 u95 build 0
  - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if
    more than one trust anchor is specified
  - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java
    failed with SocketTimeoutException
  - S8074068: Cleanup in src/share/classes/sun/security/x509/
  - S8075773: jps running as root fails after the fix of JDK-8050807
  - S8081297: SSL Problem with Tomcat
  - S8131181: Increment minor version of HSx for 7u95 and
    initialize the build number
  - S8132082: Let OracleUcrypto accept RSAPrivateKey
  - S8134605: Partial rework of the fix for 8081297
  - S8134861: XSLT: Extension func call cause exception if
    namespace URI contains partial package name
  - S8135307: CompletionFailure thrown when calling FieldDoc.type,
    if the field's type is missing
  - S8138716: (tz) Support tzdata2015g
  - S8140244: Port fix of JDK-8075773 to MacOSX
  - S8141213: [Parfait]Potentially blocking function
    GetArrayLength called in JNI critical region at line 239 of
    jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in
    function GET_ARRAYS
  - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
  - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java
    8u71 failure
  - S8143132: L10n resource file translation update
  - S8144955: Wrong changes were pushed with 8143942
  - S8145551: Test failed with Crash for Improved font lookups
  - S8147466: Add -fno-strict-overflow to
    IndicRearrangementProcessor{,2}.cpp
  * Backports
  - S8140244: Port fix of JDK-8075773 to AIX
  - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with
    InetAddress
  - S8140620, PR2710: Find and load default.sf2 as the default
    soundbank on Linux
- Update the java-1_7_0-openjdk.keyring file to include both keys
  of Andrew John Hughes of icedtea fame.
- Rename the keyring file and disable it in the spec file until
  the key servers can handle those keys.</changelog>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
</package>
<package pkgid="b75d9ac658cf6b5bdb2516b4fad4261ffcf5799d6c17ded61ed61a8fa538a314" name="java-1_7_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.7.0.171" rel="48.3"/>
  <changelog author="fstrba@suse.com" date="1459166400">- Update to 2.6.5 - OpenJDK 7u99 (bsc#972468)
  * Security fixes
  - S8152335, CVE-2016-0636: Improve MethodHandle consistency
  * Import of OpenJDK 7 u99 build 0
  - S6425769, PR2858: Allow specifying an address to bind JMX
    remote connector
  - S6961123: setWMClass fails to null-terminate WM_CLASS string
  - S8145982, PR2858: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2858: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  * Backports
  - S8028727, PR2814: [parfait] warnings from b116 for
    jdk.src.share.native.sun.security.ec: JNI pending exceptions
  - S8048512, PR2814: Uninitialised memory in
    jdk/src/share/native/sun/security/ec/ECC_JNI.cpp
  - S8071705. PR2819, RH1182694: Java application menu misbehaves
    when running multiple screen stacked vertically
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2803: Make system CUPS optional
  - PR2886: Location of 'stap' executable is hard-coded
  - PR2893: test/tapset/jstaptest.pl should be executable
  - PR2894: Add missing test directory in make check.
  * CACAO
  - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  * AArch64 port
  - PR2852: Add support for large code cache
  - PR2852: Apply ReservedCodeCacheSize default limiting to
    AArch64 only.
  - S8081289, PR2852: aarch64: add support for
    RewriteFrequentPairs in interpreter
  - S8131483, PR2852: aarch64: illegal stlxr instructions
  - S8133352, PR2852: aarch64: generates constrained unpredictable
    instructions
  - S8133842, PR2852: aarch64: C2 generates illegal instructions
    with int shifts &gt;=32
  - S8134322, PR2852: AArch64: Fix several errors in C2 biased
    locking implementation
  - S8136615, PR2852: aarch64: elide DecodeN when followed by
    CmpP 0
  - S8138575, PR2852: Improve generated code for profile counters
  - S8138641, PR2852: Disable C2 peephole by default for aarch64
  - S8138966, PR2852: Intermittent SEGV running ParallelGC
  - S8143067, PR2852: aarch64: guarantee failure in javac
  - S8143285, PR2852: aarch64: Missing load acquire when checking
    if ConstantPoolCacheEntry is resolved
  - S8143584, PR2852: Load constant pool tag and class status with
    load acquire
  - S8144201, PR2852: aarch64:
    jdk/test/com/sun/net/httpserver/Test6a.java fails with
  - -enable-unlimited-crypto
  - S8144582, PR2852: AArch64 does not generate correct branch
    profile data
  - S8146709, PR2852: AArch64: Incorrect use of ADRP for
    byte_map_base
  - S8147805, PR2852: aarch64: C1 segmentation fault due to inline
    Unsafe.getAndSetObject
  - S8148240, PR2852: aarch64: random infrequent null pointer
    exceptions in javac
  * PPC &amp; AIX port
  - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in
    os_aix.cpp after 8028280
  - S8139258, PR2851: PPC64LE: argument passing problem when
    passing 15 floats in native call
  - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable
    kill register R12</changelog>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
</package>
<package pkgid="1b83605a2e636a2821fa2ce26f1083803526369ce2a2fe7bd79b67aab8c351d8" name="java-1_7_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.7.0.181" rel="51.1"/>
  <changelog author="fstrba@suse.com" date="1461326400">- Update to 2.6.6 - OpenJDK 7u101 (bsc#976340)
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 7 u101 build 0
  - S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
  - S7127906: (launcher) convert the launcher regression tests to
    java
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8004007: test/sun/tools/jinfo/Basic.sh fails on when runSA is
    set to true
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8027705: com/sun/jdi/JdbMethodExitTest.sh fails when a
    background thread is generating events.
  - S8028537: PPC64: Updated the JDK regression tests to run on
    AIX
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8072753: Nondeterministic wrong answer on arithmetic
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  - S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
  - S8154210: Zero: Better byte behaviour
  * Bug fixes
  - PR2889: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2929: configure: error: "A JDK home directory could not be
    found."
  - PR2935: Check that freetype defines
    FT_CONFIG_OPTION_INFINALITY_PATCHSET if enabling infinality
  - PR2938: Fix build of 8148487 backport
  - PR2939: Remove rogue ReleaseStringUTFChars line remaining from
    merge of 7u101 b00
  * PPC &amp; AIX port
  - S8148487: PPC64: Better byte behavior
  * AArch64 port
  - S8154413: AArch64: Better byte behaviour
  - PR2914: byte_map_base is not page aligned on OpenJDK 7
  * JamVM
  - PR2665: icedtea/jamvm 2.6 fails as a build VM for icedtea</changelog>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
</package>
<package pkgid="1a7bdf413ff9ed74977553154670a84498a6c56dd0737dc892e71f779208fa62" name="java-1_7_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.7.0.201" rel="54.1"/>
  <changelog author="fstrba@suse.com" date="1464609600">- Added patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="schwab@suse.de" date="1466337600">- aarch64-remove-unused-code.patch: remove unsused definition of min
  conflicting with macro</changelog>
  <changelog author="fstrba@suse.com" date="1467201600">- Enable SunEC for SLE12 and Leap (bsc#982366)</changelog>
  <changelog author="fstrba@suse.com" date="1469793600">- Update to 2.6.7 - OpenJDK 7u111
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only)  (bsc#989734)
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes
    used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with
    javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array
    initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules
    can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates
    directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG
    SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available
    in the OS
  - S7192202: Make sure keytool prints both unknown and
    unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool
    should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so
    not found
  - S7200682: TEST_BUG: keytool/autotest.sh still has problems
    with libsoftokn.so
  - S8002306: (se) Selector.open fails if invoked with thread
    interrupt status set [win]
  - S8009636: JARSigner including TimeStamp PolicyID
    (TSAPolicyID) as defined in RFC3161
  - S8019341: Update CookieHttpsClientTest to use the newer
    framework.
  - S8022228: Intermittent test failures in
    sun/security/ssl/javax/net/ssl/NewAPIs
  - S8022439: Fix lint warnings in sun.security.ec
  - S8022594: Potential deadlock in &lt;clinit&gt; of
    sun.nio.ch.Util/IOUtil
  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails
    intermittently
  - S8036612: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/security/mscapi/security.cpp
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8079410: Hotspot version to share the same update and build
    version from JDK
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146387: Test SSLSession/SessionCacheSizeTests socket
    accept timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147857: [TEST] RMIConnector logs attribute names incorrectly
  - S8151841, PR3098: Build needs additional flags to compile
    with GCC 6
  - S8151876: (tz) Support tzdata2016d
  - S8157077: 8u101 L10n resource file updates
  - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow
    not known.
  * Import of OpenJDK 7 u111 build 1
  - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing
  - S8140344: add support for 3 digit update release numbers
  - S8145017: Add support for 3 digit hotspot minor version
    numbers
  - S8162344: The API changes made by CR 7064075 need to be
    reverted
  * Backports
  - S2178143, PR2958: JVM crashes if the number of bound CPUs
    changed during runtime
  - S4900206, PR3101: Include worst-case rounding tests for Math
    library functions
  - S6260348, PR3067: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6934604, PR3075: enable parts of EliminateAutoBox by default
  - S7043064, PR3020: sun/java2d/cmm/ tests failed against
    RI b141 &amp; b138-nightly
  - S7051394, PR3020: NullPointerException when running
    regression tests LoadProfileTest by using openjdk-7-b144
  - S7086015, PR3013: fix
    test/tools/javac/parser/netbeans/JavacParserTest.java
  - S7119487, PR3013: JavacParserTest.java test fails on Windows
    platforms
  - S7124245, PR3020: [lcms] ColorConvertOp to color space
    CS_GRAY apparently converts orange to 244,244,0
  - S7159445, PR3013: (javac) emits inaccurate diagnostics for
    enhanced for-loops
  - S7175845, PR1437, RH1207129: 'jar uf' changes file
    permissions unexpectedly
  - S8005402, PR3020: Need to provide benchmarks for color
    management
  - S8005530, PR3020: [lcms] Improve performance of ColorConverOp
    for default destinations
  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not
    transferred from source to destination.
  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java
    fails with java.io.StreamCorruptedException: invalid type
    code: EE since 8b87
  - S8014286, PR3075: failed java/lang/Math/DivModTests.java
    after 6934604 changes
  - S8014959, PR3075: assert(Compile::current()-&gt;live_nodes() &lt; (uint)MaxNodeLimit)
    failed: Live Node limit exceeded limit
  - S8019247, PR3075: SIGSEGV in compiled method
    c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object
  - S8024511, PR3020: Crash during color profile destruction
  - S8025429, PR3020: [parfait] warnings from b107 for
    sun.java2d.cmm: JNI exception pending
  - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for
    Java_awt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java
    fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when
    compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt
    can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created
    by C2's string concat optimization may escape
  * Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where
    linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports
    text/x-java-source
  - PR3115: Add check for elliptic curve cryptography
    implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  * AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during
    garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate
    instructions are never emitted
- Removed patch:
  * hotspot-aarch64-fix-48bit-va.patch
  - fixed upstream
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1473854400">- Disable arm32 JIT, since its build broken
  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)</changelog>
  <changelog author="fstrba@suse.com" date="1479124800">- Update to 2.6.8 - OpenJDK 7u121
  * Security fixes
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3207, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * Import of OpenJDK 7 u121 build 0
    + S6624200: Regression test fails:
    test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S7090158: Networking Libraries don't build with javac -Werror
    + S7125055: ContentHandler.getContent API changed in error
    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
    windows
    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before
    start test
    + S8000626: Implement dead key detection for KeyEvent on Linux
    + S8003890: corelibs test scripts should pass TESTVMOPTS
    + S8005629: javac warnings compiling
    java.awt.EventDispatchThread and sun.awt.X11.XIconWindow
    + S8010297: Missing isLoggable() checks in logging code
    + S8010782: clean up source files containing carriage return
    characters
    + S8014431: cleanup warnings indicated by the -Wunused-value
    compiler option on linux
    + S8015265: revise the fix for 8007037
    + S8016747: Replace deprecated PlatformLogger isLoggable(int)
    with isLoggable(Level)
    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame
    demo
    + S8024756: method grouping tabs are not selectable
    + S8026741: jdk8 l10n resource file translation update 5
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048357: PKCS basic tests
    + S8049171: Additional tests for jarsigner's warnings
    + S8059177: jdk8u40 l10n resource file translation update 1
    + S8075584: test for 8067364 depends on hardwired text advance
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8077953: [TEST_BUG]
    com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
    Compilation failed after JDK-8077387
    + S8080628: No mnemonics on Open and Save buttons in
    JFileChooser
    + S8083601: jdk8u60 l10n resource file translation update 2
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8143134: L10n resource file translation update
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
    opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8159684: (tz) Support tzdata2016f
    + S8160934: isnan() is not available on older MSVC compilers
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S6604109, PR3162:
    javax.print.PrintServiceLookup.lookupPrintServices fails
    SOMETIMES for Cups
    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe
    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh
    failed on 7u45 Embedded linux-ppc*
    + S8028479, PR3162: runNameEquals still cannot precisely detect
    if a usable native krb5 is available
    + S8034057, PR3162: Files.getFileStore and Files.isWritable do
    not work with SUBST'ed drives (win)
    + S8038491, PR3162: Improve synchronization in ZipFile.read()
    + S8038502, PR3162: Deflater.needsInput() should use
    synchronization
    + S8059411, PR3162: RowSetWarning does not correctly chain
    warnings
    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column
    range validation to isdefinitlyWritable
    + S8066188, PR3162: BaseRowSet returns the wrong default value
    for escape processing
    + S8072466, PR3162: Deadlock when initializing MulticastSocket
    and DatagramSocket
    + S8075118, PR3162: JVM stuck in infinite loop during
    verification
    + S8076579, PR3162: Popping a stack frame after exception
    breakpoint sets last method param to exception
    + S8078495, PR3162: End time checking for native TGT is wrong
    + S8078668, PR3162: jar usage string mentions unsupported
    option '-n'
    + S8080115, PR3162: (fs) Crash in libgio when calling
    Files.probeContentType(path) from parallel threads
    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for
    TimeZone parsing problem
    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when
    closing the LDAP context
    + S8130136, PR3162: Swing window sometimes fails to repaint
    partially when it becomes exposed
    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails
    when two successive stores in an iteration are determined to
    be equal
    + S8132551, PR3162: Initialize local variables before returning
    them in p11_convert.c
    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails
    after changes for JDK-8080115
    + S8133666, PR3162: OperatingSystemMXBean reports abnormally
    high machine CPU consumption on Linux
    + S8135002, PR3162: Fix or remove broken links in
    objectMonitor.cpp comments
    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate
    + S8137230, PR3162: TEST_BUG:
    java/nio/channels/FileChannel/LoopingTruncate.java timed out
    + S8139373, PR3162: [TEST_BUG]
    java/net/MulticastSocket/MultiDead.java failed with timeout
    + S8140249, PR3162: JVM Crashing During startUp If Flight
    Recording is enabled
    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c
    + S8144483, PR3162: One long Safepoint pause directly after
    each GC log rotation
    + S8149611, PR3160, G592292: Add tests for
    Unsafe.copySwapMemory
  * Bug fixes
    + S8078628, PR3151: Zero build fails with pre-compiled headers
    disabled
    + PR3128: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3131: PaX marking fails on filesystems which don't support
    extended attributes
    + PR3135: Makefile.am rule
    stamps/add/tzdata-support-debug.stamp has a typo in
    add-tzdata dependency
    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build
    + PR3166: invalid zip timestamp handling leads to error
    building bootstrap-javac
    + PR3202: Update infinality configure test
    + PR3212: Disable ARM32 JIT by default
  * CACAO
    + PR3136: CACAO is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * JamVM
    + PR3134: JamVM is broken due to 2 new native methods in
    sun.misc.Unsafe (from S8158260)
  * AArch64 port
    + S8167200, PR3204: AArch64: Broken stack pointer adjustment
    in interpreter
    + S8168888: Port 8160591: Improve internal array handling to
    AArch64.
    + PR3211: AArch64 build fails with pre-compiled headers
    disabled
- Changed patch:
  * java-1_7_0-openjdk-gcc6.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1487073600">- Update to 2.6.9 - OpenJDK 7u131 (bsc#1020905)
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * Import of OpenJDK 7 u131 build 0
  - S6253144: Long narrowing conversion should describe the
    algorithm used and implied "risks"
  - S6328537: Improve javadocs for Socket class by adding
    references to SocketOptions
  - S6978886: javadoc shows stacktrace after print error
    resulting from disk full
  - S6995421: Eliminate the static dependency to
    sun.security.ec.ECKeyFactory
  - S6996372: synchronizing handshaking hash
  - S7027045: (doc) java/awt/Window.java has several typos in
    javadoc
  - S7054969: Null-check-in-finally pattern in java/security
    documentation
  - S7072353: JNDI libraries do not build with javac -Xlint:all
  - Werror
  - S7075563: Broken link in "javax.swing.SwingWorker"
  - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11
  - S7088502: Security libraries don't build with javac -Werror
  - S7092447: Clarify the default locale used in each locale
    sensitive operation
  - S7093640: Enable client-side TLS 1.2 by default
  - S7103570: AtomicIntegerFieldUpdater does not work when
    SecurityManager is installed
  - S7117360: Warnings in java.util.concurrent.atomic package
  - S7117465: Warning cleanup for IMF classes
  - S7187144: JavaDoc for ScriptEngineFactory.getProgram()
    contains an error
  - S8000418: javadoc should used a standard "generated by
    javadoc" string
  - S8000666: javadoc should write directly to Writer instead of
    composing strings
  - S8000673: remove dead code from HtmlWriter and subtypes
  - S8000970: break out auxiliary classes that will prevent
    multi-core compilation of the JDK
  - S8001669: javadoc internal DocletAbortException should set
    cause when appropriate
  - S8008949: javadoc stopped copying doc-files
  - S8011402: Move blacklisting certificate logic from hard code
    to data
  - S8011547: Update XML Signature implementation to Apache
    Santuario 1.5.4
  - S8012288: XML DSig API allows wrong tag names and extra
    elements in SignedInfo
  - S8016217: More javadoc warnings
  - S8017325: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.cert
  - S8017326: Cleanup of the javadoc &lt;code&gt; tag in
    java.security.spec
  - S8019772: Fix doclint issues in javax.crypto and
    javax.security subpackages
  - S8020557: javadoc cleanup in javax.security
  - S8020688: Broken links in documentation at
    http://docs.oracle.com/javase/6/docs/api/index.
  - S8021108: Clean up doclint warnings and errors in java.text
    package
  - S8021417: Fix doclint issues in java.util.concurrent
  - S8021833: javadoc cleanup in java.net
  - S8022120: JCK test
    api/javax_xml/crypto/dsig/TransformService/index_ParamMethods
    fails
  - S8022175: Fix doclint warnings in javax.print
  - S8022406: Fix doclint issues in java.beans
  - S8022746: List of spelling errors in API doc
  - S8024779: [macosx] SwingNode crashes on exit
  - S8025085: [javadoc] some errors in javax/swing
  - S8025218: [javadoc] some errors in java/awt classes
  - S8025249: [javadoc] fix some javadoc errors in javax/swing/
  - S8025409: Fix javadoc comments errors and warning reported by
    doclint report
  - S8026021: more fix of javadoc errors and warnings reported by
    doclint, see the description
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8049244: XML Signature performance issue caused by
    unbuffered signature data
  - S8049432: New tests for TLS property jdk.tls.client.protocols
  - S8050893: (smartcardio) Invert reset argument in tests in
    sun/security/smartcardio
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8068279: (typo in the spec)
    javax.script.ScriptEngineFactory.getLanguageName
  - S8068491: Update the protocol for references of
    docs.oracle.com to HTTPS.
  - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
  - S8076369: Introduce the jdk.tls.client.protocols system
    property for JDK 7u
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8143959: Certificates requiring blacklisting
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8148516: Improve the default strength of EC in JDK
  - S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8155760: Implement Serialization Filtering
  - S8156802: Better constraint checking
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168993: JDK8u121 L10n resource file update
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  - S8173622: Backport of 7180907 is incomplete
  - S8173849: Fix use of java.util.Base64 in test cases
  - S8173854: [TEST] Update DHEKeySizing test case following
    8076328 &amp; 8081760
  * Backports
  - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on
    __APPLE__and _LLP64 systems.
  - S8000351, PR3316, RH1390708: Tenuring threshold should be
    unsigned
  - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8170888, PR3316, RH1390708: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  * Bug fixes
  - PR3318: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3318: Fix compatibility with vanilla Fontconfig
  - PR3318: Fix glyph y advance
  - PR3318: Always round glyph advance in 26.6 space
  - PR3318: Simplify glyph advance handling
  - PR3324: Fix NSS_LIBDIR substitution in
    make_generic_profile.sh broken by PR1989
  * AArch64 port
  - S8165673, PR3320: AArch64: Fix JNI floating point argument
    handling</changelog>
  <changelog author="rguenther@suse.com" date="1490011200">- Add java-1_7_0-openjdk-libjvm-link.patch to link libjvm and libmawt
  with g++ to support the mix of GCC 6 java and GCC 7 C++ compiler.
- Get ecj.jar path from gcj, use the gcc variant that provides Java
  to build C code to make sure jni.h is available.</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR3347: jstack.stp should support AArch64
  * Import of OpenJDK 7 u141 build 0
  - S4717864: setFont() does not update Fonts of Menus already on
    screen
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6518907: cleanup IA64 specific code in Hotspot
  - S6869327: Add new C2 flag to keep safepoints in counted loops.
  - S7112912: Message "Error occurred during initialization of
    VM" on boxes with lots of RAM
  - S7124213: [macosx] pack() does ignore size of a component;
    doesn't on the other platforms
  - S7124219: [macosx] Unable to draw images to fullscreen
  - S7124552: [macosx] NullPointerException in getBufferStrategy()
  - S7148275: [macosx] setIconImages() not working correctly
    (distorted icon when minimized)
  - S7154841: [macosx] Popups appear behind taskbar
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7160627: [macosx] TextArea has wrong initial size
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S7168851: [macosx] Netbeans crashes in
    CImage.nativeCreateNSImageFromArray
  - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,
    compile error
  - S8005255: [macosx] Cleanup warnings in sun.lwawt
  - S8006088: Incompatible heap size flags accepted by VM
  - S8007295: Reduce number of warnings in awt classes
  - S8010722: assert: failed: heap size is too big for compressed
    oops
  - S8011059: [macosx] Support automatic @2x images loading on
    Mac OS X
  - S8014058: Regression tests for 8006088
  - S8014489:
    tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags
    jtreg tests invoke wrong class
  - S8016302: Change type of the number of GC workers to unsigned
    int (2)
  - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does
    not compile.
  - S8024669: Native OOME when allocating after changes to
    maximum heap supporting Coops sizing on sparcv9
  - S8024926: [macosx] AquaIcon HiDPI support
  - S8025974: l10n for policytool
  - S8027025: [macosx] getLocationOnScreen returns 0 if parent
    invisible
  - S8028212: Custom cursor HiDPI support
  - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck
    optimization.
  - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't
    rendered in high resolution on Retina
  - S8033534: [macosx] Get MultiResolution image from native
    system
  - S8033786: White flashing when opening Dialogs and Menus using
    Nimbus with dark background
  - S8035568: [macosx] Cursor management unification
  - S8041734: JFrame in full screen mode leaves empty workspace
    after close
  - S8059803: Update use of GetVersionEx to get correct Windows
    version in hs_err files
  - S8066504: GetVersionEx in
    java.base/windows/native/libjava/java_props_md.c might not
    get correct Windows version 0
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8133357: 8u65 l10n resource file translation update
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993: G1 crashes if active_processor_count changes during
    startup
  - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new
    build on AIX (jdk part)"
  - S8175163: [bsd] Fix build after "8005629: javac warnings
    compiling java.awt.EventDispatchThread..."
  - S8176044: (tz) Support tzdata2017a
  * Import of OpenJDK 7 u141 build 1
  - S8043723: max_heap_for_compressed_oops() declared with
    size_t, but defined with uintx
  * Import of OpenJDK 7 u141 build 2
  - S8011123: serialVersionUID of
    java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82
  * Backports
  - S6515172, PR3362: Runtime.availableProcessors() ignores Linux
    taskset command
  - S8011621, PR3209: live_ranges_in_separate_class.patch
  - S8022284, PR3209: Hide internal data structure in PhaseCFG
  - S8023003, PR3209: Cleanup the public interface to PhaseCFG
  - S8023691, PR3209: Create interface for nodes in class Block
  - S8023988, PR3209: Move local scheduling of nodes to the CFG
    creation and code motion phase (PhaseCFG)
  - S8043780, PR3369: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8157306, PR3209: Random infrequent null pointer exceptions
    in javac
  - S8173783, PR3329: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173941, PR3330: SA does not work if executable is DSO
  - S8174729, PR3361: Race Condition in
    java.lang.reflect.WeakCache
  * Bug fixes
  - PR3349: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh
  - PR3379: Perl should be mandatory
  - PR3390: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * CACAO
  - PR2732: Raise javadoc memory limits for CACAO again!
  * AArch64 port
  - S8177661, PR3367: Correct ad rule output register types from
    iRegX to iRegXNoSp
- Removed patch:
  * java-1_7_0-openjdk-gcc6.patch
  - Not needed anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Own /usr/lib64/jvm-exports as 1.8.0 and newer do because it is
  no longer in javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1499428800">- Disable rhino in bootstrap build. Should fix build cycle.</changelog>
  <changelog author="mgorse@suse.com" date="1501848000">- Add no-exec-shield-workaround.patch: drop exec shield
  workaround, since it crashes on recent kernels, and Exec Shield
  is gone (boo#1052318).</changelog>
  <changelog author="fstrba@suse.com" date="1502280000">- Update to 2.6.11 - OpenJDK 7u151
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup
    processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, bsc#1049307, PR3423: AArch64: Image
    conversion improvements
  - S8184119, CVE-2017-10111, bsc#1049322: Incorrect return
    processing for the LF editor of MethodHandles.permuteArguments
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049331, CVE-2017-10198: Incorrect enforcement of
    certificate path restrictions
  - bsc#1049330, CVE-2017-10193: Incorrect key size constraint
    check
  * Import of OpenJDK 7 u151 build 0
  - S7117357: Warnings in sun.instrument, tools and other sun.*
    classes
  - S7117570: Warnings in sun.mangement.* and its subpackages
  - S7143230: fix warnings in java.util.jar, sun.tools.jar, zipfs
    demo, etc.
  - S8022440: suppress deprecation warnings in sun.rmi
  - S8024069: replace_in_map() should operate on parent maps
  - S8026796: Make replace_in_map() on parent maps generic
  - S8030787: [Parfait] JNI-related warnings from b119 for
    jdk/src/share/native/sun/awt/image
  - S8030875: Macros for checking and returning on exceptions
  - S8031737: CHECK_NULL and CHECK_EXCEPTION macros cleanup
  - S8034912: backport of 8031737 to jdk8u breaks linux buld.
  - S8035629: [parfait] JNI exc pending in
    jdk/src/windows/native/sun/windows/ShellFolder2.cpp
  - S8037287: Windows build failed after JDK-8030787
  - S8048703: ReplacedNodes dumps it's content to tty
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8143377: Test PKCS8Test.java fails
  - S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
  - S8155690: Update libPNG library to the latest up-to-date
  - S8156804: Better constraint checking (sync with upstream
    version)
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8174164: SafePointNode::_replaced_nodes breaks with
    irreducible loops
  - S8175097: [TESTBUG] 8174164 fix missed the test
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8179887: Build failure with glibc &gt;= 2.24: error:
    'int readdir_r(DIR*, dirent*, dirent**)' is deprecated
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8182054: Improve wsdl support
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  - S8185501: Missing import in JAXP code
  - S8185502: No overflow operator on OpenJDK 7
  * Import of OpenJDK 7 u151 build 1
  - S8185716: OpenJDK 7 PPC64 port uses a different ins_encode
    format in ppc.ad
  * Backports
  - S7177216, PR3398, RH1446700: native2ascii changes file
    permissions of input file
  - S8179084, PR3410, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8181419, PR3414, RH1463144: Race in jdwp invoker handling may
    lead to crashes or invalid results
  * AArch64 port
  - S8144028, PR3431: Use AArch64 bit-test instructions in C2
  - S8152537, PR3431: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
- Modified patch:
  * java-1.7.0-openjdk-java-access-bridge-security.patch
  - rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1503748800">- Added patch:
  * fix-aarch64-build.patch
  - Fix build breakage in aarch64 port</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1512561600">- Update to 2.6.12 - OpenJDK 7u161
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274, bsc#1064071: Handle smartcard clean
    up better
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281, bsc#1064072: Better queuing
    priorities
    + S8174966, CVE-2017-10285, bsc#1064073: Unreferenced references
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295, bsc#1064075: Better URL connections
    + S8178794, CVE-2017-10388, bsc#1064086: Correct Kerberos ticket
    grants
    + S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
    + S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain
    connections
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346, bsc#1064078: Better invokespecial
    checks
    + S8181100, CVE-2017-10350, bsc#1064082: Better Base Exceptions
    + S8181323, CVE-2017-10347, bsc#1064079: Better timezone
    processing
    + S8181327, CVE-2017-10349, bsc#1064081: Better X processing
    + S8181370, CVE-2017-10345, bsc#1064077: Better keystore
    handling
    + S8181432, CVE-2017-10348, bsc#1064080: Better processing of
    unresolved permissions
    + S8181597, CVE-2017-10357, bsc#1064085: Process Proxy
    presentation
    + S8181612, CVE-2017-10355, bsc#1064083: More stable connection
    processing
    + S8181692, CVE-2017-10356, bsc#1064084: Update storage
    implementations
    + S8183028, CVE-2016-10165, bsc#1064069: Improve CMS header
    processing
    + S8184682, CVE-2016-9840, CVE-2016-9841, bsc#1064070,
    CVE-2016-9842, CVE-2016-9843: Upgrade compression library
  * Import of OpenJDK 7 u161 build 0
    + S6475361: Attempting to remove help menu from
    java.awt.MenuBar throws NullPointerException
    + S6637288: Add OCSP support to PKIX CertPathBuilder
    implementation
    + S6854712: Revocation checking enhancements (JEP-124)
    + S6904367: (coll) IdentityHashMap is resized before exceeding
    the expected maximum size
    + S7015157: String "Tabular Navigation" should be rephrased for
    avoiding mistranslation
    + S7115744: Do not call File::deleteOnExit in security tests
    + S7126011: ReverseBuilder.getMatchingCACerts may throws NPE
    + S7147336: clarification on warning of keytool -printcrl
    + S7162687: enhance KDC server availability detection
    + S7176627: CertPath/jep124/PreferCRL_SoftFail test fails
    (Could not determine revocation status)
    + S7195409:
    CertPath/CertPathValidatorTest/KeyParamsInheritanceTest fails
    with NullPointerException
    + S7196382: PKCS11 provider should support 2048-bit DH
    + S7197672: There are issues with shared data on windows
    + S7199939: DSA 576 and 640 bit keys fail when initializing for
    No precomputed parameters
    + S8002074: Support for AES on SPARC
    + S8005408: KeyStore API enhancements
    + S8006863: javadoc cleanup for 8005408
    + S8006946: PKCS12 test failure due to incorrect alias name
    + S8006951: Avoid storing duplicate PKCS12 attributes
    + S8006994: Cleanup PKCS12 tests to ensure streams get closed
    + S8007483: attributes are ignored when loading keys from a
    PKCS12 keystore
    + S8007967: Infinite loop can happen in
    sun.security.provider.certpath.SunCertPathBuilder.depthFirstSearchForward()
    + S8010112: NullPointerException in
    sun.security.provider.certpath.CertId()
    + S8012900: CICO ignores AAD in GCM mode (with refactoring from
    6996769)
    + S8015571: OCSP validation fails if
    ocsp.responderCertSubjectName is set
    + S8016252: More defensive HashSet.readObject
    + S8025215: jdk8 l10n resource file translation update 4
    + S8026943: SQE test jce/Global/Cipher/SameBuffer failed
    + S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8029788: Certificate validation -
    java.lang.ClassCastException
    + S8031825: OCSP client can't find responder cert if it uses a
    different subject key id algorithm than responderID
    + S8033117: PPC64: Adapt to 8002074: Support for AES on SPARC
    + S8035623: [parfait] JNI exception pending in
    jdk/src/windows/native/sun/windows/awt_Font.cpp
    + S8049312: AES/CICO test failed with on several modes
    + S8050374: More Signature tests
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8062552: Support keystore type detection for JKS and PKCS12
    keystores
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8068881: SIGBUS in C2 compiled method
    weblogic.wsee.jaxws.framework.jaxrpc.EnvironmentFactory$SimulatedWsdlDefinitions.&lt;init&gt;
    + S8075484, PR3474, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8079129: NullPointerException in PKCS#12 Keystore in
    PKCS12KeyStore.java
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8136534: Loading JKS keystore using non-null InputStream
    results in closed stream
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165751: NPE hit with java.security.debug=provider
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8176536: Improved algorithm constraints checking
    + S8177569: keytool should not warn if signature algorithm used
    in cacerts is weak
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for JDK 1.6.0 u161
    b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184673, PR3476: Fix compatibility issue in AlgorithmChecker
    for 3rd party JCE providers
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8191137: keytool fails to format resource strings for keys
    for some languages after JDK-8171319
    + S8191840: Update localizations with positional arguments
    following JDK-8191137
    + S8191845: [TEST_BUG] Too many new-lines in backport of
    WeakAlg test
  * Import of OpenJDK 7 u151 build 1
    + S8035640: JNU_CHECK_EXCEPTION should support c++ JNI syntax
  * Backports
    + S8138745, PR3465, RH1484399: Implement ExitOnOutOfMemory and
    CrashOnOutOfMemory in HotSpot
    + S8185164, PR3433: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8188030, PR3460, RH1484079: AWT java apps fail to start when
    some minimal fonts are present
  * Bug fixes
    + PR3470, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
    + PR3480, RH1486025: ECC and NSS JVM crash
  * AArch64 port
    + S8145438, PR3443, RH1482244: Guarantee failures since
    8144028: Use AArch64 bit-test instructions in C2
    + PR3497: AArch64: Adapt to 8002074: Support for AES on SPARC
- Removed patch:
  * fix-aarch64-build.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to 2.6.13 - OpenJDK 7u171 (January 2018 CPU) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 7 u171 build 0
    + S7171982: Cipher getParameters() throws RuntimeException:
    Cannot find SunJCE provider
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022532: [parfait] Potential memory leak in gtk2_interface.c
    + S8031003: [Parfait] warnings from
    jdk/src/share/native/sun/security/jgss/wrapper: JNI exception
    pending
    + S8035105: DNS provider cleanups
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8044193: Need to add known answer tests for AES cipher
    + S8048601: Tests for JCE crypto ciphers (part 1)
    + S8048819: Implement reliability test for DH algorithm
    + S8072452: Support DHE sizes up to 8192-bits and DSA sizes up
    to 3072-bits
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java
    timeouts intermittently
    + S8141243: Unexpected timezone returned after parsing a date
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8147969: Print size of DH keysize when errors are encountered
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3505: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of SupportedEllipticCurvesExtension.java
    + S8157548: JVM crashes sometimes while starting
    + S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
    + S8158116: com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java
    failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8163958: Improved garbage collection [test case]
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8180048: Interned string and symbol table leak memory during
    parallel unlinking
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187667, PR3518: Disable deprecation warning for readdir_r
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3500: (tz) Support tzdata2017c
    + S8190259, PR3500: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194859: Bad backport of 8024468 breaks Zero build due to
    lack of 8010862 in OpenJDK 7
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
  * Import of OpenJDK 7 u171 build 1
    + S8007772: G1: assert(!hr-&gt;isHumongous() || mr.start() ==
    hr-&gt;bottom()) failed: the start of HeapRegion and MemRegion
    should be consistent for humongous regions
    + S8022956: Clang: enable return type warnings on BSD
    + S8043029: Change 8037816 breaks HS build with older GCC
    versions which don't support diagnostic pragmas
    + S8048169: Change 8037816 breaks HS build on PPC64 and
    CPP-Interpreter platforms
    + S8062808: Turn on the -Wreturn-type warning
    + S8064786: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8143245: Zero build requires disabled warnings
    + S8196952, PR3525: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8196978: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6
    + S8197510: fastdebug builds fail due to lack of p2i
    + S8197801: Zero debug build fails on
    "assert(labs(istate-&gt;_stack_base - istate-&gt;_stack_limit) ==
    (istate-&gt;_method-&gt;max_stack() + extra_stack_entries + 1))
    failed: bad stack limit"
  * Import of OpenJDK 7 u171 build 2
    + S8197981: Missing return statement in
    __sync_val_compare_and_swap_8
  * Backports
    + S7189886, PR3507: (aio) Add test coverage for
    AsynchronousChannelGroup.withThreadPool
    + S7200306, PR3507: SunPKCS11 provider delays the check of DSA
    key size for SHA1withDSA to sign() instead of init()
    + S8012930, PR3507: (fs) Eliminate recursion from FileTreeWalker
    + S8013647, PR3507: JPRT unable to clean-up after tests that
    leave file trees with loops
    + S8020321, PR3507: Problem in PKCS11 regression test
    TestRSAKeyLength
    + S8022313, PR3507:
    sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in
    aurora
    + S8027218, PR3507: TEST_BUG: sun/security/pkcs11/ec tests fail
    because of ever-changing key size restrictions
    + S8029158, PR3507:
    sun/security/pkcs11/Signature/TestDSAKeyLength.java does not
    compile (or run)
    + S8031113, PR3507: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
    + S8048603, PR3507: Additional tests for MAC algorithms
    + S8048622, PR3507: Enhance tests for PKCS11 keystores with NSS
    + S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
    + S8075670, PR3507: Remove intermittent keyword from some tests
    + S8078334, PR3507: Mark regression tests using randomness
    + S8078880, PR3507: Mark a few more intermittently failuring
    security-libs
    + S8133318, PR3507: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
    + S8144539, PR3507: Update PKCS11 tests to run with security
    manager
    + S8151731, PR3337: Add new jtreg keywords to jdk 8
    + S8165996, PR3507: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3507: Some PKCS11 test cases are ignored with
    security manager
    + S8196516, PR3524: [REDO] [linux] libfontmanager should be
    linked against headless awt library
  * AArch64 port
    + S8193133, PR3521: Assertion failure because 0xDEADDEAD can be
    in-heap
    + PR3521: Fix functions with missing return value.
    + PR3521: Fix further functions with a missing return value.
- Modified patch:
  * openjdk-7-src-b147-no-return-in-nonvoid-hotspot.patch
    + remove hunk fixed upstream
- Removed patch:
  * java-1_7_0-openjdk-zero-annotate-aborting-functions-zero.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527163200">- Update to 2.6.14 - OpenJDK 7u181 (April 2018 CPU)
  * Security fixes
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * Import of OpenJDK 7 u181 build 0
    + S7132338: Use @code friendly idiom for '\' in javadoc
    + S8001419: Build the JCE portion of JDK-8000970
    + S8019360: Cleanup of the javadoc &lt;code&gt; tag in java.security.*
    + S8020842: IDN do not throw IAE when hostname ends with a
    trailing dot
    + S8024068: sun/security/ssl/javax/net/ssl/ServerName/
    /IllegalSNIName.java fails
    + S8026982: javadoc errors in core libs
    + S8029020: Check src/share/native/java/util/zip code for JNI
    pending exceptions
    + S8029475: Fix more doclint issues in javax.security
    + S8034031: [parfait] JNI exception pending in
    jdk/src/macosx/native/apple/security/KeystoreImpl.m
    + S8054213: Class name repeated in output of Type.toString()
    + S8064524: Compiler code generation improvements
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than  224 bits
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189789: tomcat gzip-compressed response bodies appear to be
    broken in update 151
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198963: Fix new rmi property name
    + S8200760: java.security-linux was missed in backport of
    JDK-8160104
  * Import of OpenJDK 7 u181 build 1
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
    + S8202850: Fix for 8189123 doesn't include precompiled header
  * Backports
    + S8185723, PR3555: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3558: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8197429, PR3547, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8200556, PR3567: AArch64 port crashes on slowdebug builds
    + S8201509, PR3580: Zero's atomic_copy64() broken on s390
  * Bug fixes
    + PR3551: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3576, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3595: Bootstrapping with IcedTea 2.x as the bootstrap JDK
    broken by import of 7u181-b01
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to 2.6.16 - OpenJDK 7u201 (October 2018 CPU)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3640, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * Import of OpenJDK 7 u201 build 0
    + S7058700: Unexpected exceptions and timeouts in SF2 parser
    code
    + S7098755: test/sun/misc/JarIndex/metaInfFilenames/Basic.java
    should use supported compiler interface
    + S7104650: rawtype warnings in several net, nio and security
    source files
    + S7116722: Miscellaneous warnings sun.misc (and related
    classes)
    + S7117249: fix warnings in java.util.jar, .logging, .prefs,
    .zip
    + S7142888: sun/security/tools/jarsigner/ec.sh fail on sparc
    + S8044860: Vectors and fixed length fields should be verified
    for allowed sizes.
    + S8049834: Two security tools tests do not run with only JRE
    + S8054431: Some of the input validation in the javasound is
    too strict
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168405: Pending exceptions in java.base/windows/native
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8204667: Resources not freed on exception
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
- Update to 2.6.15 - OpenJDK 7u191 (July 2018 CPU)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3608, CVE-2018-3639 hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3629: Install symlinks to tapsets in SystemTap directory
    + PR3657: Sync desktop files with Fedora/RHEL versions again
    + PR3659: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  * Import of OpenJDK 7 u191 build 0
    + S8005661: [parfait] Possible buffer overrun in
    jdk/src/solaris/native/sun/awt/awt_GraphicsEnv.c
    + S8005695: [parfait] Format string argument mismatch in
    jdk/src/solaris/native/sun/xawt/XToolkit.c
    + S8005752: [parfait] False positive function call mismatch at
    jdk/src/solaris/native/sun/xawt/XWindow.c
    + S8034856: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
    + S8034857: gcc warnings compiling
    src/solaris/native/sun/management
    + S8035054: JarFacade.c should not include ctype.h
    + S8035287: gcc warnings compiling various libraries files
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8205491: adjust reflective access checks
    + S8205587, PR3606: Implicit function declaration in jni_util.c
  * Import of OpenJDK 7 u191 build 1
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8196224: Even better Internet address support
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * Import of OpenJDK 7 u191 build 2
    + S8207151, PR3604: Frequent JVM Crash SIGSEGV same stacktrace
    location during tomcat start with hibernate init on
    7u181-2.6.14-0ubuntu0.1
  * Backports
    + S8075942, PR3605: ArrayIndexOutOfBoundsException in
    sun.java2d.pisces.Dasher.goTo
  * Bug fixes
    + PR3616: Don't include timestamps in generated documentation
    + PR3631: Use ${datadir} when specifying default tz.properties
    location
    + PR3652: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3663: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * SystemTap
    + PR3633: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * AArch64 port
    + S8207345, PR3614: Trampoline generation code reads from
    uninitialized memory
    + PR3615: Fix whitespace in hotspot/src/cpu/aarch64
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
    + Rediff to a new context</changelog>
</package>
<package pkgid="721c9b5afcb9d3cc4761ca4e7c68e020e4925e8dd5ed3c3bcd1f6689a6e69857" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.144" rel="13.3"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
</package>
<package pkgid="25cc8c863bd6d3358de4febf2206fa97696a35fcb43ded0ccaee74f5ea63aa8a" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.144" rel="13.3"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
</package>
<package pkgid="1c30bc35c59a7d161db2f5b04d8119c673e46aa53d1e766141d02e6512801783" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.144" rel="15.2"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
</package>
<package pkgid="f31ffdf3e251af24d3a9be4f390b6a35cf2007ac0184cdedaab57a8938451af2" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.144" rel="15.2"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
</package>
<package pkgid="c611fbc5e2b3d079258ddf1e149684316727f5fe989e6bbe129f1e726cc1653b" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.151" rel="18.1"/>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
</package>
<package pkgid="f1cf59c045524898df23f5706cc40233dbaeb89edb4c48af5f6f250a8df82438" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.151" rel="18.1"/>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
</package>
<package pkgid="516ab8503933dff74982ac598f8bd65e5abaa8a331a35711e7bf7f48dd781329" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.161" rel="21.1"/>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
</package>
<package pkgid="6238c300ff999fe6e0389377a7ebb67771c9a3a845492014debf64fe3deabd20" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.161" rel="21.1"/>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
</package>
<package pkgid="8a3e7a233b55c10ddc665821be6e8c2af4e5cc29bed642ed0b65d97c6b95d52b" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.171" rel="24.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="3986d4065328a140fb4b0b220fab34a842634531368b32b166439b2e7da1ecb8" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="24.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="1ab5d0894a8cb996b827211821bc548def4f9c155e0f60bd848d4cb79a2232ad" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.181" rel="27.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="cd770a733269420e30e17ef9fe9ae46fdfc32adcb392fed2c11f83631072778d" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="27.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="4b29c99965d90b7167e4a8f1d20251a06d1fcb76cc1a0a2b68f5eac9d5473f13" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.191" rel="30.1"/>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
</package>
<package pkgid="c638b0072f19ad4e020a3abcb2e8f9785ff5e081201d02c51ba948807fc35741" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.191" rel="30.1"/>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
</package>
<package pkgid="c2288ec13ae790c2b197bc593fd1658e15dce299d0e5d62033a5ac89dbbcb34d" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.144" rel="13.3"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
  <changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
  <changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
</package>
<package pkgid="cf38b30b0145f0f4bf3da2eb968988b0be2cd5f3641d7dbbb4a402691561bff1" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.144" rel="15.2"/>
  <changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
  <changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
  <changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
  <changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
  <changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
  <changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
  <changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
  <changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
  <changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
  <changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
  <changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
  <changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
  <changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to p